Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa
File: z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa (raw, json)
Hash identifier: fuLjtl/3907DpvgbtDEnlRo9TuO4fHpBCWf+0D3MpjQ=
Subject key identifier: CF:F3:1F:DE:03:CD:FA:EC:28:35:52:F2:6C:9A:92:1A:B2:B3:41:BB
Certificate issuer: /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial: 1F
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa
Signing time: Fri 01 Dec 2023 05:36:38 +0000
ROA not before: Fri 01 Dec 2023 05:36:38 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 55385
IP address blocks: 133.247.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Validity
Not Before: Dec 1 05:36:38 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=CFF31FDE03CDFAEC283552F26C9A921AB2B341BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:21:bb:90:ca:57:ee:a2:9f:ff:e3:3e:e8:
55:9f:09:6a:1f:6f:c0:e4:2d:49:cb:1a:3c:78:4e:
83:08:f8:a1:75:47:ba:84:fe:87:d5:d2:3a:7f:23:
e0:1d:5d:f7:02:2f:26:a3:93:73:e1:d6:6c:47:bd:
88:18:18:a7:be:06:f1:74:1a:42:f1:1e:2f:d1:60:
3b:3e:1d:6f:f5:e2:50:95:7a:e8:d7:b8:13:2b:09:
55:cf:eb:8c:3f:8e:7a:a9:68:10:ed:52:44:69:e4:
31:5d:50:83:13:55:e5:42:45:f3:68:7f:3c:14:d0:
ca:50:52:2f:7a:69:3f:09:de:d1:ef:2a:ad:5b:36:
53:89:27:68:3c:cd:c9:0b:dd:af:70:da:fa:e9:ee:
34:37:14:8d:85:8b:d2:39:a2:bf:9d:e1:a4:e3:4d:
83:2e:a9:05:fa:ae:0c:23:8f:ec:f3:e7:f8:d3:03:
60:2c:cf:db:a2:7b:b5:3f:c2:0c:02:cd:1f:45:04:
ae:7c:57:48:ed:a6:80:be:95:af:74:b2:ac:c2:d2:
49:ed:ac:a6:6c:21:d2:f0:df:51:cf:cf:7d:89:97:
77:37:41:2f:9a:b1:f7:73:fd:e7:94:f4:6b:af:36:
f6:5e:1b:24:2b:65:93:59:54:5c:23:aa:55:36:cc:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:1F:DE:03:CD:FA:EC:28:35:52:F2:6C:9A:92:1A:B2:B3:41:BB
X509v3 Authority Key Identifier:
keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.247.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:a5:17:5b:bc:87:04:f9:c9:74:a2:bb:1f:a0:f9:34:65:02:
b2:fd:04:21:21:e3:e1:75:70:6c:d0:75:61:33:b5:16:a0:61:
4a:96:3d:93:25:2c:73:e6:6f:aa:6e:29:52:c2:66:52:01:80:
34:fa:65:53:cc:8b:3d:af:0f:2c:d6:2a:89:28:9f:7b:4d:c0:
cb:54:29:11:8f:a3:bc:ea:8b:c5:58:87:2c:46:c6:4b:75:f3:
d9:2b:c9:52:56:9f:7c:77:b2:9d:9c:cc:d5:30:1c:25:e4:1a:
6e:03:35:36:a2:0f:93:b0:de:51:13:99:89:96:43:e0:ec:27:
47:3c:37:77:32:12:f3:a0:a4:9e:ed:ca:a8:e4:32:08:c7:a8:
ef:ff:22:18:cb:b6:1e:fa:e2:0b:9a:23:55:d9:ba:21:5a:5a:
df:c8:fb:6e:7d:55:01:9a:09:5a:bc:bd:88:f6:65:eb:47:3d:
85:5d:40:af:50:7d:06:39:68:f3:f3:3f:8d:a1:b5:84:08:9d:
65:fa:f2:01:ad:aa:10:d6:0e:33:60:5c:00:20:4f:3f:71:4c:
ef:7b:f1:54:15:d1:64:e6:31:e5:38:05:35:80:00:59:07:91:
8e:f7:4d:f7:21:a4:a8:03:3a:64:10:e5:c5:b6:72:be:34:d5:
ca:dd:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org