Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/eHsx7d2xeYE1doLbyJLywFRu5bc.roa
File: eHsx7d2xeYE1doLbyJLywFRu5bc.roa (raw, json)
Hash identifier: yU63XX8c7xBAcke7TOosILxblDzDhuUuJB3seIJMoX8=
Subject key identifier: 78:7B:31:ED:DD:B1:79:81:35:76:82:DB:C8:92:F2:C0:54:6E:E5:B7
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 4F
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/eHsx7d2xeYE1doLbyJLywFRu5bc.roa
Signing time: Thu 13 Apr 2023 09:53:35 +0000
ROA not before: Thu 13 Apr 2023 09:53:35 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 45680
IP address blocks: 218.100.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Apr 13 09:53:35 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=787B31EDDDB17981357682DBC892F2C0546EE5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:db:00:5c:15:ea:33:cc:14:bc:c3:e0:ad:
76:e9:3a:27:45:ab:ef:0b:09:ff:74:a1:7e:00:cc:
64:9c:90:a9:7b:45:50:29:a5:ef:d7:2f:b8:64:4c:
d2:8b:e4:ac:47:70:20:3c:a5:69:9c:0e:0d:62:fd:
9a:dd:a3:0d:e2:32:5a:94:46:fc:0e:76:f4:aa:ec:
23:7e:06:44:59:de:87:33:56:42:76:62:7d:87:df:
26:97:7d:9f:9b:ee:7c:ce:e8:b3:dd:65:cc:58:35:
f5:38:02:a0:93:0f:3f:59:8a:5f:a2:26:d0:60:30:
13:a7:ff:d0:b3:a6:79:14:e6:55:b9:40:60:17:f9:
dc:f6:df:e0:99:cd:13:5b:32:8a:e5:75:2e:40:8f:
5b:7c:0d:76:8b:b5:7b:85:f9:70:1a:d1:58:a0:c5:
8c:69:47:70:10:7e:12:b7:54:e9:00:ce:af:f7:c1:
fb:39:36:d3:d7:44:5c:20:2a:a1:fa:05:23:a6:ea:
93:28:fa:63:32:47:c9:5f:28:26:96:be:a7:76:04:
7a:f8:5e:1a:80:d0:cd:d2:6b:ec:dc:5c:66:fc:2b:
1f:7a:f6:f1:1f:24:8e:f9:8f:82:f4:ff:8a:c3:9e:
81:75:03:20:cb:e7:5f:23:e1:b0:4f:4a:69:37:c7:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:31:ED:DD:B1:79:81:35:76:82:DB:C8:92:F2:C0:54:6E:E5:B7
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/eHsx7d2xeYE1doLbyJLywFRu5bc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.100.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:68:52:99:16:8b:35:85:fc:8c:53:de:cd:8b:86:c3:30:18:
e6:f1:ba:ff:61:0f:5a:3e:1c:95:e3:9d:98:ee:da:16:d9:f1:
c9:2b:d4:32:9d:8c:3e:63:82:9a:c8:84:d9:ad:3f:b4:b1:b8:
cc:54:63:59:4c:0b:7f:e6:a2:dd:41:fd:6e:65:84:55:d4:69:
b5:a2:e3:e8:5f:08:eb:9a:4d:e0:c0:33:d9:2f:cc:df:5d:66:
69:b7:a7:5f:75:87:84:84:cb:ad:b6:3a:52:ec:57:4f:14:42:
e4:aa:f3:a1:08:35:6a:6f:1a:e3:35:08:52:76:8a:58:db:dc:
37:a5:78:c6:27:59:98:ee:cb:5b:51:59:28:5a:18:65:bc:53:
40:cf:0a:74:be:75:dd:5d:59:a3:e1:f9:2e:c9:a6:8a:27:cf:
fc:a1:6e:06:d2:9e:fa:8b:a7:ea:26:6b:af:3e:49:47:34:e3:
32:e9:b8:6b:12:77:a3:e3:f8:42:e9:a8:db:1a:18:91:49:4b:
46:98:3a:03:52:04:2d:25:05:2e:d2:f5:37:b6:05:71:69:6f:
b7:64:17:29:3a:b4:c0:34:2c:29:1b:89:5d:f5:a8:f7:dc:f0:
f4:b9:05:fb:12:eb:92:30:30:d5:bf:66:64:96:66:d7:e0:9c:
2a:ce:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org