Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aE35Jgl_9IuOaAKpMsmvXOwLlHA.roa
File: aE35Jgl_9IuOaAKpMsmvXOwLlHA.roa (raw, json)
Hash identifier: YvW6Ih8pK+O6SAqw1ceCPQz09aQbE9EAaURKBHhXLNo=
Subject key identifier: 68:4D:F9:26:09:7F:F4:8B:8E:68:02:A9:32:C9:AF:5C:EC:0B:94:70
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 016A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aE35Jgl_9IuOaAKpMsmvXOwLlHA.roa
Signing time: Wed 24 May 2023 16:33:17 +0000
ROA not before: Wed 24 May 2023 16:33:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=684DF926097FF48B8E6802A932C9AF5CEC0B9470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:82:f3:1f:46:0c:68:0d:02:38:e5:ef:1f:
5d:d2:d0:89:80:1c:f0:1e:23:e8:dd:16:16:28:74:
e7:d7:45:78:29:5d:43:62:5e:de:72:e3:fb:c5:58:
80:ba:41:78:5e:08:36:1f:8d:7d:cf:4f:16:1f:b2:
0e:eb:57:86:59:f2:da:9b:7a:fb:6f:be:eb:c8:8b:
72:e7:52:09:e9:4b:1d:0b:d9:24:b0:fc:71:d5:fb:
75:40:c1:62:14:fc:1c:91:c3:ea:29:60:bc:6f:11:
e9:ad:fb:63:80:a4:0c:7b:0e:67:74:7e:ad:f1:a5:
6b:89:e9:f1:f8:b7:7a:e3:9a:a6:d0:c2:89:50:5d:
04:2a:ee:b2:29:51:bb:40:c5:f1:b7:41:9d:2f:e5:
3f:d9:44:57:bd:3e:b1:23:34:ed:11:2b:55:03:d5:
a0:2d:41:41:86:b5:38:24:ad:fa:87:b7:21:b6:c9:
00:1e:5b:f2:e4:52:d2:43:57:43:73:52:b3:11:9e:
ee:ba:d9:fc:ce:62:88:20:86:f3:95:e0:10:b8:d6:
be:41:db:c8:ec:c5:b6:a9:1c:75:c5:ba:d0:b3:9d:
72:e7:9c:c6:e7:2c:8b:79:dd:bf:cc:5c:1c:06:14:
af:41:04:38:9d:e2:b7:96:bc:67:5c:d3:63:c8:5b:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:F9:26:09:7F:F4:8B:8E:68:02:A9:32:C9:AF:5C:EC:0B:94:70
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aE35Jgl_9IuOaAKpMsmvXOwLlHA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.7.0/24
Signature Algorithm: sha256WithRSAEncryption
73:95:14:21:06:54:e5:ad:cd:75:42:b8:0c:d6:0e:ae:e9:42:
aa:28:d4:6a:c2:e0:9e:94:70:0c:86:bf:fe:56:b8:c9:e1:4b:
48:94:5d:5b:ab:f0:35:93:70:82:51:fd:2f:c2:64:3f:5b:be:
ee:6e:56:fe:c2:82:47:63:d9:45:b4:a0:ce:2f:f1:72:6a:27:
53:0b:c4:f6:9f:ef:07:f3:ca:5b:85:12:8c:64:29:9b:77:dd:
5f:47:24:4d:40:65:b2:23:fe:43:ce:5c:fe:1c:88:1a:96:ca:
48:ab:8e:1c:54:6e:73:8b:c4:35:e5:5d:a6:69:42:cb:00:22:
b1:19:c0:5c:f4:bc:1f:fe:2c:9d:b3:54:54:b0:5d:1a:09:f9:
49:45:90:bc:c1:bc:db:29:4b:dd:96:b5:55:68:91:e4:d5:35:
43:de:36:47:0d:e0:02:d6:ef:d2:41:d4:81:9d:fb:cb:88:9f:
a5:dd:cd:e8:42:65:07:a4:7b:6d:cf:94:54:96:e1:f9:e0:d0:
db:47:68:e6:d8:a5:2a:ef:e7:0d:66:5e:38:d8:7c:3b:cb:ca:
2c:af:c7:ef:a0:41:ea:a9:da:63:30:f2:86:4b:48:51:ec:b6:
71:bd:a6:5f:55:69:b1:d7:e2:da:53:a1:f3:d4:b8:e2:7e:16:
03:b6:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org