Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QVxCF-yfYxw6rD7Vn7JIjJ-HkMw.roa
File: QVxCF-yfYxw6rD7Vn7JIjJ-HkMw.roa (raw, json)
Hash identifier: Mq/u8guF0zafqAGiuBUJVqphfrGEhdprZ9ucu9Ec3ls=
Subject key identifier: 41:5C:42:17:EC:9F:63:1C:3A:AC:3E:D5:9F:B2:48:8C:9F:87:90:CC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QVxCF-yfYxw6rD7Vn7JIjJ-HkMw.roa
Signing time: Wed 24 May 2023 16:40:37 +0000
ROA not before: Wed 24 May 2023 16:40:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=415C4217EC9F631C3AAC3ED59FB2488C9F8790CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:17:ef:21:97:70:8c:dd:dd:5a:99:9f:55:
04:92:8e:c1:87:75:0a:82:e7:66:6d:ed:9a:72:0e:
73:2e:42:45:96:56:e3:87:b2:4e:da:96:0c:74:b6:
40:69:f6:a0:e0:88:bc:30:38:1e:07:0c:66:ee:15:
2c:d1:1d:16:e5:e3:a0:a2:bc:cc:34:96:e9:9a:c4:
6c:b4:02:4a:15:55:2a:7f:40:b2:1f:8d:39:69:a8:
f2:be:38:41:76:ec:f2:da:67:c7:fc:d7:71:63:79:
70:cb:62:d3:06:3e:7b:b8:ee:4e:5a:9c:fb:91:f7:
4a:d6:6c:6d:84:06:ff:fe:0e:4b:3d:68:7d:1e:c4:
e8:62:8e:03:52:81:7a:39:36:2c:d3:0c:7b:9d:f5:
67:15:a7:d0:d4:25:fb:7a:38:bb:a7:75:46:58:32:
b4:45:e3:9b:06:da:d1:03:66:b4:60:7e:bb:20:f2:
79:89:8b:86:ba:31:02:a7:4d:9a:67:70:23:82:57:
b2:0c:da:6f:87:e1:41:2e:bc:f6:6b:11:d1:e2:6c:
da:66:2f:05:4d:63:15:1c:a7:41:73:29:47:4a:64:
f4:6f:96:ca:3c:f1:af:62:f9:4a:d1:62:86:8d:46:
36:94:8f:6a:4f:be:86:91:a6:8c:d7:8a:3a:5d:45:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:42:17:EC:9F:63:1C:3A:AC:3E:D5:9F:B2:48:8C:9F:87:90:CC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QVxCF-yfYxw6rD7Vn7JIjJ-HkMw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.88.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:e9:ff:2c:8b:7f:c6:6e:1f:1e:bf:8f:55:02:85:1f:ca:a4:
7f:61:bc:20:93:b1:7d:54:11:86:6d:e0:37:86:2e:0c:fe:d0:
97:b3:9f:49:51:ec:2b:17:83:47:0e:a4:42:c7:00:d7:bf:24:
1e:9e:91:e4:f5:78:1f:b1:d9:9b:f8:b9:35:a3:7f:65:b5:99:
c5:4a:4c:c1:01:d0:5a:09:47:a1:95:38:f0:e9:60:ce:1c:a8:
7d:fe:1e:3a:0e:82:ea:65:e9:30:88:5f:3b:4e:63:8d:01:5c:
00:5c:b4:23:aa:e3:fc:2e:48:87:c5:f4:79:2c:af:81:90:91:
42:8a:2b:9c:50:61:69:50:6e:ad:6c:ed:dc:3d:ca:d8:3b:9e:
fb:dc:32:2c:bb:e0:f3:6b:94:83:d3:95:9d:ad:77:e6:86:f8:
e5:da:1e:75:d7:be:23:f0:95:9c:eb:a8:69:92:41:0e:e9:38:
8d:4f:c0:13:56:0f:78:f7:e6:50:9a:76:ed:fb:d7:f2:ab:b7:
34:d2:b6:16:c3:5d:16:7b:cd:d6:bd:ac:cb:a4:0d:d8:19:2f:
f8:02:79:32:9e:66:30:63:e7:98:b8:f8:f1:ab:b8:00:30:f6:
ca:b9:cb:1d:a2:2d:08:cd:8b:65:4a:7b:b7:39:f8:85:6d:72:
c3:f2:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org