Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KLqZoe3oHGMH7sIoWIS0vdREYkw.roa
File: KLqZoe3oHGMH7sIoWIS0vdREYkw.roa (raw, json)
Hash identifier: d6l6Eo06wGMlolJb/JIxMY8DfNuiTyRUivjYYIcypK0=
Subject key identifier: 28:BA:99:A1:ED:E8:1C:63:07:EE:C2:28:58:84:B4:BD:D4:44:62:4C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0530
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KLqZoe3oHGMH7sIoWIS0vdREYkw.roa
Signing time: Thu 27 Jul 2023 16:54:14 +0000
ROA not before: Thu 27 Jul 2023 16:54:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.48.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=28BA99A1EDE81C6307EEC2285884B4BDD444624C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:f6:77:a6:b5:77:8b:e2:7e:6f:ca:54:49:
e5:b0:b8:aa:d6:80:93:cb:fa:c8:2b:80:19:1d:fe:
96:a8:31:ae:5a:46:3f:1a:2f:f1:c0:40:b0:6b:2c:
be:eb:9e:cb:3f:c6:99:28:96:4b:0a:6b:5b:48:1a:
59:21:e8:6d:9a:d2:d4:e1:b7:63:e0:b5:46:dc:9b:
2b:f3:3c:f7:30:26:b8:56:3b:05:76:2b:48:f3:c2:
b8:15:a7:e3:2d:a0:ae:76:e4:5e:1e:df:93:e8:41:
35:94:cc:8b:58:8f:36:86:c1:3f:ab:3e:59:4e:35:
ca:92:ba:08:f5:a2:e4:0a:d0:45:11:7e:02:6e:e4:
9d:ed:66:40:82:e1:3d:f8:7d:7d:c5:5e:2f:e7:90:
84:ab:a9:23:4f:44:97:fe:34:32:f3:22:c4:8d:b3:
cb:75:95:b0:d7:45:f5:0f:a0:46:51:32:c2:bd:1a:
3b:77:90:03:ab:e4:fd:77:c7:83:47:1f:24:52:88:
60:ea:8e:68:d2:3f:f7:e8:a2:1b:c0:12:f1:eb:8f:
4c:e6:75:87:55:e6:e6:28:22:0f:66:aa:44:34:f4:
82:10:04:96:03:cc:79:34:88:f5:ce:a6:89:ce:77:
88:cf:22:29:6c:a7:cd:91:ec:fc:ed:b6:7a:15:4e:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:99:A1:ED:E8:1C:63:07:EE:C2:28:58:84:B4:BD:D4:44:62:4C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KLqZoe3oHGMH7sIoWIS0vdREYkw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.48.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:30:a7:b5:07:51:8f:43:78:10:2d:6c:25:5c:2d:5c:f2:37:
68:a4:7c:6f:0d:41:78:ed:30:69:ff:f5:55:62:90:b1:ba:0d:
c7:26:fe:e9:fb:fb:20:c3:90:21:90:2b:e5:36:f9:18:eb:d2:
4f:b9:0c:7a:87:07:12:fc:e0:f2:ab:7e:9b:56:65:09:d6:d1:
c0:e2:34:8c:af:20:bd:a5:73:1d:db:1c:af:90:a7:fc:86:12:
93:c9:06:2a:43:4e:19:ee:d2:b6:a2:24:96:30:51:4a:0f:d6:
e6:45:38:f5:df:e2:6c:73:c8:d9:c7:f8:0c:5c:e2:2d:9d:da:
d2:a2:4f:88:a7:e2:ab:2f:6d:fd:ee:47:f6:5c:55:b0:25:09:
65:7a:ce:ba:91:82:60:bd:06:a5:60:75:bf:0c:26:4b:2f:1d:
33:40:65:4f:ff:ee:c6:90:f9:e8:53:46:36:9d:02:c1:a6:5d:
d0:68:ce:a4:d1:f3:04:b2:4f:39:c2:ba:df:0f:2e:eb:bd:20:
31:99:51:4a:21:78:5e:0f:71:58:e8:ea:1a:84:d9:07:1a:03:
62:ec:f4:13:41:1a:9c:28:5a:a8:5d:72:d7:a3:0e:95:cc:42:
06:c5:97:10:98:19:92:97:20:08:9b:8d:41:ec:a7:85:99:93:
1c:fb:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:19 2024 by rpki-client on console-fra.rpki-client.org