Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ODtVZPVYw2TWLYV7VA6XOC3vFOs.roa
File: ODtVZPVYw2TWLYV7VA6XOC3vFOs.roa (raw, json)
Hash identifier: 25PvN72kBk7X9HWmCV7lDzIiCmqSdGxQblThYx9vgsE=
Subject key identifier: 38:3B:55:64:F5:58:C3:64:D6:2D:85:7B:54:0E:97:38:2D:EF:14:EB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0226
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ODtVZPVYw2TWLYV7VA6XOC3vFOs.roa
Signing time: Tue 30 May 2023 16:30:32 +0000
ROA not before: Tue 30 May 2023 16:30:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=383B5564F558C364D62D857B540E97382DEF14EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:7c:b4:d4:58:9d:eb:96:b2:9b:69:c7:86:
fc:4f:c7:4f:91:77:d1:a1:10:30:f5:be:d8:7b:b0:
dd:2a:2f:b9:96:49:fd:f5:55:bd:12:05:11:88:ac:
e1:f3:fc:0b:f8:3a:50:00:31:b0:02:ad:23:13:5d:
f8:a8:20:ca:49:4e:ef:0d:a1:dd:61:6b:0c:24:9b:
7f:3c:ef:01:19:7d:d3:83:cb:d6:04:bb:92:2d:48:
72:4c:69:b0:54:2c:b1:ce:b6:6b:29:80:8d:29:84:
47:55:7b:1b:aa:b1:e5:3c:21:d5:33:39:f6:56:d6:
dc:a8:4f:5c:aa:6d:b8:06:f0:12:be:dd:7c:e5:99:
ab:fc:22:52:4f:68:9b:e2:85:22:be:51:3e:4a:5e:
58:b8:8c:5e:8c:42:9c:21:f9:c0:fb:d1:e3:33:34:
a3:ea:68:bb:78:6c:a3:9d:b3:fd:34:f7:8d:1f:33:
3f:d7:96:f8:6b:b9:cd:49:f1:63:64:14:c7:52:21:
48:1b:95:7c:6d:02:f4:7a:97:b2:e0:58:cd:dd:1f:
a8:7c:c6:89:a1:82:4d:03:a2:f6:32:a3:62:17:dd:
8d:47:1e:00:72:ae:4c:bf:e7:ae:ff:03:37:48:f1:
5f:6e:b1:8d:c4:f6:88:b3:89:9a:6c:25:0d:18:9c:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3B:55:64:F5:58:C3:64:D6:2D:85:7B:54:0E:97:38:2D:EF:14:EB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ODtVZPVYw2TWLYV7VA6XOC3vFOs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.30.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:de:49:81:db:68:53:d8:6b:e9:e4:49:f6:7d:7f:b8:29:72:
7b:ff:dd:cf:06:aa:c8:03:e4:bd:0d:94:84:0a:0f:a4:7f:92:
c1:5a:1f:e7:dc:63:a0:0a:2b:4a:ea:cc:69:7c:4b:2b:44:90:
61:4c:d6:35:59:29:c5:e3:78:eb:38:b6:8b:8e:07:25:1a:fc:
08:64:9a:c0:55:a6:c0:ed:9f:56:5b:28:71:d9:ad:6b:96:64:
19:91:d8:14:7f:d0:cf:e3:ba:1a:ee:6e:f5:6b:f1:e4:ab:de:
b9:45:1f:e6:b7:6b:91:a8:41:ed:73:de:c7:f9:8b:c5:6f:67:
96:23:63:f8:9a:b9:95:68:4b:c1:dc:4e:0f:1a:64:17:77:27:
d5:46:d1:c4:9e:cf:51:bd:c9:9a:7e:3a:5e:7c:4b:7a:96:98:
de:f7:38:d1:10:89:6d:7c:25:ba:11:51:1b:4c:45:2b:c2:09:
01:00:95:25:78:fe:d2:a4:de:47:21:db:58:c0:61:fe:6a:47:
9f:9a:a5:1c:48:00:d8:19:4a:5e:49:fc:8e:f4:21:c2:60:5a:
4a:90:04:37:c8:15:19:03:9b:e9:0a:ea:44:e0:34:60:65:61:
5f:e1:00:4e:5f:92:17:81:9d:d5:c7:fe:53:fc:74:68:a6:72:
58:66:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org