Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Imy2PckoZdRY9pfCgbAvqfcIkLc.roa
File: Imy2PckoZdRY9pfCgbAvqfcIkLc.roa (raw, json)
Hash identifier: ZkzfMlF409Yp/zi81JgpB7bTX5jcHDblKAuxUcRMq+4=
Subject key identifier: 22:6C:B6:3D:C9:28:65:D4:58:F6:97:C2:81:B0:2F:A9:F7:08:90:B7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0220
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Imy2PckoZdRY9pfCgbAvqfcIkLc.roa
Signing time: Tue 30 May 2023 16:30:29 +0000
ROA not before: Tue 30 May 2023 16:30:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.76.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=226CB63DC92865D458F697C281B02FA9F70890B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:ee:2e:ed:05:b2:11:04:44:60:d8:22:c3:
13:10:91:23:3d:01:96:ec:2f:3f:14:4b:8b:2a:2a:
5e:04:93:d6:2a:17:29:c6:16:12:89:d0:89:a3:3b:
a9:9e:07:f7:7f:d2:b5:16:e4:7c:1b:c6:71:7d:be:
e2:99:39:e3:87:51:ca:9a:3c:55:ce:63:a4:23:ce:
18:1f:89:47:6d:32:07:5d:29:9c:84:1d:2b:6d:8c:
15:87:ce:c6:7d:57:e3:42:a0:3d:7c:b4:0d:85:80:
5a:e4:54:ee:8e:31:aa:11:5c:d8:af:11:fe:3b:d1:
6b:80:88:84:71:9d:09:4e:00:65:a8:81:d3:81:81:
2a:62:38:46:8d:3f:d2:ce:5c:13:82:38:0f:40:b6:
d4:09:c8:46:01:66:10:ba:0d:63:4e:e7:05:e5:44:
a0:37:d5:cc:17:d9:57:1f:35:14:4d:9a:22:25:8a:
e4:05:d5:ad:60:69:d9:c7:6e:64:de:83:99:54:12:
20:e0:87:75:db:ba:23:5a:fb:7d:13:fc:4b:dd:1b:
d2:c3:44:30:d5:cf:fc:59:60:7b:30:a9:9c:c9:a5:
11:0c:19:91:47:81:27:af:fd:75:7e:76:b8:14:42:
bf:46:61:9c:95:54:56:4b:f9:50:18:7e:91:f2:5e:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:B6:3D:C9:28:65:D4:58:F6:97:C2:81:B0:2F:A9:F7:08:90:B7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Imy2PckoZdRY9pfCgbAvqfcIkLc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:fa:e6:c9:6e:74:e0:f9:b4:2a:e8:4f:6a:2b:49:29:37:1c:
9c:85:78:2b:0b:7f:b8:80:56:3d:14:5c:81:0e:7d:88:70:1d:
56:da:97:ac:4f:d3:9f:7b:bc:6b:b8:4e:f4:a8:de:ae:bd:2b:
78:db:35:04:45:b7:6a:3c:95:26:04:cf:d5:3b:db:65:bd:a6:
23:84:83:d9:6b:8a:f5:b2:f7:26:12:f9:85:0d:1a:5c:63:32:
75:69:f1:78:db:5c:e7:84:28:47:c2:b1:b4:25:43:84:02:db:
d6:a3:59:12:5d:0f:ab:8e:5e:09:ff:4b:3a:94:3b:b6:b0:18:
76:53:1e:46:ef:f9:f3:ff:80:de:b6:54:2b:94:30:16:6e:87:
7d:8d:2f:eb:09:7e:60:d5:54:e7:1f:c3:b1:a5:0e:80:c9:c4:
b6:95:bd:8c:7e:d9:00:4c:99:26:ff:e0:66:cd:f4:d9:f5:70:
29:8f:77:cf:52:90:7e:43:f7:e5:3d:78:0b:09:0f:3e:4a:8e:
36:7a:06:97:41:43:11:b1:a3:c2:3b:2c:b6:d7:5e:b6:e1:60:
47:53:fc:96:b2:07:16:88:0c:cf:11:29:79:73:a8:b6:77:f3:
7c:6e:06:a0:0b:a5:39:1d:1e:8e:c1:5d:61:b4:70:f0:c4:75:
09:dc:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org