Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa
File: 1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa (raw, json)
Hash identifier: hwHJ89xldC2ghQlkBCMU/uc5ZOyQN34wBs/+aN32qgc=
Subject key identifier: D4:A6:99:8F:3E:20:27:A7:DB:66:91:8E:C3:A9:53:67:D9:1A:8C:07
Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial: 08
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa
Signing time: Fri 01 Dec 2023 09:20:51 +0000
ROA not before: Fri 01 Dec 2023 09:20:51 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 59125
IP address blocks: 2401:4d40::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Validity
Not Before: Dec 1 09:20:51 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=D4A6998F3E2027A7DB66918EC3A95367D91A8C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:18:e1:9f:17:45:ac:3f:9b:4b:ad:fd:25:
ef:36:90:4d:cd:39:36:59:3e:28:6f:b4:67:f4:ec:
a9:9e:1e:40:a2:e6:b1:d4:d5:86:49:2d:ac:dc:bc:
49:25:d8:de:27:a9:3d:c2:d2:1a:ec:38:aa:39:13:
d0:8b:66:84:19:c9:60:26:66:4e:98:53:29:86:d7:
22:5d:68:91:f1:53:d0:1c:84:44:e8:bd:41:b4:4b:
88:7b:54:55:02:be:7f:8a:f3:06:92:4e:40:08:11:
7d:76:a2:53:44:fc:55:81:26:13:96:4b:2f:cb:2d:
74:1d:4a:17:ea:c5:2f:7e:b8:54:e6:8f:88:1f:02:
ef:3c:07:9a:9a:e5:40:f9:42:16:a9:d3:e2:ab:9d:
5c:b4:c9:08:18:99:35:e6:74:0a:b7:67:50:2c:37:
1f:50:7e:47:81:f0:67:ee:12:83:30:61:b3:df:34:
b1:32:36:51:3e:6c:6b:ac:8f:f1:41:3c:cb:51:79:
4e:1b:1e:f9:1c:ca:dd:47:96:30:f2:8a:3f:61:c1:
ae:13:c0:02:34:c2:6a:cc:a5:f7:2c:26:bf:33:02:
7b:db:75:38:ed:a2:8c:83:dc:df:6f:f1:fa:96:08:
bb:1f:61:ce:00:75:25:b6:69:b0:07:a4:cf:ef:f5:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A6:99:8F:3E:20:27:A7:DB:66:91:8E:C3:A9:53:67:D9:1A:8C:07
X509v3 Authority Key Identifier:
keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4d40::/30
Signature Algorithm: sha256WithRSAEncryption
7b:ba:21:ad:ba:45:a5:0c:c1:65:eb:43:1f:7d:da:72:9d:e0:
fe:26:73:96:99:e4:9c:6f:20:ca:80:05:39:ef:5a:e2:ca:89:
23:8b:e5:6f:01:6e:6a:5e:4b:e5:e8:54:df:f3:ee:b9:b5:bc:
88:5e:1b:ee:51:4f:69:75:3c:d2:a9:56:e4:99:9e:d1:13:3d:
d8:9f:62:b7:f7:68:b9:b3:5a:f3:35:d4:47:a7:c8:13:b5:73:
49:18:5b:f3:68:67:98:74:ca:ff:2e:06:7f:e2:97:f6:7d:83:
b3:99:72:0b:be:77:35:30:4f:57:00:71:29:32:34:80:3b:ed:
18:ea:7e:bf:79:b5:bf:c8:c3:26:ae:8e:47:89:79:dc:b4:1e:
a5:31:a0:da:9a:b0:7e:55:cd:09:77:08:db:bc:41:e8:44:51:
0e:f6:f9:7e:ef:3f:46:bf:e3:e0:00:b1:a6:24:fe:f8:27:4d:
6d:0d:48:ec:64:aa:11:d1:a1:35:59:d2:e1:b5:60:13:6f:45:
c0:3b:56:1a:8a:c0:2a:51:76:02:6d:1c:49:20:1a:89:4a:d4:
1e:69:d2:1b:90:a9:3e:7d:15:ea:e8:69:db:53:70:44:66:5b:
2d:eb:b7:7d:60:55:34:d3:4d:c4:cc:e4:66:f1:18:16:13:8c:
f2:e2:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org