Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aV5tjVoRxYusqAmBgBiXYJmaObA.roa
File: aV5tjVoRxYusqAmBgBiXYJmaObA.roa (raw, json)
Hash identifier: dTJJEfkkdq0LUkIL2AJNVjMmw3DeYGhwkltwu7k8nJ0=
Subject key identifier: 69:5E:6D:8D:5A:11:C5:8B:AC:A8:09:81:80:18:97:60:99:9A:39:B0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 75
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aV5tjVoRxYusqAmBgBiXYJmaObA.roa
Signing time: Mon 27 Mar 2023 16:11:58 +0000
ROA not before: Mon 27 Mar 2023 16:11:58 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.4.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:11:58 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=695E6D8D5A11C58BACA8098180189760999A39B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:44:f3:6d:8b:3e:65:e4:99:fb:75:95:f8:
ba:3c:01:59:ff:ff:27:43:91:d2:92:f9:e4:bd:36:
27:cc:6d:35:1a:4f:02:aa:7f:85:cf:bc:fa:b4:61:
62:db:90:d2:65:45:1c:ba:fd:03:3c:58:b7:f9:86:
51:74:35:ae:7f:d7:06:a0:4d:ba:55:f7:09:6b:19:
c1:4c:da:0c:92:ed:76:3d:e9:a3:33:8d:f1:6a:ee:
f9:00:23:dc:3c:49:00:21:66:dc:58:36:d5:ad:5f:
e2:fe:ce:49:5c:97:7c:23:b0:ae:fd:e9:17:84:b3:
44:f4:1a:a8:bb:bb:42:4a:6e:13:04:09:7b:4a:02:
fd:71:61:aa:f9:b0:84:31:8f:61:17:27:f2:5d:c4:
8b:72:07:09:dc:2e:bf:23:41:91:af:c4:7e:32:06:
46:60:2b:9e:66:a7:e7:90:ab:31:1e:3b:f7:7b:b6:
19:23:f7:d7:63:bb:06:b5:56:a7:c8:e8:4a:31:99:
7e:e8:7e:30:1a:24:99:22:5d:e1:e7:14:3a:7b:0d:
fc:72:b1:bc:0c:71:f9:cb:40:c6:28:ae:55:f1:50:
8e:b3:8e:33:27:3a:d2:51:87:c2:df:b2:b4:21:63:
86:cf:b3:d0:ba:55:15:a4:c8:98:f8:8a:9f:c3:14:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5E:6D:8D:5A:11:C5:8B:AC:A8:09:81:80:18:97:60:99:9A:39:B0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aV5tjVoRxYusqAmBgBiXYJmaObA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d4:34:94:e6:cc:f0:5b:d6:89:54:eb:fb:cb:1d:a7:d9:59:
af:73:35:1c:4e:25:6c:ec:01:f7:65:52:ff:8d:f4:5d:a5:3d:
f5:a3:02:b8:a8:63:3e:5a:dc:ca:94:71:f1:33:ca:54:fb:4c:
ac:4f:71:d9:b7:8f:d1:c3:ae:13:95:a4:72:23:31:69:7c:19:
8f:9b:c3:07:d5:39:4c:41:c5:6b:23:32:4f:08:7d:f5:91:18:
66:1c:61:a8:f1:9a:d3:70:ab:94:27:50:32:e0:2d:db:ac:60:
61:94:5d:09:b4:67:24:cd:7a:66:5e:37:d8:74:83:5f:79:51:
fe:7b:e0:af:cf:6f:17:f8:02:9c:50:63:86:40:e9:75:b0:e5:
be:a7:90:8c:e1:f0:c5:4f:b7:99:c1:23:33:80:7f:70:f7:1b:
ed:0e:62:08:ff:c4:6b:bb:cd:11:b9:e3:5f:20:31:e5:a2:d5:
b8:7d:de:9e:cb:f9:b4:56:2d:bd:00:ba:3c:ae:8d:c5:3e:52:
e0:1f:cb:e2:26:15:3a:69:f9:11:37:4e:d3:67:24:c3:5a:f1:
ae:95:d2:3c:64:5e:15:54:ca:1a:1f:e3:19:3e:6b:fa:c9:65:
c9:9c:b6:d8:c2:69:07:aa:2d:e8:ee:18:03:cf:ad:97:14:0b:
3f:1e:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org