Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zzcs6QJRhD0qERuKZuUPkqYJers.roa
File: Zzcs6QJRhD0qERuKZuUPkqYJers.roa (raw, json)
Hash identifier: NSCFRG8PMyyn8CWh6akdMNq+mRHKysupHuxOEB1OObs=
Subject key identifier: 67:37:2C:E9:02:51:84:3D:2A:11:1B:8A:66:E5:0F:92:A6:09:7A:BB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0545
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zzcs6QJRhD0qERuKZuUPkqYJers.roa
Signing time: Thu 27 Jul 2023 16:56:09 +0000
ROA not before: Thu 27 Jul 2023 16:56:09 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.159.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:56:09 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=67372CE90251843D2A111B8A66E50F92A6097ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:dd:96:85:b1:87:18:40:fa:bf:18:39:62:
fe:68:03:62:1d:8a:78:c3:80:f1:72:22:6a:a8:aa:
c0:37:6f:1b:49:b1:53:ea:e7:f1:f3:8d:ea:5a:14:
9d:05:76:ca:1b:f4:73:0f:fc:23:7a:a4:8c:23:5b:
05:95:e8:af:1a:52:f2:36:74:a6:ca:83:d1:6e:ea:
0f:4b:41:4d:4e:43:00:92:84:8d:a6:f8:21:8c:e7:
6d:bc:ec:03:f0:07:30:a1:c0:81:a2:60:41:98:01:
b4:c1:35:4c:75:fc:e7:1d:76:0b:91:2d:9a:3b:d8:
84:9e:3b:f6:77:97:b6:fe:25:96:d4:c0:fe:c7:13:
16:2d:07:b3:99:39:d4:ca:fa:b4:af:b8:7e:9d:3b:
d1:86:42:93:19:ec:14:fa:38:da:9c:f7:20:66:a2:
d5:be:90:d3:21:92:1d:6e:7b:9a:2d:18:4c:a1:4f:
80:c9:36:9e:30:a6:51:de:43:e4:12:28:ec:56:03:
17:07:27:ed:01:b7:24:4a:c3:73:cc:af:27:82:e3:
57:18:ba:1a:0d:ab:4e:28:14:ef:45:f5:aa:10:5c:
8b:75:11:94:d0:84:ba:73:d7:dd:57:8a:8b:ef:7b:
61:e9:b0:bc:66:ca:2a:17:15:c4:d9:cb:ea:bd:fe:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:2C:E9:02:51:84:3D:2A:11:1B:8A:66:E5:0F:92:A6:09:7A:BB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zzcs6QJRhD0qERuKZuUPkqYJers.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.238.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:53:60:f1:b7:ad:f4:43:fa:c4:6a:6b:89:b0:7d:c8:4c:1a:
c4:96:b4:b2:68:b6:24:85:4b:15:52:ef:08:61:80:1f:aa:f3:
f1:e8:11:80:bf:7c:92:87:7b:b7:0e:c9:03:5c:12:43:12:b3:
53:f7:f1:39:f7:96:b7:07:b8:01:70:96:71:bc:f6:de:95:d3:
64:c4:97:14:52:b2:38:86:85:58:7a:69:41:06:2d:4d:95:e6:
90:7d:d1:05:84:79:b5:23:f3:f6:73:66:c9:53:72:07:16:6a:
4a:52:eb:e0:e3:b7:cf:be:33:15:52:07:87:04:47:7c:c5:b6:
94:62:cf:b1:24:dc:41:88:c7:fe:74:9d:b6:8c:b5:f4:66:56:
70:0f:09:37:f2:18:d5:7e:5f:e4:f4:70:43:d4:51:b3:27:86:
3d:2a:06:f6:41:d4:b3:e8:71:a3:55:dc:a9:4b:39:93:6e:46:
0e:d8:e0:df:65:f7:a4:ce:a2:a9:2b:57:9e:25:ec:7d:6b:7e:
a1:5b:9e:94:d6:77:56:7c:5d:56:4b:33:4e:ee:5b:35:16:0e:
22:15:02:3e:7f:f8:8f:19:ac:e4:49:3b:8f:50:ea:56:88:af:
6d:1a:93:83:a8:22:7c:54:8d:28:b4:6b:6b:b1:74:51:fb:79:
13:fc:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:02:47 2024 by rpki-client on console-ams.rpki-client.org