Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QRm9S7y_jl_tqa1f8D9zLt3FNdg.roa
File: QRm9S7y_jl_tqa1f8D9zLt3FNdg.roa (raw, json)
Hash identifier: iA1xYjerzc79qZ55c2Tj8+TGBH5ksXWH9Zqj40b3fTk=
Subject key identifier: 41:19:BD:4B:BC:BF:8E:5F:ED:A9:AD:5F:F0:3F:73:2E:DD:C5:35:D8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QRm9S7y_jl_tqa1f8D9zLt3FNdg.roa
Signing time: Wed 22 Mar 2023 16:47:40 +0000
ROA not before: Wed 22 Mar 2023 16:47:40 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 22 16:47:40 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=4119BD4BBCBF8E5FEDA9AD5FF03F732EDDC535D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:3b:d0:d4:18:f4:55:0c:73:8d:f4:0b:11:
57:dd:a1:c0:e5:f4:10:51:8c:97:72:4f:10:1e:fb:
b2:33:63:97:7b:fe:83:ac:56:23:7e:40:65:3d:31:
2c:eb:be:22:5a:e6:43:3e:66:d3:a2:b3:59:ec:6f:
b6:88:43:98:4b:6b:67:3f:dd:ba:3b:25:32:8c:b2:
30:28:0b:88:a7:69:41:6f:e5:69:db:82:ba:08:f8:
17:42:d4:61:e1:7c:6c:9f:82:8c:f9:f8:82:29:78:
a6:3b:09:15:68:d7:e0:b5:24:e7:f3:62:cc:a2:7b:
1e:64:ec:ed:54:8c:7c:f5:76:fc:72:1b:30:54:b2:
22:80:dc:a2:69:19:f0:d4:11:4c:0f:94:6f:b1:28:
ca:7a:c0:3b:e1:a1:d3:af:35:da:de:86:e2:b0:0d:
dc:aa:04:09:45:13:df:e4:e1:f6:15:af:7a:7a:be:
8a:f1:8f:40:a7:fb:0a:59:b2:33:c0:3e:21:1e:a1:
f6:2e:2b:ab:38:f4:56:af:74:ea:a6:c1:e2:f3:88:
b0:0c:c7:bd:c7:ca:65:34:be:91:d6:67:1f:25:c9:
3c:c3:1a:e3:52:5c:18:18:34:9a:c2:6a:2c:38:45:
d8:a6:a7:df:fd:3e:9c:36:7f:4c:76:6a:2a:7d:61:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:BD:4B:BC:BF:8E:5F:ED:A9:AD:5F:F0:3F:73:2E:DD:C5:35:D8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QRm9S7y_jl_tqa1f8D9zLt3FNdg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d0:f9:33:0f:10:bc:fe:9f:5f:a1:80:1f:fb:b8:48:02:c1:
56:45:88:60:20:eb:3e:b6:50:62:f8:36:80:cf:f0:a9:81:37:
ae:1d:bc:97:06:f6:bd:63:f8:88:59:ff:2e:64:76:79:35:a3:
ab:27:97:3b:b2:1f:0e:9b:7d:6a:89:1a:c9:70:ac:cf:7a:42:
45:4e:6c:b2:97:90:2f:39:ac:fb:51:68:bd:4c:c5:c8:5e:64:
c5:ee:60:2a:0e:75:06:a0:0f:d1:f4:b4:bd:1f:13:fb:50:36:
4b:82:49:41:8c:00:82:9c:7d:52:67:50:72:8b:a2:8e:a9:c7:
42:18:df:bc:cb:0b:49:31:d3:d9:4b:91:4a:f6:c6:02:2a:be:
34:86:8e:77:f2:e4:14:03:3a:8a:b3:84:2b:86:e7:f4:e0:1c:
0a:9c:30:0b:62:c6:08:fd:08:d1:d5:2e:d7:a1:0a:3b:49:b2:
44:28:c4:a6:d0:20:7b:76:96:df:dc:b4:a4:06:5b:47:eb:de:
45:32:ba:2d:4f:0e:e6:44:02:eb:e8:f7:1f:4e:75:f1:39:d0:
8b:88:ac:ba:e4:30:dd:00:eb:7a:73:53:c8:59:9b:9a:3c:f6:
f4:93:54:d0:c2:8d:74:3e:0d:f7:95:fb:34:85:c8:21:8e:30:
c2:e9:1b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org