Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/L9Rre0s9ePkwXhlQ5QISjvFhMP0.roa
File: L9Rre0s9ePkwXhlQ5QISjvFhMP0.roa (raw, json)
Hash identifier: UJXDeJe8xa5zV7l3uen1T8Omo2U7hot1suNZagI8R08=
Subject key identifier: 2F:D4:6B:7B:4B:3D:78:F9:30:5E:19:50:E5:02:12:8E:F1:61:30:FD
Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial: 76
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/L9Rre0s9ePkwXhlQ5QISjvFhMP0.roa
Signing time: Thu 13 Apr 2023 09:53:50 +0000
ROA not before: Thu 13 Apr 2023 09:53:50 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 38631
IP address blocks: 203.104.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Validity
Not Before: Apr 13 09:53:50 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=2FD46B7B4B3D78F9305E1950E502128EF16130FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:b0:bd:be:76:4a:fd:c3:25:1c:12:d1:18:
06:29:5b:65:63:88:5d:d6:85:3b:02:ca:2f:3b:c7:
1b:88:a0:ad:a3:64:e4:54:f4:27:5c:4f:17:6b:95:
93:24:2c:86:36:c5:ce:a6:e0:c0:a9:37:fc:52:38:
27:0e:05:66:3c:9c:7e:a1:60:b5:66:91:64:10:04:
88:b7:3a:36:05:48:2f:26:50:f7:71:42:84:3c:7b:
27:e1:8c:38:c8:4c:73:85:e3:56:8d:d5:4f:8c:78:
91:6b:be:5c:5b:f9:09:93:7e:17:c2:67:aa:76:5b:
33:20:15:d0:91:d6:b7:53:40:c9:a9:92:8a:c5:2f:
ea:55:fb:e5:17:e7:e3:03:05:e4:54:eb:7a:ed:b7:
9e:c7:01:98:ff:c8:1c:6c:be:5e:49:f4:72:ac:3e:
78:a7:8c:62:d6:b8:26:db:78:89:a1:66:c2:63:00:
a4:84:20:dc:57:fe:7f:8e:c5:bb:b8:d7:00:90:f3:
dc:d2:c5:d6:9f:4c:e7:0a:a2:a9:74:8e:92:e3:a7:
c5:b7:67:8a:5d:22:c0:b1:7d:8a:56:2c:12:04:64:
b7:81:35:90:cd:ca:dc:08:15:50:ca:22:c7:f4:f7:
9c:d0:b7:40:89:f7:0f:af:d5:e9:e1:1e:35:1f:be:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:6B:7B:4B:3D:78:F9:30:5E:19:50:E5:02:12:8E:F1:61:30:FD
X509v3 Authority Key Identifier:
keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/L9Rre0s9ePkwXhlQ5QISjvFhMP0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.104.144.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:42:3b:d4:d3:fe:0b:c3:f5:62:db:42:d6:04:51:f5:90:18:
8e:b9:af:81:80:dc:c8:38:bc:5a:07:b8:b3:db:02:4c:62:23:
b6:d2:24:83:0d:9d:c2:58:39:09:45:d1:98:46:42:5e:f6:a2:
d8:17:4b:1a:b9:e9:1a:6b:e6:b3:b5:26:e0:1c:18:7a:f8:d9:
03:c7:cd:0c:a2:a0:20:d4:5f:ff:60:53:79:be:b2:b4:ed:dc:
b8:eb:05:35:1f:c0:3e:4e:ff:09:dd:56:32:83:94:71:81:ec:
bf:91:37:7c:79:93:f7:68:91:a9:d1:1d:1f:56:e7:3b:a0:7f:
29:d9:61:cf:5c:db:db:ec:0f:00:49:bc:54:54:94:f4:74:6b:
f0:f1:99:33:79:97:7b:33:9e:e0:84:6a:43:bb:9f:75:9e:e5:
3a:48:07:e2:14:a4:4a:93:ad:72:34:5f:e9:56:3c:25:2c:a2:
9f:db:59:c1:fa:a3:d5:04:d5:1d:80:1c:c9:86:7c:49:3f:78:
3a:4f:ab:76:ed:f1:cd:bb:7a:4c:be:20:12:27:1d:93:cd:f5:
a7:cc:ce:f9:59:1e:25:bd:b0:ce:e5:7e:03:a8:ad:48:49:d4:
2f:f5:86:e3:25:4b:ad:d0:7e:0b:c0:5f:bd:01:b8:4e:aa:ea:
0b:a7:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org