Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa
File: Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa (raw, json)
Hash identifier: ikPSGBA+RnsEoIkChJcJT3ZXpuXeZ8oz45MUQiqm/YE=
Subject key identifier: 23:1D:5E:7B:E6:EC:D5:BA:8A:94:C2:2F:DD:6E:40:6D:86:71:0A:FC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 052C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa
Signing time: Thu 27 Jul 2023 16:54:12 +0000
ROA not before: Thu 27 Jul 2023 16:54:12 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 27.229.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:12 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=231D5E7BE6ECD5BA8A94C22FDD6E406D86710AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:b2:b8:86:19:b7:e3:2c:a8:9e:77:da:83:
3e:de:4e:11:50:18:fd:1d:a5:b6:4f:17:cb:12:ac:
03:13:bd:11:50:97:ef:f5:e9:72:d3:00:0e:f3:36:
aa:05:5d:60:bc:3a:85:40:c8:b6:fc:06:d7:a6:3f:
42:15:72:a9:de:06:07:37:60:e8:a9:cf:82:38:ab:
65:a5:f2:7b:0f:b8:e4:bb:e0:07:b1:8e:2f:9d:7f:
d7:7a:9a:d5:65:68:e4:0a:6d:3b:78:cd:8c:3d:8b:
1c:ec:f2:a9:3c:8e:79:e1:aa:7f:e2:d8:3a:d7:84:
0e:92:2d:1f:d2:40:21:22:6c:e8:3f:91:0d:c4:d9:
d0:6e:8c:e9:37:e5:7e:c6:a5:de:40:2a:fd:0f:fc:
a2:f8:6a:22:f0:9c:0a:8e:25:c2:a3:4f:0a:5e:2f:
93:8c:bc:37:b4:0b:26:c6:4d:bc:68:63:39:f3:7b:
af:58:cf:8c:22:e7:de:af:0e:ee:b6:b9:2a:af:01:
39:47:c6:6e:fc:28:c0:c0:c8:c4:b8:35:61:0a:67:
33:00:d3:1f:8a:81:dc:d2:ec:de:36:f6:b4:09:96:
c1:c4:8a:52:7f:da:23:8a:42:63:66:93:04:9b:77:
be:c0:87:d0:36:b7:bb:09:52:f1:44:91:08:ab:f8:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:5E:7B:E6:EC:D5:BA:8A:94:C2:2F:DD:6E:40:6D:86:71:0A:FC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ix1ee-bs1bqKlMIv3W5AbYZxCvw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:c3:06:33:e3:a9:64:f7:5b:bb:ae:74:bf:c0:cf:d4:8f:f1:
13:45:ca:53:65:b3:c9:17:a5:de:a5:c3:6f:2b:cb:cf:87:70:
16:58:7e:5b:3c:89:47:c6:98:33:8d:04:b0:a1:82:4c:21:93:
98:26:01:37:25:be:8e:1e:e9:62:a1:ac:3d:85:1a:df:c9:7c:
12:16:77:11:48:e1:82:3b:7f:8f:1c:c4:af:e9:25:be:20:42:
9a:68:c7:21:5b:c0:35:11:f4:be:28:01:48:2d:38:ae:b0:db:
44:01:70:9b:6a:df:fb:59:02:6e:ec:60:20:75:9e:93:f2:a5:
6f:c4:00:91:95:47:b9:0d:64:4a:0d:68:f6:1c:13:ef:9d:fe:
40:c9:80:28:d4:26:51:de:b0:14:59:ba:07:3f:ee:c2:86:dc:
77:9c:a6:3d:33:d5:73:f9:05:ee:67:d9:d0:c9:3e:ae:db:c0:
12:79:ad:4c:be:be:2a:05:c6:20:a4:95:89:2a:17:11:81:da:
8c:6f:f8:59:50:2e:48:d1:e7:15:2e:bf:d6:1e:f2:cc:cc:f8:
89:1e:e2:a0:8c:d7:79:36:1d:0c:d5:29:5b:95:72:0f:df:3d:
18:91:bc:51:db:61:ef:eb:13:ae:bd:29:ff:59:bf:fb:c5:3f:
c7:34:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:19 2024 by rpki-client on console-fra.rpki-client.org