Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/U2r0TuD0_yf_JUS2bBVWSwtXpYo.roa
File: U2r0TuD0_yf_JUS2bBVWSwtXpYo.roa (raw, json)
Hash identifier: JwacBmhiABDI/p1Pcb+PeQtYYu2b5hXa+M28NKLcfLE=
Subject key identifier: 53:6A:F4:4E:E0:F4:FF:27:FF:25:44:B6:6C:15:56:4B:0B:57:A5:8A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/U2r0TuD0_yf_JUS2bBVWSwtXpYo.roa
Signing time: Wed 22 Mar 2023 16:03:38 +0000
ROA not before: Wed 22 Mar 2023 16:03:38 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 22 16:03:38 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=536AF44EE0F4FF27FF2544B66C15564B0B57A58A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:4b:ce:1b:e3:8c:b3:07:4f:b8:fa:96:37:
a5:97:f6:3d:8a:1b:64:08:82:bc:ff:67:32:96:d4:
1a:60:a6:1a:55:63:29:99:ef:28:f2:bf:7b:51:75:
b8:fa:a2:7d:8c:d2:50:bc:ed:98:c8:78:7e:c5:49:
6a:13:ae:58:6b:06:50:55:4c:22:0e:4d:e5:6e:c4:
11:8c:ba:4d:07:c0:f1:fc:ee:93:95:51:21:94:f6:
6a:58:8b:a3:1c:dc:91:2f:0d:1f:32:c6:07:c5:b1:
ec:24:61:11:8b:36:1a:9f:34:84:a2:27:04:64:8e:
d3:1f:66:ed:16:05:90:a9:3d:c6:39:4f:f6:d2:d0:
43:5d:92:ab:8a:2d:6f:10:a6:a3:88:a6:3b:b4:99:
8f:df:ae:3a:50:6f:37:80:bc:fe:4e:5b:3b:91:19:
07:17:97:95:ba:06:ef:d1:af:aa:f3:c9:11:21:67:
77:50:29:75:ba:9b:ab:1f:43:ed:eb:9d:80:7b:df:
6f:f3:1c:62:78:70:33:c4:78:92:aa:92:33:dd:04:
cc:79:49:f9:53:cf:04:57:2d:90:e0:db:64:0d:4c:
88:70:fb:ce:27:24:36:b7:16:ba:c4:03:d0:70:28:
eb:14:3b:d2:28:38:e2:f0:3f:93:18:15:e5:ad:e3:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:F4:4E:E0:F4:FF:27:FF:25:44:B6:6C:15:56:4B:0B:57:A5:8A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/U2r0TuD0_yf_JUS2bBVWSwtXpYo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.229.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f1:6b:e5:96:bd:f5:c5:b2:88:a1:77:f6:46:58:98:0d:80:
1c:e2:66:4c:38:e7:77:5b:0e:81:6f:86:a2:54:cd:a8:dc:9a:
7d:cb:7a:9f:c9:1e:21:70:28:d3:89:02:16:76:ce:03:be:b1:
e6:1b:10:74:46:09:87:dd:77:d5:9e:de:75:13:ed:75:56:28:
2e:15:da:02:c6:93:cd:35:5c:73:4f:7f:8f:94:0d:65:87:bc:
f7:2f:56:c1:3a:9b:5a:0a:ff:dc:c6:1c:16:c6:6c:55:80:0a:
bf:1e:c9:c8:8a:91:2f:59:63:ff:01:db:0c:fa:68:94:0e:01:
cb:ff:b6:19:3d:93:8e:47:42:fa:b3:28:df:25:39:27:95:30:
e8:91:08:89:2a:1e:0e:28:87:67:14:39:9d:9b:fd:57:87:bf:
48:8a:a1:ee:b8:05:f1:81:24:95:1f:a6:4b:f3:81:ce:0a:41:
ad:ab:45:7e:4e:7a:20:f9:9f:53:d8:a3:7f:fd:54:9f:d6:9e:
6d:0b:d9:fe:2f:40:e7:5d:cd:f3:f5:08:a1:14:f6:4d:0a:2c:
fc:c7:37:df:6d:f4:bd:79:05:9e:ec:a9:1c:10:8f:94:a3:79:
77:cf:d5:38:84:4c:c8:07:cb:ed:aa:0f:6a:ea:4b:02:52:d1:
51:87:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org