Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VwMIZvoVq7qJN6iXcV3IsGOxmOY.roa
File: VwMIZvoVq7qJN6iXcV3IsGOxmOY.roa (raw, json)
Hash identifier: HTNbIM7btLz+35/c5YAMRjo2pCiGwMyvy1TSIicvtI0=
Subject key identifier: 57:03:08:66:FA:15:AB:BA:89:37:A8:97:71:5D:C8:B0:63:B1:98:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01BE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VwMIZvoVq7qJN6iXcV3IsGOxmOY.roa
Signing time: Wed 24 May 2023 16:40:27 +0000
ROA not before: Wed 24 May 2023 16:40:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=57030866FA15ABBA8937A897715DC8B063B198E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:b8:d3:e0:aa:9e:bc:cd:e2:1a:d3:eb:4f:
0e:41:48:a6:c0:24:1d:ce:ec:89:70:35:ed:ba:5a:
d7:e2:7b:5e:9d:40:b8:e6:56:79:25:d8:7f:fe:5d:
8b:4f:94:04:5f:8f:02:d5:e5:b3:c2:10:aa:31:2a:
23:40:3e:11:fc:b9:3e:f3:86:0d:bd:6b:b9:f0:91:
b0:00:5a:c1:77:c7:6a:c6:7b:eb:7b:d3:3d:b4:84:
3f:ee:2d:b0:b9:d7:a9:79:99:b5:74:f9:48:f6:5b:
ce:31:55:e3:06:43:2f:c1:34:ad:81:d6:42:38:a6:
9a:2d:45:ec:b3:4e:23:c0:03:0f:c3:0e:67:40:9c:
12:94:5e:b0:93:3a:95:0e:af:25:9f:2f:b8:65:62:
3b:a4:0a:d0:9f:53:05:a3:c5:d8:54:61:75:15:fb:
81:3a:54:7f:d9:18:ab:1c:97:76:42:ce:a5:e1:a9:
8e:e2:72:2d:87:12:a8:23:7c:49:fe:30:48:cb:dd:
34:0f:b4:e7:bc:0c:22:a8:76:62:29:99:87:e1:c2:
6c:05:42:b5:87:26:af:ca:5d:1f:26:c8:14:cb:ef:
5e:79:bf:2c:2f:12:a2:17:88:e1:5f:58:6d:81:d8:
ba:ae:d9:85:7d:b1:31:5c:54:d3:f8:e0:7b:0f:26:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:08:66:FA:15:AB:BA:89:37:A8:97:71:5D:C8:B0:63:B1:98:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VwMIZvoVq7qJN6iXcV3IsGOxmOY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:20:bf:be:79:57:83:d9:95:c2:9e:97:61:a1:3b:d2:08:50:
ce:87:fd:ca:df:8c:9b:0a:6d:08:49:84:30:db:04:13:f3:78:
6e:46:ef:b8:cd:12:c0:56:cd:33:12:14:c0:09:2d:b7:24:ba:
38:e5:80:67:02:16:25:f2:75:30:ce:d3:a8:b4:7b:7b:5f:58:
3d:92:12:b9:81:45:f2:41:07:8e:29:af:60:b8:22:33:45:ea:
41:5d:80:3c:ed:a2:d0:50:29:49:43:ee:0a:af:01:6f:ec:7c:
f7:42:9f:48:55:60:77:53:c5:da:ef:fa:f2:3d:e7:b7:27:bc:
37:91:39:3e:02:e1:8a:a2:36:14:d9:37:7b:0d:5e:5e:b8:26:
df:51:49:54:86:4b:f9:06:ee:cd:00:81:a1:09:09:e6:83:22:
ac:cd:cf:f1:bf:9c:e9:a4:c1:2e:af:ae:ae:96:db:11:53:b8:
b8:3e:d2:28:1f:ae:1a:0a:42:fd:a2:4b:cf:a9:b9:8c:6c:f4:
05:e1:99:7b:ef:85:19:58:dd:99:97:7d:38:ed:35:f5:c1:03:
f1:48:91:03:c3:b6:6b:c0:5c:f8:3b:2f:e8:f9:7f:68:0c:d8:
d8:de:61:aa:62:8c:dc:c3:4e:8a:10:5e:fa:6e:fd:2f:87:fc:
9b:74:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org