Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6X-A7plLHqaK35-af8zbrYExziM.roa
File: 6X-A7plLHqaK35-af8zbrYExziM.roa (raw, json)
Hash identifier: r0dxXnsorXfMFI44/anEAyTrGB1h7KwL7YQATLN00MM=
Subject key identifier: E9:7F:80:EE:99:4B:1E:A6:8A:DF:9F:9A:7F:CC:DB:AD:81:31:CE:23
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 029F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6X-A7plLHqaK35-af8zbrYExziM.roa
Signing time: Tue 30 May 2023 16:36:34 +0000
ROA not before: Tue 30 May 2023 16:36:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E97F80EE994B1EA68ADF9F9A7FCCDBAD8131CE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:6f:4d:06:7a:6c:e3:b9:6b:58:15:dd:b4:
68:ac:45:8b:06:96:09:c2:9b:ec:56:92:a5:0f:b9:
97:f5:35:d1:2d:ec:c2:21:2e:02:1a:85:28:11:5b:
ce:72:29:d5:1e:02:b2:19:4d:f5:e9:a9:b8:46:d4:
36:1f:9c:5f:b2:8b:40:33:09:df:c1:34:a7:bf:59:
a3:61:8b:83:f5:45:77:df:86:25:ab:92:43:69:a6:
fe:10:36:ce:ed:81:be:c3:e6:be:85:f6:56:00:83:
cc:67:5c:1a:d8:08:79:47:92:87:e5:51:5e:03:66:
55:22:3d:ad:38:21:99:d9:53:d3:27:26:e0:1a:c2:
44:8f:63:a4:c8:d0:2a:01:2b:b8:2b:70:b2:22:c0:
12:f6:b1:d0:ec:df:f5:85:c4:75:bc:0b:0a:d9:3e:
2a:a3:6c:c3:ed:c4:41:b8:38:94:cd:cf:37:32:5b:
79:25:9a:1b:3d:44:d1:32:b8:af:2e:04:a2:1e:a6:
d4:20:86:ae:87:f8:27:f8:ca:f8:46:ef:f6:76:dc:
75:44:09:fe:f6:a5:68:3e:88:82:ae:49:d9:8f:6c:
d9:1c:7e:48:f1:f5:9d:4e:ad:d6:6c:0f:fd:4d:3c:
3b:be:ea:e6:aa:24:67:ea:71:aa:78:73:cd:95:b0:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7F:80:EE:99:4B:1E:A6:8A:DF:9F:9A:7F:CC:DB:AD:81:31:CE:23
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6X-A7plLHqaK35-af8zbrYExziM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.236.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:94:4e:45:82:07:96:36:93:80:e9:4e:82:58:fd:f1:51:c5:
fd:00:ee:c8:cd:27:61:5c:c5:67:be:e1:48:af:56:06:f8:22:
4b:7d:a9:30:c9:8f:43:b4:b7:95:36:65:c7:c0:ea:d4:13:77:
0a:fe:ee:8e:fc:5f:28:6b:75:98:c6:a1:d0:5c:b3:dc:bc:80:
f3:d9:73:b2:73:bb:7a:88:3c:e8:a9:14:57:ae:9d:15:72:cf:
b2:dc:54:73:71:37:a1:47:ee:31:78:93:7d:fa:58:79:17:0a:
c5:e0:f4:aa:22:ed:38:83:5b:7a:8c:1c:1f:6f:52:ca:ca:0e:
52:c6:57:e7:38:d3:2d:5a:56:52:ed:67:1d:c2:6c:c4:5e:5d:
0f:16:98:30:ae:c5:33:36:2a:55:74:50:b9:89:71:f2:d9:3c:
b7:7a:d1:9b:fe:05:7b:38:f8:31:40:72:a1:2d:f2:9c:65:14:
7b:f3:cb:f0:bb:30:45:a3:c9:3d:44:95:9a:90:d6:c8:5a:fa:
5b:83:38:2a:aa:2e:fc:a8:e2:6e:ed:cc:12:bd:fb:5b:63:c5:
2c:02:ab:4c:5b:6c:16:ff:0d:2f:17:ae:03:30:a8:18:43:66:
15:45:ac:c0:58:44:cc:1b:d5:e6:d4:e2:c2:cf:56:5b:99:c7:
43:66:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org