Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PcXxmy_KZ4S7-gNfLP6HAXyPCVU.roa
File: PcXxmy_KZ4S7-gNfLP6HAXyPCVU.roa (raw, json)
Hash identifier: +oEsEVD/FaIQGRVbnIKTzUzcpvFDGUEo/O5tn0llAlE=
Subject key identifier: 3D:C5:F1:9B:2F:CA:67:84:BB:FA:03:5F:2C:FE:87:01:7C:8F:09:55
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 31
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PcXxmy_KZ4S7-gNfLP6HAXyPCVU.roa
Signing time: Mon 27 Mar 2023 16:02:05 +0000
ROA not before: Mon 27 Mar 2023 16:02:05 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:05 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=3DC5F19B2FCA6784BBFA035F2CFE87017C8F0955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:68:c2:52:d0:c8:b0:6d:61:1a:80:29:3a:
b9:3b:44:37:40:08:67:c1:76:1a:cc:35:f6:c1:d9:
94:c4:c6:c4:9c:42:0b:5e:6c:b2:27:c0:d2:0b:36:
7c:cd:f1:7b:08:ee:34:1b:87:43:3c:e8:f1:ae:ab:
69:fe:6a:af:8d:87:ac:ef:89:89:44:97:cc:ed:b6:
ac:07:29:79:48:f6:5e:a2:ac:b3:a7:fc:b9:d0:15:
78:21:4d:a1:93:45:26:95:60:94:e1:16:c0:76:22:
e0:ba:42:93:2f:69:a7:c4:3b:52:3a:24:36:57:dd:
41:9c:08:1b:c0:39:79:4f:34:80:3e:21:7a:b6:16:
78:b9:0a:af:19:07:96:3a:e0:d6:f1:3a:f4:ea:45:
2d:00:e4:da:9c:67:55:e6:b8:d4:5e:1a:f7:b6:a6:
9c:d3:e3:66:8e:05:37:f8:d5:6e:b1:21:fc:2f:ea:
0b:21:ee:10:66:cb:4d:d2:79:2b:3d:66:f1:64:12:
5e:19:49:55:b3:f1:8c:03:bc:0f:26:de:92:99:c9:
ba:af:f5:80:f3:14:f3:aa:74:2d:61:71:b3:1f:6d:
46:fe:b7:18:fc:52:15:4f:8b:11:16:d4:a1:0f:9c:
60:db:e1:b6:73:43:0e:14:4d:f4:c9:48:da:5d:3f:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:F1:9B:2F:CA:67:84:BB:FA:03:5F:2C:FE:87:01:7C:8F:09:55
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PcXxmy_KZ4S7-gNfLP6HAXyPCVU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d5:7e:17:b5:01:7b:69:59:e4:9d:1e:1f:df:6d:4a:87:77:
12:9c:24:ba:3e:68:e8:03:5d:ff:19:57:e6:4f:59:46:55:99:
3f:04:64:ca:c1:28:85:23:a6:af:e8:11:0c:87:4a:ca:7d:c8:
2b:f5:86:a6:ce:31:f6:1a:38:61:6d:b3:d9:2a:b3:e9:86:12:
98:8d:cf:4a:dc:66:e9:c2:6a:90:44:98:67:94:5f:c2:62:28:
55:a2:6b:6c:dd:b9:ec:13:94:73:cd:18:de:9e:f1:27:6c:7b:
cf:c3:15:b9:08:0a:89:0e:79:df:9e:ef:1f:30:37:31:d2:47:
f5:7b:c8:65:3a:df:10:9a:0f:10:65:6f:88:b1:ee:5d:44:fd:
90:a9:aa:14:fd:2a:db:85:c2:d6:7d:e5:2b:f4:aa:63:b3:14:
68:1d:2d:60:b3:5a:28:1b:70:e9:99:15:b8:34:9b:57:67:eb:
c0:66:c3:45:40:56:e8:f4:0c:27:37:07:1b:f0:96:b2:e8:55:
5b:55:47:5f:49:1f:bc:68:fe:92:ba:49:87:af:3f:1a:4b:ee:
32:2a:30:1e:6a:d8:70:c3:4a:0b:8d:41:c5:87:39:c9:ed:7a:
01:4e:33:6e:97:ce:ac:f6:71:2a:b5:90:26:a4:25:95:ee:cc:
32:77:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org