Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa
File: i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa (raw, json)
Hash identifier: Q12+284hD0NTXW6BXIYJMNtzm8n9XK31b5RMiC8gMFQ=
Subject key identifier: 8B:88:1F:EC:94:3C:FC:EC:7D:AD:0A:14:5C:77:0B:8C:C3:A0:91:C0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06F2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa
Signing time: Tue 30 Apr 2024 01:49:45 +0000
ROA not before: Tue 30 Apr 2024 01:49:45 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.244.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:49:45 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8B881FEC943CFCEC7DAD0A145C770B8CC3A091C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:19:02:d7:7e:4d:4b:e4:23:4e:2c:f9:e1:
4b:24:85:61:bd:d2:27:60:e5:93:e5:da:63:d2:7c:
1e:cf:bf:ef:73:07:45:dd:0c:b2:63:15:d5:a2:f5:
67:52:03:94:fe:bf:18:43:f9:6d:88:bd:40:21:e5:
23:85:0b:a8:2b:6c:55:18:8a:65:0c:1b:80:64:91:
11:82:5a:de:ad:55:ab:28:c7:a6:f2:ae:f6:00:9c:
04:c9:c6:7c:bf:a6:c4:36:38:08:81:94:07:bc:08:
e0:59:f7:1a:6b:1d:f4:90:4b:4b:91:1d:0f:99:aa:
cd:d0:a8:f6:bf:81:fb:35:f1:13:46:33:d8:a9:a1:
86:16:16:a9:02:0f:ec:62:12:c7:f7:ca:b8:4c:eb:
56:0a:e4:8c:38:c3:fa:75:03:b7:3f:64:1b:b2:1e:
59:f5:73:a1:06:62:9f:b6:23:7e:30:3c:cc:f5:31:
90:a9:3e:cf:e0:35:34:d2:61:eb:ff:f5:f7:33:3c:
85:46:e5:39:20:96:9a:e0:93:f7:95:e1:f8:d6:c4:
cf:6f:54:2d:b6:73:07:8f:fb:fa:fc:44:35:7f:b6:
7d:43:b5:15:64:08:4c:77:5e:fd:57:63:d0:52:2f:
b1:f6:5a:4f:2d:be:f3:3c:fa:2e:6f:3e:e5:4e:ae:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:1F:EC:94:3C:FC:EC:7D:AD:0A:14:5C:77:0B:8C:C3:A0:91:C0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/i4gf7JQ8_Ox9rQoUXHcLjMOgkcA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.244.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:2e:0e:59:45:58:ff:80:23:ea:7e:13:83:df:d9:95:7c:b9:
80:73:1c:68:b1:58:8b:40:c1:31:06:5f:05:3d:57:83:d8:23:
bd:f4:18:15:73:7c:9f:3a:50:86:c0:fd:66:a7:ca:63:50:98:
69:68:53:e9:16:1d:9f:b8:50:cd:b8:79:f9:ba:9b:27:79:7a:
25:22:90:5a:37:9e:ab:02:f1:08:af:93:1f:b4:77:d2:30:d7:
49:e8:27:d4:2c:f9:73:f8:be:08:5f:4b:3c:ba:96:55:2f:7c:
bc:66:5c:79:c6:6f:cb:5c:bf:84:be:4f:e4:f6:63:32:b1:25:
32:94:5b:d6:e8:75:e4:f0:ca:d4:30:94:7a:29:3d:32:2c:07:
85:0c:03:88:2c:fa:bb:7a:65:8b:d9:fb:d6:1c:71:f2:f4:b9:
c6:07:69:e7:9b:f1:3f:80:4d:4a:da:6f:25:34:ce:b5:6c:8c:
0d:ef:36:3a:4b:b7:0b:96:15:bf:42:3d:b9:e9:ea:0f:b6:de:
9c:1b:f3:2e:e3:a5:e8:d3:8b:6a:22:f6:c3:a4:1b:5c:81:71:
46:2b:62:34:2c:3d:c6:92:5f:ed:93:1b:0c:25:6a:c2:38:d6:
bb:35:eb:ea:a4:09:66:40:5e:eb:3d:a6:72:32:8a:48:fc:3d:
71:c1:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:35 2025 by rpki-client