Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSO6tZBaR8qA2-PaAbEUhUWU9qw.roa
File: OSO6tZBaR8qA2-PaAbEUhUWU9qw.roa (raw, json)
Hash identifier: LgTiSImOmZNwSNENXEl1GJ48fwf4z4wsBx1gf321wuc=
Subject key identifier: 39:23:BA:B5:90:5A:47:CA:80:DB:E3:DA:01:B1:14:85:45:94:F6:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0440
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSO6tZBaR8qA2-PaAbEUhUWU9qw.roa
Signing time: Thu 27 Jul 2023 16:43:08 +0000
ROA not before: Thu 27 Jul 2023 16:43:08 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1088 (0x440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:43:08 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=3923BAB5905A47CA80DBE3DA01B114854594F6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:8c:6b:7e:bb:3d:a5:0a:db:0c:f0:e8:69:
05:2d:a5:30:7f:b2:a0:31:d4:97:9b:e3:94:b3:8e:
47:0a:05:a4:b9:9b:73:bc:fb:d6:67:11:c7:87:e3:
86:5f:9f:ca:1a:41:6b:23:04:be:c9:aa:41:fc:e8:
e0:50:fa:ad:22:35:23:59:b3:51:51:66:50:2f:0f:
e0:17:66:09:57:53:12:54:39:86:f6:e7:3c:4c:c0:
a5:a0:24:81:26:15:cd:28:de:f2:3a:86:3e:52:46:
6b:a0:f6:42:93:5c:53:ca:40:56:f1:b3:4f:79:89:
bf:fd:be:27:ea:15:90:41:9a:7f:d7:a6:7a:36:b4:
15:3d:a2:ac:70:11:5a:13:af:33:11:3a:3b:03:d6:
75:f8:9a:9d:56:4d:1f:13:d1:c6:ef:d4:ba:b2:eb:
bf:21:34:03:7a:8b:9e:52:18:f7:38:44:ce:2a:24:
7b:a2:4d:60:30:b5:ef:04:8e:9a:90:b9:2d:9e:f2:
81:aa:93:d9:a8:10:a8:4b:32:de:5a:81:61:bf:d3:
46:7e:45:73:ba:ba:fe:b0:91:cb:9c:c5:bb:ef:26:
12:23:33:d0:9d:1f:ea:d3:48:d1:26:a9:31:ad:2e:
2c:32:c8:29:70:69:0f:27:2f:40:c3:25:6d:f4:ce:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:BA:B5:90:5A:47:CA:80:DB:E3:DA:01:B1:14:85:45:94:F6:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OSO6tZBaR8qA2-PaAbEUhUWU9qw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.58.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:0e:61:94:9c:c5:73:6b:a2:01:90:0d:b8:af:78:79:49:27:
52:d0:28:89:28:08:0f:67:b1:74:c0:0c:bf:e3:43:ef:11:ec:
aa:aa:00:45:4f:eb:60:16:05:58:cc:09:a8:8e:0d:10:f2:d5:
8b:71:c9:9c:5e:45:f1:76:51:b1:ad:6b:4b:72:12:b3:bb:9d:
53:dc:c8:a8:ba:94:53:20:0e:1c:b3:e4:57:ad:04:d0:ce:ae:
db:77:15:e9:ca:83:ca:7d:cc:03:51:ef:a6:94:56:09:dd:8f:
c0:82:b9:8d:4b:a4:3f:6a:71:a3:6a:51:28:d2:8d:22:59:8b:
e0:4e:e0:e0:51:7f:e3:ba:f4:cf:f9:d6:2f:bd:ee:21:26:cc:
bc:92:a5:7b:83:5f:91:57:4b:be:07:23:ab:4e:e6:7f:19:63:
b5:c0:22:71:f8:d5:49:26:d3:e1:11:ab:7f:70:25:c3:9f:50:
e1:b1:22:67:87:e4:d7:0c:a6:ea:09:6c:ee:1d:0f:c3:40:4d:
94:54:74:51:fd:b2:85:66:af:cd:03:ac:5a:5c:b5:9f:f3:21:
81:b2:70:1d:17:6a:9b:d8:e7:bc:2b:3d:3f:cd:a1:1b:a3:5c:
f3:c4:01:85:61:8c:f4:5e:2c:ba:53:89:e4:6d:31:06:53:47:
8f:8f:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org