Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/01AqiiJo5ezsrIqhIPFkb568_tI.roa
File: 01AqiiJo5ezsrIqhIPFkb568_tI.roa (raw, json)
Hash identifier: wJwMuKcLjjXPkvJNDhtFhVm+s1zLIwqVDxQahxP0Z+I=
Subject key identifier: D3:50:2A:8A:22:68:E5:EC:EC:AC:8A:A1:20:F1:64:6F:9E:BC:FE:D2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0134
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/01AqiiJo5ezsrIqhIPFkb568_tI.roa
Signing time: Wed 24 May 2023 16:30:23 +0000
ROA not before: Wed 24 May 2023 16:30:23 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:23 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D3502A8A2268E5ECECAC8AA120F1646F9EBCFED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:ee:0f:49:b9:59:4c:b1:ed:d6:ab:2a:10:
37:50:e8:eb:81:09:49:50:f9:1b:ad:0a:b7:db:93:
9d:2c:df:8f:2a:08:22:19:5b:17:9b:d6:d6:63:1b:
55:67:b0:34:e9:ce:38:2b:59:2d:57:5e:f4:eb:28:
ab:52:b5:ff:ee:18:db:1b:5b:0a:7f:b0:8d:9b:e6:
c9:c4:5a:ce:c8:1f:39:c8:47:3a:6d:e7:8e:15:af:
ac:a5:66:38:81:1d:52:46:83:de:c9:99:fc:71:de:
53:62:b6:21:17:a9:3e:f6:a2:eb:83:a6:a8:b1:f7:
e5:36:fb:f0:73:ca:58:7c:15:c1:04:13:a7:8b:58:
e3:5e:df:c0:74:79:75:e0:0f:63:77:12:92:00:89:
60:d9:67:b5:3d:e3:e8:d9:dc:b6:9f:75:c0:50:35:
37:8e:9b:2c:8d:b9:79:27:36:c2:9d:4a:71:fc:8a:
33:46:fc:c3:9b:bd:44:af:63:d6:30:e7:3b:ee:1a:
56:07:0c:5e:77:4c:a3:c0:4e:b7:36:b9:74:61:37:
08:59:b8:cc:0f:ff:84:28:63:b5:b1:84:59:5b:6b:
46:17:a4:75:f5:90:2b:d1:af:52:cc:89:a7:15:6a:
8d:3a:5b:e1:3a:19:b0:a1:58:8d:14:05:5e:08:bf:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:2A:8A:22:68:E5:EC:EC:AC:8A:A1:20:F1:64:6F:9E:BC:FE:D2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/01AqiiJo5ezsrIqhIPFkb568_tI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.14.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:d6:d6:32:a3:ab:51:06:f3:29:79:d5:ab:eb:b9:01:4f:2d:
4e:46:d9:37:b3:b2:cb:29:41:95:1a:9a:cc:13:a8:7e:ca:2f:
da:4c:ca:e0:b5:39:fa:ca:f9:87:2e:70:09:0f:43:63:0d:bf:
92:f2:85:10:bb:25:c4:fc:49:b0:3f:63:e5:c6:d1:bf:30:a9:
9d:d4:32:2a:18:f9:52:66:f5:fe:17:25:5d:d3:43:9d:4b:ab:
bf:d0:1f:bc:5f:1f:f8:e4:a4:12:45:ef:af:cf:36:12:c5:26:
e2:81:0b:47:f7:5e:c8:d3:2e:fe:a4:45:76:6f:4a:77:3c:e5:
c7:79:c9:07:bb:61:d0:cb:ab:31:b1:cf:3f:ed:9f:32:44:2c:
66:f4:56:0d:dd:e6:82:df:b0:b5:36:92:e9:c2:b6:e1:67:1c:
f4:2c:65:f2:22:ad:d0:96:3d:0c:a8:33:6e:a4:74:f3:ac:fd:
bb:0d:3a:2f:ac:73:ce:fa:7f:7a:2f:da:50:37:7d:f5:a9:95:
b3:f3:b0:33:53:66:21:0b:74:99:cb:3e:e0:3d:d3:bb:72:4a:
17:9f:d1:0b:4d:40:7b:15:b9:59:d6:e7:c2:ed:ee:a1:d2:0d:
21:55:d9:28:5f:7d:2e:e5:18:11:cb:78:ad:6d:20:59:2c:00:
e2:f6:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org