Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/t8pYY8gnsdg2gcPO8dquUhpPPY8.roa
File: t8pYY8gnsdg2gcPO8dquUhpPPY8.roa (raw, json)
Hash identifier: pAYkMBZ29rZuH6msosXz4w2M6YZ6EVIhCYTCxP254Ro=
Subject key identifier: B7:CA:58:63:C8:27:B1:D8:36:81:C3:CE:F1:DA:AE:52:1A:4F:3D:8F
Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial: 78
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/t8pYY8gnsdg2gcPO8dquUhpPPY8.roa
Signing time: Thu 13 Apr 2023 09:53:51 +0000
ROA not before: Thu 13 Apr 2023 09:53:51 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 38631
IP address blocks: 203.104.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Validity
Not Before: Apr 13 09:53:51 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=B7CA5863C827B1D83681C3CEF1DAAE521A4F3D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:e0:26:69:95:eb:d7:32:9f:23:3f:34:51:
6b:d0:2f:fe:ea:fd:a9:ea:42:04:3f:3e:a3:af:2c:
cb:d2:bf:fd:c8:0f:29:f8:f0:9e:5b:26:25:e2:54:
09:1f:c1:70:da:83:45:a8:17:ec:12:33:90:25:98:
e3:98:ff:f6:ac:57:40:e4:b2:50:4d:38:ce:45:4f:
ce:0a:57:8f:30:10:66:5a:22:73:b9:b3:dd:65:aa:
6c:80:cd:4d:d7:4b:3b:37:b8:2e:5e:79:f7:bb:71:
70:a4:15:03:a9:79:42:1d:c5:d0:4b:1e:00:5a:e7:
b3:c1:78:6e:e2:ba:85:ed:01:69:52:07:9d:f9:e2:
33:2a:48:de:0d:0a:b1:96:71:8b:83:f6:d2:93:4c:
74:be:87:1b:c1:7a:10:8e:e5:31:aa:12:bd:f5:3c:
d9:03:23:75:a1:ba:86:d3:b5:cf:ae:86:24:ad:bb:
7c:fd:7f:6d:e8:e4:04:94:ae:d3:c3:5c:56:68:fb:
f7:7a:0f:ef:dd:bb:c8:e6:aa:5f:8e:2c:d8:30:f3:
93:59:66:ca:10:2d:9b:2c:61:e5:79:ad:4e:71:7f:
4a:7e:d5:2a:ae:3b:33:92:d6:e0:94:ad:a9:a6:e8:
89:e7:0f:09:40:be:5c:5f:1e:72:05:f1:96:16:ac:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CA:58:63:C8:27:B1:D8:36:81:C3:CE:F1:DA:AE:52:1A:4F:3D:8F
X509v3 Authority Key Identifier:
keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/t8pYY8gnsdg2gcPO8dquUhpPPY8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.104.128.0/20
Signature Algorithm: sha256WithRSAEncryption
02:04:de:80:7a:db:4e:f9:82:2a:73:e7:e9:60:89:70:d2:da:
31:84:27:7a:52:8d:35:ae:99:f8:ba:da:97:59:bf:5f:e9:ec:
0b:00:f0:09:d2:5f:05:14:24:40:b9:7d:7c:ea:2b:30:0c:09:
d0:44:10:98:c8:e1:54:3d:97:a3:c2:a6:98:59:f6:f3:9b:fa:
62:24:50:db:01:66:ba:7f:ea:da:90:1b:63:94:0c:77:87:79:
da:42:62:60:b4:47:67:17:e4:e2:d0:29:6a:97:8c:a4:e9:dd:
ee:04:f0:bf:31:d6:3f:1c:66:3a:04:0c:e9:7b:fe:6e:f2:a6:
9e:4a:1c:30:0e:8b:11:57:f2:9d:d9:c2:3a:b4:f9:f5:fb:43:
bd:55:f0:bd:78:35:ed:4c:b4:19:db:4a:0b:7e:3d:11:89:ca:
0a:05:21:5e:4f:d1:eb:48:ad:c2:08:5b:08:c5:20:3e:e0:5d:
48:40:87:be:bb:c1:e0:48:45:e7:24:6c:a8:1e:a8:8b:6b:df:
9b:78:5b:dd:90:65:7f:ab:23:87:2a:b4:61:68:93:8a:28:9b:
fc:d9:27:ed:a1:ad:9c:4a:f1:1c:ce:e5:a8:80:f4:99:16:c3:
66:4d:06:4e:44:cf:b3:a8:35:d1:02:93:aa:44:d5:b7:f2:6b:
71:3c:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org