Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mznt7wn53HX0oXyOwU9Gix0iEk0.roa
File: mznt7wn53HX0oXyOwU9Gix0iEk0.roa (raw, json)
Hash identifier: LoPUnVMqLbCxu/z5YicfiQvk8M73C1f+2UXaxPwtwj4=
Subject key identifier: 9B:39:ED:EF:09:F9:DC:75:F4:A1:7C:8E:C1:4F:46:8B:1D:22:12:4D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: C9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mznt7wn53HX0oXyOwU9Gix0iEk0.roa
Signing time: Wed 29 Mar 2023 16:30:49 +0000
ROA not before: Wed 29 Mar 2023 16:30:49 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:30:49 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=9B39EDEF09F9DC75F4A17C8EC14F468B1D22124D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:eb:64:3b:ad:c2:db:da:c0:0f:c7:33:d5:
55:bd:5c:5a:ab:92:7e:2c:e8:8a:95:6d:a2:5b:c6:
5a:08:cc:dc:3a:c6:ad:48:ef:e1:20:48:29:db:63:
25:ae:88:fd:9d:3a:73:8d:07:cd:3e:d3:a5:58:6c:
ba:c7:e9:be:fa:d9:2f:e4:ac:b5:0c:a2:98:1b:36:
9e:fd:66:34:06:1a:70:eb:dd:94:77:cd:5d:a6:0e:
49:0e:1c:0b:14:0b:e0:77:91:78:59:b9:6e:60:1e:
f2:8a:70:ee:b5:61:ca:51:e4:4b:74:40:71:09:f2:
4a:1a:48:e5:c1:44:90:50:0a:1d:57:b4:de:9a:39:
95:39:8f:44:7f:70:93:87:c1:41:7f:59:99:44:ef:
da:09:59:1c:97:7a:ee:3c:4a:70:65:61:96:ab:f3:
5b:1a:24:95:ed:d7:07:03:5b:f5:34:ee:d9:18:12:
b8:8b:f1:67:5e:b5:46:29:d1:b3:39:b4:0d:c4:19:
d4:9e:b5:89:97:ba:dc:9b:3a:46:51:3f:69:53:68:
3d:9a:4c:30:18:66:7a:f0:77:80:73:79:59:4f:62:
14:1c:89:9c:2a:86:cd:b8:e2:0f:ef:d7:cc:90:f7:
6e:ca:14:84:15:4b:43:e5:a1:2e:83:f9:0d:fc:a6:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:ED:EF:09:F9:DC:75:F4:A1:7C:8E:C1:4F:46:8B:1D:22:12:4D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mznt7wn53HX0oXyOwU9Gix0iEk0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:29:9e:33:86:97:0f:de:77:0f:a3:0d:5e:5d:e3:a6:ac:c9:
46:ef:83:f5:b3:6e:63:d8:b6:28:41:46:85:1b:a7:4b:1f:48:
95:1c:cd:5c:85:b3:ac:7f:2c:8f:1c:db:0b:b3:bd:22:27:ee:
8b:1e:90:34:a1:60:c5:b1:4a:fe:76:ca:96:50:e2:51:40:aa:
0b:27:c4:03:c4:26:56:02:fb:a1:cd:87:b0:ab:0b:35:61:e5:
a6:2f:ef:78:5d:ae:ec:d8:28:88:15:f5:61:76:f7:ff:24:34:
de:85:cf:79:a6:e9:cf:46:4b:d4:ce:f2:a8:58:4d:36:8b:89:
c1:55:75:bc:73:78:08:72:36:79:a3:9a:4d:33:db:77:0f:83:
1d:cb:90:b0:e0:8d:ff:e0:99:c5:05:56:65:ef:ce:73:e0:a1:
43:09:1d:1b:d7:7b:ea:5b:4c:c2:22:8b:56:cf:c0:34:69:ef:
20:d0:1f:2f:86:aa:28:5e:5d:ea:1e:8b:91:38:ba:bd:b5:19:
08:06:99:61:12:92:1b:53:ab:3d:29:99:77:b3:a4:4e:e5:2a:
af:3a:1d:8b:d6:e4:1a:d1:f0:49:7b:b7:b0:b3:f0:68:95:b5:
63:07:f6:11:df:40:5c:3c:e2:7a:b2:a6:f3:f8:3c:06:cf:33:
c1:81:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org