Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/yzRece4FFFoHelLxtKfHsWLnnbk.roa
File: yzRece4FFFoHelLxtKfHsWLnnbk.roa (raw, json)
Hash identifier: z+O6jlqKUmX9Ml4CIIImj/IHF+UcoBkQX9yqPxMj2b4=
Subject key identifier: CB:34:5E:71:EE:05:14:5A:07:7A:52:F1:B4:A7:C7:B1:62:E7:9D:B9
Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial: 0C
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/yzRece4FFFoHelLxtKfHsWLnnbk.roa
Signing time: Wed 28 Jun 2023 01:13:43 +0000
ROA not before: Wed 28 Jun 2023 01:13:43 +0000
ROA not after: Sat 15 Jun 2024 06:45:48 +0000
asID: 131965
IP address blocks: 202.210.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 06:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Validity
Not Before: Jun 28 01:13:43 2023 GMT
Not After : Jun 15 06:45:48 2024 GMT
Subject: CN=CB345E71EE05145A077A52F1B4A7C7B162E79DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:b9:d0:1b:2a:f7:50:e2:7f:8c:67:9d:d0:
a8:49:72:80:bc:af:12:98:a5:92:a6:49:60:78:11:
79:fd:5e:9c:6c:71:b9:34:f9:48:f2:30:64:4d:4d:
55:c0:41:54:87:79:81:61:a1:5b:82:3e:de:ae:b1:
17:43:fa:08:f3:d3:e3:dd:43:6b:9e:07:14:bd:5a:
7e:b1:62:13:8d:b1:ad:79:bb:ce:bd:83:7d:26:8c:
27:c2:ea:dc:fe:11:66:59:bd:0e:e2:64:29:57:18:
01:b3:6e:1c:33:c5:c8:77:65:08:b3:c6:81:54:a8:
37:e5:24:fa:d8:f4:96:95:5c:de:47:06:ef:e7:33:
99:38:19:0a:9d:5c:e2:84:5a:31:ae:4d:c3:ae:00:
f6:ad:bd:aa:9e:0a:99:f0:b9:f0:94:ba:17:ca:0a:
82:f1:5f:13:50:08:a6:73:b8:88:50:e9:9e:cc:08:
05:c9:05:20:ba:3e:f0:13:3c:a8:7a:b2:28:be:9d:
3b:d9:b8:1d:01:7f:db:cb:84:5d:60:98:d2:15:3a:
9e:08:54:b3:54:54:62:f1:57:1f:b0:a6:7b:0a:e6:
96:7a:0d:e1:2f:cf:35:82:53:07:f3:0d:82:fb:f7:
cb:86:4e:da:16:f9:40:1f:ff:ae:df:a6:88:1c:64:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:5E:71:EE:05:14:5A:07:7A:52:F1:B4:A7:C7:B1:62:E7:9D:B9
X509v3 Authority Key Identifier:
keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/yzRece4FFFoHelLxtKfHsWLnnbk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.210.8.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3b:d1:71:54:cb:58:07:f0:11:d8:51:68:34:2a:62:f9:2e:
a3:fb:ce:1c:4e:d6:51:b0:d8:9c:5a:3c:d7:aa:f3:7a:63:01:
9e:53:6f:c0:49:54:d0:82:0f:af:5f:a7:bb:1d:57:fb:3a:66:
df:da:cb:a4:27:b9:3f:ba:6a:83:b4:66:bc:2f:3a:49:d3:04:
34:44:bd:9e:5d:f9:a9:f0:29:2b:16:54:bb:3d:27:7d:94:10:
c9:09:60:d0:0b:63:06:f1:08:35:eb:69:59:31:55:11:74:a0:
1b:22:03:b3:d3:3b:84:ec:6a:9a:3e:df:f8:03:30:4e:6a:c1:
53:af:ef:2a:6e:34:f1:9e:a8:21:68:eb:ca:02:f2:3c:6a:93:
ad:ae:f6:af:cf:67:32:fa:f3:3b:9b:eb:f6:0a:39:6e:c2:ae:
50:ca:ff:00:4e:39:c3:94:00:36:1f:db:b3:f0:8c:4c:53:50:
ac:ff:61:ea:19:88:89:ec:02:3f:96:10:09:6f:b1:03:26:92:
c4:87:8c:11:ad:dc:04:c0:62:b0:2a:b5:cc:60:67:94:c8:bf:
d0:7d:75:8d:1b:d7:91:ed:e4:30:5d:be:e8:37:bb:ad:a7:49:
bf:cd:2a:25:a2:34:8c:d0:7b:58:ab:9b:be:04:01:66:80:24:
75:65:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:29:52 2024 by rpki-client on console-fra.rpki-client.org