Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BkTBYQd1qB6cLgIhqRsafxNqmm0.roa
File: BkTBYQd1qB6cLgIhqRsafxNqmm0.roa (raw, json)
Hash identifier: 7MpWrnxAgLDpOhzilJsgYT8cDAS47G4g6kylQ3r628k=
Subject key identifier: 06:44:C1:61:07:75:A8:1E:9C:2E:02:21:A9:1B:1A:7F:13:6A:9A:6D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04FF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BkTBYQd1qB6cLgIhqRsafxNqmm0.roa
Signing time: Thu 27 Jul 2023 16:52:06 +0000
ROA not before: Thu 27 Jul 2023 16:52:06 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:52:06 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=0644C1610775A81E9C2E0221A91B1A7F136A9A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:98:38:73:08:5a:b6:d4:3c:de:b7:46:c1:
ea:3c:0e:3f:5e:d9:f7:b9:5d:04:a0:f6:10:79:41:
5d:f2:7a:3b:7c:6b:32:f5:bd:35:98:cb:e9:56:d7:
55:f0:09:2e:b0:52:e5:ee:83:8e:12:9e:9f:23:a8:
5b:9b:3a:00:0b:b5:ee:84:22:6b:bf:7a:cc:9c:d1:
06:dc:26:e9:23:95:01:1b:c1:61:0e:d2:39:17:48:
23:a8:f3:e3:b0:ed:b9:6a:e7:e5:57:3b:e9:d1:46:
d0:98:59:05:53:3f:c2:ea:74:d3:e9:28:8a:12:d1:
a1:15:43:28:8f:59:b3:d5:ff:d3:1b:cd:8e:af:50:
f4:ba:52:cb:56:71:39:20:6e:7e:fe:2b:6f:df:be:
9e:ec:5b:80:b4:6c:70:bd:49:3c:f9:12:66:05:d2:
38:70:e5:13:51:de:02:ca:6d:8a:a0:0d:7d:d7:89:
cc:84:79:4d:11:89:b9:64:05:b6:49:11:c2:a9:8f:
c0:9c:48:f2:46:da:94:88:fb:d8:19:e1:8a:25:22:
41:34:42:79:cb:71:35:c0:40:fc:dd:0c:4e:dc:85:
96:7f:bf:7a:25:f0:18:dc:41:9d:d6:e2:bf:6f:92:
0e:d4:d3:e7:6e:33:5f:95:7a:18:d5:be:45:b0:ba:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:C1:61:07:75:A8:1E:9C:2E:02:21:A9:1B:1A:7F:13:6A:9A:6D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BkTBYQd1qB6cLgIhqRsafxNqmm0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:67:97:68:bf:5d:8c:13:47:da:6d:41:62:a6:dc:cd:d0:23:
f6:4b:ba:32:b0:68:a2:b4:6d:40:21:80:ae:09:ff:3e:4b:05:
01:ca:62:28:54:96:ca:60:d5:ab:22:3c:c6:bb:df:d1:43:77:
d1:53:a6:a9:bc:79:1a:8c:5f:58:b7:b8:a0:6f:36:f5:df:73:
4c:94:85:75:3a:45:05:eb:3a:da:d0:48:c3:4f:9b:be:75:c7:
19:34:51:0b:a6:07:ef:42:44:81:ad:27:9e:8f:99:05:3c:25:
79:78:88:74:d9:d3:38:23:1b:cf:14:c9:a8:6d:68:84:7d:05:
04:46:62:d8:ce:ae:21:b7:36:17:a9:a9:f3:5b:e3:2d:6f:d6:
d5:34:db:e5:69:01:54:cc:59:95:ca:2a:ff:ec:c5:bf:fa:a1:
a8:03:1c:3f:24:05:06:b7:9b:9d:a8:39:f8:d8:95:c9:e1:67:
dc:55:f7:c2:cd:99:5e:ae:d3:ad:02:0e:a6:37:fb:6e:6a:6b:
9e:d3:6f:9b:f2:ce:8f:95:7c:5a:7c:63:bc:72:c1:91:24:b4:
6d:d4:ea:8d:aa:72:cb:e4:63:37:d4:29:9a:ad:62:be:4a:25:
a5:68:95:bc:9a:a8:01:a1:5a:f8:b1:e2:5c:ad:2e:83:d7:bc:
a2:96:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:47 2024 by rpki-client on console-ams.rpki-client.org