Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/08QzEEVB0oI1zT5p4vJ0cRXwWpg.roa
File: 08QzEEVB0oI1zT5p4vJ0cRXwWpg.roa (raw, json)
Hash identifier: 9C6gEa9IBTaqtJoibfPUMAKCmR8xTV6NsvDn9V6e9H0=
Subject key identifier: D3:C4:33:10:45:41:D2:82:35:CD:3E:69:E2:F2:74:71:15:F0:5A:98
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05EA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/08QzEEVB0oI1zT5p4vJ0cRXwWpg.roa
Signing time: Thu 29 Feb 2024 01:35:37 +0000
ROA not before: Thu 29 Feb 2024 01:35:37 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:35:37 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=D3C433104541D28235CD3E69E2F2747115F05A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:a5:40:ed:2e:d2:6d:09:93:4c:d4:94:fd:
0f:89:07:87:da:55:8e:2c:0c:77:0a:17:c2:a4:6d:
ed:3e:75:7d:23:6f:51:cc:55:f0:4c:2c:73:e6:c9:
f2:2d:67:02:53:35:5d:e0:30:8d:d2:3b:06:67:0b:
d5:18:af:f1:69:a8:c0:ad:89:83:68:8c:86:a3:a5:
13:91:21:64:68:ba:ed:e3:c1:31:cf:44:07:d5:56:
fd:83:7e:ee:d0:2e:6f:14:96:a1:9e:37:97:a5:62:
7a:4e:a6:24:0e:e0:1b:6a:a0:b1:2f:13:1d:03:d2:
5a:1f:d7:8e:54:99:f8:02:a8:35:27:75:13:92:6c:
77:24:80:9b:a2:2d:e6:66:a0:74:a8:37:4e:86:fb:
fe:97:fc:21:fc:5d:f2:64:d1:68:90:4e:17:41:25:
76:91:a6:d2:34:77:2e:9e:ef:cb:04:ba:9b:95:83:
9f:cf:49:5d:73:55:8a:45:2a:a9:fa:b0:9f:f9:1d:
38:3f:ef:f5:62:9c:3e:e2:84:90:2a:61:72:e5:e6:
0d:e7:21:c3:7e:cc:01:ff:4c:31:88:32:a4:fe:ea:
21:61:b5:cc:cf:24:7c:28:6b:ae:35:9e:df:bc:90:
ed:7b:12:11:ab:6d:2f:ac:58:3c:2f:1d:a5:7d:e4:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:33:10:45:41:D2:82:35:CD:3E:69:E2:F2:74:71:15:F0:5A:98
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/08QzEEVB0oI1zT5p4vJ0cRXwWpg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.100.0/22
Signature Algorithm: sha256WithRSAEncryption
10:5c:14:45:5f:5c:58:78:8a:8f:06:a7:77:ca:fb:6c:9c:55:
e1:de:d8:c8:e3:3b:7d:b4:fc:b5:08:96:55:d3:ac:fd:a5:3b:
df:19:25:1c:5c:aa:c5:dd:c3:6f:17:f1:5f:2c:3c:82:bc:f5:
e1:f4:11:b1:af:af:bd:bd:92:b8:39:c6:e6:43:ee:05:2d:c9:
71:36:7e:38:fd:ab:3b:3d:96:e3:f1:87:80:65:75:fb:71:c9:
89:f0:9c:ef:9d:44:78:0f:bd:13:e9:ba:39:64:f2:47:2c:bc:
94:a1:36:75:2f:0f:1c:f5:8f:e2:7a:c8:73:c4:9a:c9:6c:43:
70:17:cf:29:b9:9e:cf:a2:ba:cd:5b:18:67:72:ea:94:a7:04:
af:b2:46:42:18:40:d6:7c:6b:5a:76:e5:9d:8f:7b:95:23:05:
80:2f:e2:e5:89:b7:a1:0e:4f:d0:7d:30:4e:c1:8b:0a:f2:ff:
f3:f8:8d:84:80:52:96:76:8a:ee:2f:2b:e3:bd:90:49:80:94:
f7:95:57:c3:a9:ad:c3:9d:5c:ab:81:03:68:b7:f6:91:3d:ec:
87:ac:4c:d0:6d:27:89:2e:1a:d7:a0:e0:96:79:d6:8b:44:6c:
69:c7:f1:d5:0d:79:3f:c1:fb:e0:1c:92:08:ea:c0:81:0f:87:
8b:01:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:28 2025 by rpki-client