Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/lB8PXfC4okNEGkHc9pu54ggRIjc.roa
File: lB8PXfC4okNEGkHc9pu54ggRIjc.roa (raw, json)
Hash identifier: LDfkyhhC515kRbYRmLO4QMVvnKmtQm3zUQADCUw2W1I=
Subject key identifier: 94:1F:0F:5D:F0:B8:A2:43:44:1A:41:DC:F6:9B:B9:E2:08:11:22:37
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01D8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lB8PXfC4okNEGkHc9pu54ggRIjc.roa
Signing time: Wed 24 May 2023 16:40:36 +0000
ROA not before: Wed 24 May 2023 16:40:36 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:36 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=941F0F5DF0B8A243441A41DCF69BB9E208112237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:71:ca:f4:1c:6f:25:1b:61:71:4e:7e:56:
37:e0:ed:8a:98:69:11:d0:f7:21:9b:67:95:e8:e0:
85:ae:ed:f3:4b:0c:d2:43:5f:cc:af:5f:0d:1b:f7:
a7:60:82:1c:d2:03:df:70:de:7f:f6:ed:02:b4:2d:
73:9e:44:b0:41:15:0a:26:29:4c:2c:87:37:09:f9:
0c:7a:02:ca:cb:b5:a1:da:82:2f:cd:29:05:63:08:
8d:88:ae:93:fb:73:7d:aa:20:3e:94:92:d6:f9:21:
3e:1f:6d:be:49:c9:ca:bc:30:4f:40:f2:73:ab:b4:
b8:1a:3a:81:e8:93:04:fb:68:82:12:98:e4:25:c9:
00:12:b7:60:c9:ec:97:e9:5b:d6:86:ac:90:46:a0:
6a:4d:44:de:3f:67:f5:07:f3:67:8a:af:dd:05:fe:
51:94:66:5c:49:38:64:77:2c:d3:c8:56:07:8b:f0:
97:93:7b:29:52:8f:23:16:55:7f:54:2e:81:c8:43:
13:37:ec:9b:0a:1f:31:22:ae:12:07:99:42:de:08:
bd:f0:be:e1:9b:99:3a:99:7f:5d:bb:68:30:4d:33:
92:f1:1a:d7:3d:f0:6e:a1:5e:42:14:a2:27:68:ec:
ba:b8:e7:4c:72:d9:1b:28:eb:a5:f6:b3:47:d2:13:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:0F:5D:F0:B8:A2:43:44:1A:41:DC:F6:9B:B9:E2:08:11:22:37
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/lB8PXfC4okNEGkHc9pu54ggRIjc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.36.0/22
Signature Algorithm: sha256WithRSAEncryption
89:46:ee:13:94:fa:5c:06:dc:11:c3:6e:44:5a:62:24:62:b5:
9d:49:b5:2e:69:2b:33:a4:79:6b:33:36:bc:d7:f1:ec:a8:b9:
37:8f:f2:93:6d:fa:c8:fa:61:c5:99:55:14:1b:e2:7e:e3:99:
2b:13:36:0d:4e:63:13:b6:b9:84:d1:61:c1:4e:81:2a:95:53:
3d:2c:84:40:98:e5:b1:cd:a9:a3:87:af:90:62:b5:55:2a:84:
b7:6d:aa:a2:99:e2:33:fa:9e:19:80:43:18:02:9c:3c:bd:7e:
7c:b1:0e:56:86:af:36:cf:5d:2f:34:3d:0c:07:ac:df:46:c6:
15:3b:5b:5d:ef:f4:37:0c:6b:51:5a:30:55:67:ad:1c:0a:7a:
e9:93:b5:7d:44:3e:36:f7:3b:b0:44:15:54:f3:1d:b3:9d:bf:
81:dc:b9:7c:45:19:ae:40:3c:a2:96:b4:95:e5:77:a3:d9:98:
a4:4e:e2:eb:d2:92:63:36:03:54:b6:07:46:ea:85:8e:b4:0c:
43:d8:8b:91:43:e2:c7:b7:59:d2:a9:41:ec:21:e9:07:f9:e2:
93:e1:7e:6f:6c:ed:54:f6:6b:3d:fa:dc:91:61:18:4f:2d:69:
13:ab:77:49:6c:b0:6c:79:6d:09:b8:1e:40:c2:c0:86:8d:fe:
b1:45:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org