Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vxdu2YlE6fqF6pT4chlI-_ckDis.roa
File: Vxdu2YlE6fqF6pT4chlI-_ckDis.roa (raw, json)
Hash identifier: mwrBQLCN0RtMEXIiLauMJUxOQ6J5DfO4Ej0i/hofOuk=
Subject key identifier: 57:17:6E:D9:89:44:E9:FA:85:EA:94:F8:72:19:48:FB:F7:24:0E:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04CF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vxdu2YlE6fqF6pT4chlI-_ckDis.roa
Signing time: Thu 27 Jul 2023 16:48:20 +0000
ROA not before: Thu 27 Jul 2023 16:48:20 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.159.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:48:20 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=57176ED98944E9FA85EA94F8721948FBF7240E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:29:e7:d3:d3:b3:0f:b3:f2:91:d6:89:f2:
fa:a0:fa:fa:41:35:6b:4a:50:11:7d:80:a9:63:69:
f1:9e:8f:27:01:82:56:cd:66:e7:0e:92:20:ff:5f:
0f:5d:fd:bf:e8:e7:3f:e3:bd:b3:48:1e:cf:a1:87:
32:f9:32:8c:a2:b9:ef:89:d3:b5:07:cf:52:95:b5:
0e:7d:ab:10:5b:c5:d5:e4:8f:85:26:0b:e8:4e:5a:
1f:fd:35:a3:ad:5d:56:88:ce:a1:85:93:55:fc:bb:
a5:de:99:08:5e:e4:89:12:2c:10:07:e6:29:8d:c2:
6a:2e:f9:70:25:29:bd:cb:da:21:df:e8:da:9f:07:
b3:b4:45:ce:f6:f6:8e:29:4c:77:ee:84:e1:96:b9:
0c:cc:15:65:a2:a6:a9:a4:f4:11:21:84:85:37:2e:
b9:a2:6f:bc:50:aa:a3:4e:1b:9b:67:6b:7f:74:c9:
34:e9:3b:2a:85:bb:eb:fe:71:14:99:b2:c0:1c:71:
ef:22:22:05:c9:06:de:c7:08:37:1b:16:a0:a0:4f:
6c:0e:7a:21:f3:d0:30:ee:7d:9b:0f:a5:6f:ea:30:
d1:9b:31:a4:30:3f:ca:51:1b:a7:3e:0d:79:39:bc:
75:11:f0:33:2c:6a:db:9a:de:c0:1a:54:90:bc:4e:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:6E:D9:89:44:E9:FA:85:EA:94:F8:72:19:48:FB:F7:24:0E:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Vxdu2YlE6fqF6pT4chlI-_ckDis.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:a0:74:93:fd:58:62:1d:45:e7:57:13:6c:69:e2:38:e9:92:
08:0c:cc:0f:5f:c6:14:b7:9a:14:51:66:63:3d:03:35:40:a1:
5b:d2:c2:2c:03:6a:63:db:b2:a1:11:a6:87:e4:98:ec:53:d5:
86:70:33:bb:39:3d:c7:ac:9c:96:68:9b:6c:2d:db:76:8f:33:
39:cd:c6:93:78:8b:51:dd:58:ca:c3:0b:f6:f9:a6:18:2e:dc:
4e:cb:84:de:36:57:4e:d3:97:47:4e:69:c9:82:5a:27:67:33:
d5:30:cd:dd:ce:69:34:5a:b2:ef:f4:4b:f3:73:42:27:d9:6a:
20:0a:54:59:dc:ec:bb:7c:54:f8:22:1c:ce:91:6a:1c:23:f1:
aa:0e:93:e5:03:5e:45:f6:ee:d7:03:f6:b6:94:e6:55:73:a9:
da:43:b9:71:21:55:74:0e:e9:46:3e:9e:e3:7e:5b:a7:20:cf:
78:44:d3:22:51:82:c3:5b:46:05:8d:9b:b3:17:7a:ef:6b:50:
13:e4:90:67:4b:6d:60:08:fb:55:3a:6f:79:00:15:e2:e5:48:
e8:5c:e3:ae:d3:32:e9:d9:64:36:ae:b8:30:b6:66:98:bc:71:
77:61:93:86:b2:46:09:90:79:82:f8:ed:87:ad:6f:2e:4e:4e:
34:cd:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org