Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0QQyN_p9iNDb6oUX_wxKPA8jl9M.roa
File: 0QQyN_p9iNDb6oUX_wxKPA8jl9M.roa (raw, json)
Hash identifier: Oh7ReksnUpuCoHCoe4RsS3+zQ6bhfLfDGWwD6J+m2eM=
Subject key identifier: D1:04:32:37:FA:7D:88:D0:DB:EA:85:17:FF:0C:4A:3C:0F:23:97:D3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 5F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0QQyN_p9iNDb6oUX_wxKPA8jl9M.roa
Signing time: Mon 27 Mar 2023 16:04:32 +0000
ROA not before: Mon 27 Mar 2023 16:04:32 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:04:32 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=D1043237FA7D88D0DBEA8517FF0C4A3C0F2397D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:f3:9f:3d:7c:6a:15:cd:78:5b:9e:27:96:
80:ac:68:fc:32:5f:8a:cc:12:c6:9a:71:87:fa:f9:
d6:f3:be:57:e2:02:2a:1a:be:77:38:9d:68:3f:80:
fa:b1:75:5f:59:cc:f9:4e:7f:5b:6c:4e:a4:1e:62:
9c:8b:96:f1:72:86:89:8b:48:19:42:17:40:d4:9e:
bf:93:6c:fb:fb:9d:b3:d3:e9:ca:cb:4d:de:49:77:
1c:0e:25:0b:b0:97:21:e7:6c:44:f5:b4:b6:fd:3a:
c8:ec:a4:df:eb:0c:97:e3:cb:a9:5c:32:9d:49:d3:
92:31:0b:1b:04:b6:e0:5d:e8:11:6e:dc:5a:be:6b:
de:00:cd:14:b4:78:a4:30:33:64:78:d7:cb:40:04:
2c:db:6e:7f:55:95:fd:4d:25:34:31:43:25:52:87:
5c:c0:1e:4e:d6:35:ff:e6:cb:8d:7d:5e:c8:0f:26:
bc:7e:31:ac:fb:ad:ff:8b:be:82:91:21:24:51:e8:
57:f7:f7:30:b4:22:fb:81:11:e7:84:6b:86:68:ad:
88:8d:27:90:02:c6:a9:d5:9e:fa:c7:9b:76:7f:3d:
09:6c:56:32:bc:67:82:4c:e0:43:e2:79:a7:5b:05:
31:5b:96:23:fc:19:e5:71:fe:75:d2:8e:18:27:0b:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:04:32:37:FA:7D:88:D0:DB:EA:85:17:FF:0C:4A:3C:0F:23:97:D3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0QQyN_p9iNDb6oUX_wxKPA8jl9M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:43:89:e3:ba:d7:23:7d:e0:ce:d3:4a:90:b8:f7:42:09:78:
78:03:1d:f7:8c:94:9f:75:ae:8f:83:1c:f3:14:fa:ab:c1:34:
60:08:fb:f9:1b:d6:af:45:23:c2:8a:3a:cb:dc:d5:cd:80:f1:
6c:bc:18:52:13:38:86:9b:ee:5c:1d:15:3d:52:72:cc:42:07:
b1:83:ea:a4:f1:9e:29:6c:bc:ef:e3:42:d1:62:6c:d1:42:5c:
d7:fe:9e:ba:bc:59:4e:b5:cb:e9:fc:1a:77:e6:e6:e5:5b:48:
d0:dd:9b:8c:82:e6:1b:8d:17:4e:7d:f7:29:e2:bd:dd:57:42:
35:c7:19:48:fb:a0:74:95:f1:a7:1d:a6:72:ae:54:29:5b:1e:
cb:b6:1d:ea:cb:a8:0a:41:cd:0b:9c:0a:6c:46:8e:39:80:85:
75:81:c3:c5:56:06:07:37:4c:b8:86:01:d6:63:03:94:71:d3:
bc:38:e0:40:48:f9:14:1a:dd:75:0e:e4:b9:f1:11:ef:0b:20:
f1:8a:b9:97:ca:2d:8a:66:62:db:9e:97:ba:1b:24:bf:14:8b:
0c:46:63:b7:67:ba:e9:39:0f:6d:8c:d0:b6:e1:93:39:1f:5c:
d6:18:d9:7a:57:52:b8:e4:8c:ec:7b:32:3d:02:1f:2c:8a:67:
ec:bf:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org