Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa
File: 9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa (raw, json)
Hash identifier: 5mBowFm9C9Acn8ciY4oSoliScU3v0gCCZajbXDYU8iw=
Subject key identifier: F4:41:1F:CD:0D:25:11:A5:1B:6B:0D:81:82:DC:A0:F7:FD:DB:9A:E0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0519
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa
Signing time: Thu 27 Jul 2023 16:54:05 +0000
ROA not before: Thu 27 Jul 2023 16:54:05 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.159.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:05 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=F4411FCD0D2511A51B6B0D8182DCA0F7FDDB9AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:c2:b4:48:ad:55:a6:a5:3e:e2:75:c1:e4:
05:c4:d4:d2:4c:9d:a6:96:34:e7:d5:de:04:cd:33:
f7:cd:cd:b4:cd:99:0b:58:85:29:aa:95:38:c0:07:
c0:55:92:41:69:19:9e:fe:96:93:49:25:47:86:42:
59:71:a9:0c:46:0d:5d:e4:cc:a4:85:06:53:ba:3f:
e1:a2:18:79:45:00:1c:da:5f:79:29:91:17:35:bd:
5a:62:cc:ba:7d:ce:94:3a:99:e9:9f:87:67:74:9f:
2d:d8:46:68:70:75:cf:ef:04:e3:b5:59:2b:f1:b0:
1e:f3:99:67:40:5a:35:52:01:6d:77:a9:d8:03:e8:
f6:91:bb:7e:c0:73:23:56:27:f3:92:91:9d:f7:5c:
ee:ea:1c:fd:69:16:1c:48:d7:f8:90:77:0f:a2:80:
ae:4b:12:fb:6d:8f:8f:f1:8a:0a:88:b2:d4:d6:a8:
1c:d8:c1:fc:03:28:5c:20:2e:09:3b:e3:62:9b:8f:
71:53:4f:d4:4f:69:dd:0f:4e:c6:b6:2d:a0:2a:c8:
6a:9e:d3:a0:50:e0:e0:d0:de:27:09:0c:9c:1c:f1:
08:be:23:b7:c6:e4:01:46:74:94:f0:9c:91:79:7e:
71:c5:8f:86:dc:82:42:7a:82:12:9a:c0:43:10:0e:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:1F:CD:0D:25:11:A5:1B:6B:0D:81:82:DC:A0:F7:FD:DB:9A:E0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/9EEfzQ0lEaUbaw2Bgtyg9_3bmuA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:26:78:61:60:24:18:62:4b:7a:e5:4d:44:b2:db:25:be:33:
58:4f:cc:e7:dc:af:ce:48:e6:df:23:0f:01:4e:db:53:d1:e0:
7b:7f:cb:e0:48:9f:7c:b7:69:d5:d8:a0:61:6c:48:37:63:c0:
68:dc:83:84:59:8c:10:32:23:14:a4:35:76:d4:8f:3b:ec:1d:
58:e6:ba:1e:14:07:3c:dc:c3:5a:65:96:c5:76:8f:44:ac:50:
df:4a:e6:f4:cb:8e:49:50:76:2f:1f:39:f8:fc:eb:36:a2:d5:
5e:24:1c:34:1a:b5:af:9a:19:8c:33:1d:15:67:9a:7e:78:be:
c3:2f:2e:f4:8a:35:31:70:8f:e8:58:e2:35:4e:9c:17:9b:45:
4e:c1:15:a1:35:73:40:37:d3:d2:88:ee:2b:ee:af:be:24:15:
75:d6:f5:f6:f1:b5:b6:73:67:26:2e:3a:ca:23:65:f7:0b:1e:
ac:3e:79:7e:a4:d0:e8:ae:ac:1c:a7:95:26:0e:e9:e8:45:1d:
7f:1c:09:a4:2d:65:70:d4:9e:1f:d1:fd:43:0c:ed:f0:f8:9b:
16:5e:3b:47:cb:db:da:7e:4f:ee:5d:2f:a9:49:f9:f7:3b:77:
67:08:47:d4:bb:3b:0c:81:c0:fb:ab:a4:bf:f7:2f:52:8a:c4:
cd:f2:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:25 2024 by rpki-client on console-fra.rpki-client.org