Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nTu5HcbfpnHIk9FinB6T11MYGhc.roa
File: nTu5HcbfpnHIk9FinB6T11MYGhc.roa (raw, json)
Hash identifier: tVzslNCn9JXIO3Tb34yY14Ohgc8e7QGnYEzu1rCFe5A=
Subject key identifier: 9D:3B:B9:1D:C6:DF:A6:71:C8:93:D1:62:9C:1E:93:D7:53:18:1A:17
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 029C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nTu5HcbfpnHIk9FinB6T11MYGhc.roa
Signing time: Tue 30 May 2023 16:36:32 +0000
ROA not before: Tue 30 May 2023 16:36:32 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 110.158.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:32 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9D3BB91DC6DFA671C893D1629C1E93D753181A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:bb:7c:1d:a7:72:51:a8:4a:24:0a:9a:f1:
c5:34:e2:a9:5a:cb:34:e7:05:96:3d:5b:14:c7:df:
1b:bf:e2:57:d7:35:a6:6a:b4:31:b6:33:83:0b:92:
f8:d0:19:94:e5:b5:46:65:bd:26:d7:50:2d:96:cb:
19:38:06:ca:2c:5d:ee:ba:86:82:11:23:30:2c:6b:
76:7d:16:23:f6:f6:8f:e0:ca:9c:96:eb:7e:c3:cf:
2d:6d:88:03:16:f5:a2:99:d0:f0:8e:75:f4:41:68:
4d:27:2c:1d:3c:29:e4:8a:f7:7f:33:54:07:8e:bb:
fc:39:a9:53:4a:26:d4:00:68:10:15:57:ad:fc:2e:
bb:af:e9:90:63:9f:60:d8:14:89:35:40:37:79:1f:
7a:9f:20:04:96:6b:b8:1d:6d:5d:23:64:f4:6c:79:
55:2a:77:81:ae:b9:4d:5f:8e:65:91:d4:89:3f:47:
1b:9e:2e:3c:78:51:55:d0:f7:7f:3b:2b:cb:7e:ee:
15:bd:36:2f:18:86:a8:db:ed:71:ab:d8:7d:70:41:
14:f6:dc:d5:a1:9c:fd:c7:2a:cb:02:14:bc:81:79:
b0:69:7b:0e:7f:7e:d5:71:44:5f:f3:e3:2a:3f:2e:
7b:2f:fe:6a:f2:22:a8:39:05:f8:6d:3a:df:d2:62:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3B:B9:1D:C6:DF:A6:71:C8:93:D1:62:9C:1E:93:D7:53:18:1A:17
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nTu5HcbfpnHIk9FinB6T11MYGhc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.136.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:f8:9f:fc:d2:10:09:32:ae:23:90:26:12:9a:7b:98:8b:b3:
7a:33:ae:98:4b:9b:15:53:ea:4f:c2:c0:fd:dc:a4:e5:eb:e2:
51:96:90:f4:44:32:43:2b:d1:31:44:df:75:c6:5a:01:e7:54:
88:b8:57:37:07:b6:d5:ec:e8:b9:88:fc:2d:c3:03:a0:3b:f6:
dd:58:b1:13:e1:8c:ab:85:53:9b:0b:3c:66:54:ef:d0:72:44:
68:6e:e4:73:3a:09:09:ae:f4:c8:83:d7:c0:78:2d:85:b1:a2:
b7:54:37:0d:f3:b0:e4:59:74:83:08:d2:19:e5:d9:1a:cc:78:
e3:29:e9:5e:4c:53:69:b0:07:f5:b1:70:fa:e0:da:9c:a0:7b:
a5:36:c9:a5:7d:0a:09:5f:63:f1:98:0b:1a:00:3f:dd:11:a7:
33:49:2a:b0:ba:8f:1c:2f:c2:e7:96:66:02:9a:63:04:5c:f5:
5f:0b:19:8a:1e:41:d9:69:92:e0:47:8c:65:1b:27:28:a1:be:
ac:a7:31:8f:34:37:0c:df:ac:ae:17:f4:f1:c7:f7:28:92:35:
ab:bf:2f:be:d5:b3:0d:d5:ef:20:4e:cc:59:fd:19:f5:3a:62:
77:f8:e4:8e:ea:d5:ee:0e:cc:a8:d5:6c:43:9a:4c:c2:dd:04:
24:c7:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org