Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa
File: Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa (raw, json)
Hash identifier: m7+G5zbkxlWRwVbKPNY7aBUQMpeBcFBK6utpctVKkS8=
Subject key identifier: 5E:9D:96:40:F4:7E:D3:21:CC:16:18:1C:8E:6A:69:21:D3:03:59:1B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0617
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa
Signing time: Thu 29 Feb 2024 01:38:32 +0000
ROA not before: Thu 29 Feb 2024 01:38:32 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1559 (0x617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:38:32 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=5E9D9640F47ED321CC16181C8E6A6921D303591B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:57:1c:19:99:c1:bc:fb:74:3d:98:c0:93:
99:aa:d8:a3:88:f0:6b:56:ce:35:f0:1e:a5:53:01:
6c:66:1f:61:ac:ee:b1:58:fc:45:a4:bf:20:19:09:
3d:f9:ef:86:a5:6c:df:6e:71:88:8f:99:e8:4b:3c:
59:71:a4:8d:b9:3e:eb:46:e7:5b:d1:85:cd:76:41:
45:84:30:1d:e9:84:83:f8:94:33:3d:82:78:6b:34:
d2:19:e6:6c:09:e0:77:82:4a:99:ea:28:d7:7e:46:
27:54:7e:a0:c5:d3:4c:39:54:d1:16:22:28:67:87:
f9:f0:c6:62:93:22:14:24:53:20:02:23:b3:f6:66:
d0:e1:a8:bc:3f:24:4e:96:ee:19:3c:b7:12:db:e7:
a8:30:96:92:73:99:ad:4e:48:2b:dc:84:40:35:3d:
b5:95:cd:ee:bd:5d:33:ce:a3:1a:7b:29:9a:24:b8:
03:64:b5:bf:1b:ce:f8:21:39:5b:7b:26:83:26:60:
b4:ff:39:56:14:c2:fc:bf:42:84:3e:3f:c1:8d:ca:
2f:e2:46:99:f4:c4:81:e5:e8:a9:36:22:86:4e:44:
e6:6f:9c:d4:35:b4:8f:66:7c:4e:a1:a9:29:fb:7b:
62:ab:be:84:fb:5a:a4:c7:c1:90:f9:6b:34:d9:54:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:96:40:F4:7E:D3:21:CC:16:18:1C:8E:6A:69:21:D3:03:59:1B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Xp2WQPR-0yHMFhgcjmppIdMDWRs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.4.0/22
Signature Algorithm: sha256WithRSAEncryption
52:8a:39:8d:f3:aa:c3:fc:8e:65:97:3f:b9:9d:ae:15:90:9c:
db:dd:f0:34:e2:ce:d2:39:39:0a:39:cd:76:11:c3:bf:1a:95:
c5:68:de:94:c7:0d:fd:d2:dc:3c:ae:fb:51:34:39:99:fb:db:
89:68:7c:5a:37:f9:01:ee:2b:92:c6:bf:7b:85:b3:a4:67:3a:
76:23:5d:ec:25:27:3f:d5:82:f3:20:4b:66:2f:42:9d:da:08:
cb:f5:49:f0:78:0b:88:0c:8f:aa:a2:b0:b3:9c:c1:9e:4e:c0:
4c:f3:5b:97:5a:07:66:db:c1:f3:82:76:47:fb:86:98:b2:13:
18:0c:70:32:01:45:d6:81:78:a4:ce:de:7c:00:bd:05:1d:72:
88:2b:43:11:fc:f0:69:b7:e2:37:18:99:c1:33:05:10:eb:fd:
70:6a:66:89:61:a8:1a:77:8f:f8:3f:b8:1c:01:ac:67:40:e5:
76:7f:b6:2a:f3:92:08:e1:dd:6a:75:63:75:b0:0b:53:8b:b6:
01:1b:69:a9:97:7b:33:89:dc:0c:de:8f:92:e6:13:f1:3c:62:
78:b0:d4:4e:c5:59:d3:93:37:21:f1:61:3c:74:94:c9:bf:8e:
98:a7:24:b5:d6:9b:94:ba:3c:cb:dd:3f:ba:7e:9d:1f:94:73:
d4:8d:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:41 2025 by rpki-client