Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa
File: vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa (raw, json)
Hash identifier: skXBlOY+/34pA+biXx0rtIQBSRMLNbEDHConMcgVITI=
Subject key identifier: BD:98:FE:78:F0:EC:F9:10:94:7F:42:7E:9D:10:0F:A9:F2:82:D8:4D
Certificate issuer: /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial: 32
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa
Signing time: Wed 01 Nov 2023 01:29:51 +0000
ROA not before: Wed 01 Nov 2023 01:29:51 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 3491
IP address blocks: 203.170.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Validity
Not Before: Nov 1 01:29:51 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=BD98FE78F0ECF910947F427E9D100FA9F282D84D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:af:7e:5c:ce:e3:b0:fe:16:d2:ee:1e:77:
87:df:ae:f9:ea:0e:8a:39:ac:be:93:ae:c9:94:8e:
f0:ce:04:d8:da:90:a2:cb:27:f5:0c:f0:8a:8f:40:
5c:29:3f:21:99:35:74:0c:f3:7f:ea:a7:3c:da:9d:
7e:af:a2:27:c1:41:42:22:33:d0:06:16:91:0a:a2:
da:e6:f6:c6:ff:0d:5a:1e:84:15:b0:a1:6c:83:6b:
da:ac:44:b1:b6:ca:f0:06:4c:e7:22:80:b1:10:5b:
7d:01:d5:3c:05:82:99:62:98:97:66:98:6a:e0:f4:
6c:04:08:2e:6a:e2:60:82:74:e1:04:3f:ad:27:fe:
45:6c:60:d2:f5:3a:4f:6d:20:61:eb:b6:12:46:6f:
36:98:56:42:80:ba:04:33:c3:65:04:d4:ec:6b:71:
66:0b:30:35:53:cc:72:65:40:c0:1f:de:22:ea:49:
2d:6a:29:a6:00:e9:07:54:c2:24:50:92:78:9c:08:
30:07:dd:6f:f6:c7:bd:ac:00:8b:2b:67:32:0b:08:
50:fc:68:f4:e5:e7:5a:09:44:43:16:f9:66:8f:9a:
78:23:72:16:55:d4:65:ed:f1:e1:fe:20:ec:72:6e:
3f:31:22:40:b6:2d:23:f4:e8:c6:98:71:5a:9b:e7:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:FE:78:F0:EC:F9:10:94:7F:42:7E:9D:10:0F:A9:F2:82:D8:4D
X509v3 Authority Key Identifier:
keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.170.52.0/22
Signature Algorithm: sha256WithRSAEncryption
34:5c:2e:87:d8:75:b6:04:6c:61:cd:3c:0e:1d:76:60:8a:e0:
9e:ee:6c:14:f3:14:af:a5:ca:e1:d4:0e:36:69:8b:db:0a:03:
a0:3d:d3:9a:2d:1a:71:ad:2d:fc:1a:67:f1:99:1d:d9:73:c6:
a5:1d:20:ba:e6:ca:c4:1c:fa:07:21:1d:3a:54:d8:28:71:c0:
73:40:80:13:0b:28:96:e5:a3:0a:e2:ec:50:80:9d:d8:38:a6:
46:ee:9d:d3:80:3b:74:d9:53:92:c2:ba:67:02:d0:e3:54:14:
39:85:08:83:e1:58:93:1e:1a:3d:a6:11:f3:84:b4:b8:77:2f:
e2:76:04:4a:0d:0c:e4:d2:23:c1:52:da:32:79:d1:e8:89:3e:
27:1e:fa:37:8c:0c:e2:26:29:eb:00:50:4d:1c:d7:4b:80:f4:
2a:89:68:ec:ea:fe:13:2a:c2:18:3f:22:6c:f3:3f:7f:0f:91:
dc:74:fb:f3:32:d7:6a:30:41:09:34:c3:2d:85:ee:04:58:76:
2a:48:bf:ca:77:c7:d8:d0:af:04:44:75:6f:f9:04:63:ed:fd:
80:34:51:0c:e1:6d:0d:94:da:60:5d:6b:79:63:ce:9f:2f:e6:
e1:70:57:c6:2e:6b:72:54:6c:aa:e7:41:6c:d1:3b:44:37:ef:
06:77:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:01 2024 by rpki-client on console-fra.rpki-client.org