Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3HGQ-e5sWougOzb6B9lxxZhYNgE.roa
File: 3HGQ-e5sWougOzb6B9lxxZhYNgE.roa (raw, json)
Hash identifier: TtdHCc2OJ1OF+UJbvlDIGurWQz5BtIBxL92NhyQNfXE=
Subject key identifier: DC:71:90:F9:EE:6C:5A:8B:A0:3B:36:FA:07:D9:71:C5:98:58:36:01
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01BB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3HGQ-e5sWougOzb6B9lxxZhYNgE.roa
Signing time: Wed 24 May 2023 16:37:10 +0000
ROA not before: Wed 24 May 2023 16:37:10 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:37:10 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=DC7190F9EE6C5A8BA03B36FA07D971C598583601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:ed:9a:47:79:a5:c9:df:74:d4:23:01:6f:
5b:32:92:ee:2c:ce:55:38:9e:aa:b9:f7:e2:29:39:
f1:2e:f9:f2:b5:a2:a3:e5:04:f4:29:9a:8b:ab:21:
e6:51:e6:b6:08:63:02:fa:f4:06:2a:9c:82:cb:37:
5c:29:a4:e7:fb:f3:8c:99:c6:8e:1b:c5:99:3b:a6:
5b:31:d9:22:6f:d0:82:1b:a0:0c:ec:87:2a:98:ac:
ac:a7:70:eb:60:60:51:7f:6b:b7:fa:00:07:0d:74:
e0:cd:39:e9:a5:a1:5f:b6:a9:9d:75:06:7e:db:19:
db:56:2d:f2:16:ef:e3:63:bf:74:1e:50:e1:d9:dc:
f3:a5:2f:af:fd:65:5d:0b:68:87:9f:11:0a:53:5a:
30:6c:97:4c:20:60:88:10:56:b7:aa:2e:ee:52:ad:
4e:b5:20:13:f3:d2:26:d7:fa:e8:0f:e9:fc:f2:2b:
7f:ea:b0:46:be:68:eb:e8:0e:f5:f9:ad:b2:ad:08:
c1:63:df:cf:4d:25:09:ed:de:e5:78:57:03:d7:af:
22:0f:a1:9e:56:10:39:d5:ce:b0:e9:2b:47:0a:80:
3d:f8:ca:2a:29:d1:ac:1a:de:24:9d:6e:42:2f:84:
5c:2a:31:50:2b:ab:49:0b:37:fd:f2:82:2a:20:ba:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:71:90:F9:EE:6C:5A:8B:A0:3B:36:FA:07:D9:71:C5:98:58:36:01
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3HGQ-e5sWougOzb6B9lxxZhYNgE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.34.0/23
Signature Algorithm: sha256WithRSAEncryption
81:9d:91:b1:5e:0a:50:dc:df:c5:b8:7d:ab:1a:d5:3c:96:01:
90:6e:06:cb:8e:c6:33:ee:7a:36:41:1d:ed:43:82:59:37:79:
29:c8:92:34:dc:55:61:22:a1:d1:79:4a:a3:b4:ff:d4:34:ba:
0b:c3:02:da:59:8c:fa:00:34:f7:4e:01:3d:82:09:8f:3e:98:
71:f2:82:3c:96:6f:da:35:07:12:02:35:94:a7:9c:f6:04:36:
ca:31:17:2d:7f:80:78:83:db:ce:35:40:7f:de:13:96:af:ea:
0a:77:15:3c:fc:32:7c:68:15:e3:cf:5f:8c:f5:d8:25:72:5a:
45:fc:33:c0:08:58:86:52:85:1a:ed:87:19:e3:95:27:06:0d:
84:83:a6:7c:01:2a:8b:ed:9b:43:20:6b:32:81:fe:cd:43:34:
2a:80:4f:53:55:53:3e:0c:c3:65:b5:54:b9:fe:29:47:7f:22:
53:29:68:bc:06:4c:e9:75:5d:eb:09:03:02:df:46:4f:c5:a8:
3c:14:4b:ed:5e:4a:4a:01:bd:a3:a5:cd:41:f1:fb:7d:d8:b6:
e4:e2:07:b1:c2:1d:40:05:a2:68:3f:7f:99:29:aa:ea:d1:5a:
de:7e:59:05:bc:5c:b5:ca:85:c6:64:29:d4:5b:47:f6:2a:ee:
91:4d:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org