Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KQjXR5I-UC255AY9U7RNNfGI4HE.roa
File: KQjXR5I-UC255AY9U7RNNfGI4HE.roa (raw, json)
Hash identifier: raHWVqLtPgbA2PGVdLzLPbdht/3MogpZfW4UUs/6nqQ=
Subject key identifier: 29:08:D7:47:92:3E:50:2D:B9:E4:06:3D:53:B4:4D:35:F1:88:E0:71
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 047D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KQjXR5I-UC255AY9U7RNNfGI4HE.roa
Signing time: Thu 27 Jul 2023 16:44:10 +0000
ROA not before: Thu 27 Jul 2023 16:44:10 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:44:10 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=2908D747923E502DB9E4063D53B44D35F188E071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:c0:17:75:f9:27:21:b0:b0:69:11:21:54:
6b:49:06:17:2e:2f:c5:de:77:47:c3:2a:d2:39:1c:
5b:38:94:85:92:d8:e8:ad:d2:c6:1e:97:6f:5c:95:
09:05:19:de:4b:0a:86:0e:d2:a6:85:3e:ab:e0:d5:
0b:ff:4d:fc:cc:a0:af:ea:4c:ea:da:51:60:73:a4:
c5:32:88:7d:eb:e8:bf:de:05:3f:30:e9:6a:81:06:
02:4d:08:66:06:bf:3e:10:96:c4:4f:2e:37:fb:fc:
23:d5:7c:df:3f:52:d5:b2:2a:65:1e:85:bd:a9:fc:
72:d8:52:41:be:c2:8c:a0:5b:03:a4:27:f4:2f:97:
b4:ac:70:2e:8a:57:2a:ae:89:93:e7:09:e7:8c:aa:
00:d7:35:57:bf:17:68:9e:23:dc:32:16:d0:38:c2:
2a:49:4a:bc:db:da:64:ce:d2:4c:ef:d8:bd:27:1c:
30:a5:cf:37:53:29:fd:aa:54:60:01:65:74:0a:30:
54:4b:70:7d:41:33:a7:8b:62:54:1c:62:28:9e:0b:
6a:bc:c9:34:60:f2:c6:4c:3b:7c:87:54:cb:b3:81:
38:a3:ba:a6:35:a4:3e:12:50:69:d7:ee:a9:58:e5:
94:09:05:7e:a3:f2:00:7e:32:69:26:34:7a:33:e1:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:D7:47:92:3E:50:2D:B9:E4:06:3D:53:B4:4D:35:F1:88:E0:71
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KQjXR5I-UC255AY9U7RNNfGI4HE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.20.0/24
Signature Algorithm: sha256WithRSAEncryption
03:35:0d:d2:ef:15:86:bb:be:72:c6:96:da:33:7a:13:eb:88:
50:c2:1e:22:fa:40:c7:fa:20:a8:2c:ad:be:a4:ef:18:46:de:
6a:c7:3c:d9:5d:f6:e1:a9:50:d1:6d:f0:9c:e5:d9:2c:8d:21:
9e:cb:79:4b:fd:72:47:f9:43:90:cd:ba:19:46:43:1e:eb:a4:
a8:1d:2f:70:8b:c3:a7:86:ab:cf:b5:c8:0f:dd:c3:41:5f:d0:
b4:57:df:e7:71:66:be:5f:61:8c:51:e9:e9:82:04:0d:d3:a3:
e7:0b:fd:c2:19:9c:79:5a:fa:0d:bb:06:24:38:58:f9:0f:7e:
7a:36:07:67:8f:61:f7:9b:5d:13:41:1c:95:a3:d9:d2:95:35:
3e:59:54:3e:ee:1e:36:88:b3:e8:8d:de:b6:97:8a:7f:f9:2a:
67:c6:2e:53:dd:80:e2:28:28:46:08:25:5f:a3:47:6b:af:72:
38:35:8c:2d:0f:2b:2c:b2:68:0b:fc:a3:36:98:c3:bd:b3:99:
6e:b6:e3:7f:ef:f7:91:0f:61:8f:f3:de:df:ce:84:2e:7a:53:
4a:2a:a8:80:e6:aa:07:6d:ab:6c:4d:ff:a0:02:b3:79:3b:c8:
8a:2b:86:5d:b5:4f:8a:c3:e7:2b:e4:fa:79:70:f1:08:d8:30:
ad:e3:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org