Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/npOxV65zDQBanU1Z01GbXWSvPhw.roa
File: npOxV65zDQBanU1Z01GbXWSvPhw.roa (raw, json)
Hash identifier: AjCGAWmEHHV/QnTmQvpwD1mEeyjWUr1y7wg6kGZJ27M=
Subject key identifier: 9E:93:B1:57:AE:73:0D:00:5A:9D:4D:59:D3:51:9B:5D:64:AF:3E:1C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0245
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/npOxV65zDQBanU1Z01GbXWSvPhw.roa
Signing time: Tue 30 May 2023 16:32:25 +0000
ROA not before: Tue 30 May 2023 16:32:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:32:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9E93B157AE730D005A9D4D59D3519B5D64AF3E1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:a0:8b:50:3e:47:11:35:dc:b1:a9:2a:e6:
fe:ea:de:40:ea:4e:b8:d1:39:79:47:66:13:43:68:
ba:50:72:b9:06:36:8e:ba:17:ba:9f:70:5a:30:1d:
9b:77:55:1b:3c:00:2d:6d:34:92:72:ce:70:65:68:
31:0d:68:ae:09:3c:92:e3:0a:f6:86:35:df:ef:36:
0f:8a:c3:97:3f:d4:ae:62:98:73:1a:b6:37:a9:b2:
69:f1:2a:f9:6c:ce:f5:54:ab:5e:58:37:fc:e8:e4:
30:cf:91:6d:ea:33:af:65:1c:5a:16:9d:97:49:39:
c9:ae:b4:29:52:1f:77:c9:d6:26:52:54:76:70:75:
e8:07:1e:36:cc:0a:0c:76:15:68:92:c6:36:ce:6e:
b9:26:4c:6c:3a:d1:f4:8c:26:35:ba:42:fb:bb:ed:
bd:eb:22:2f:e7:56:b2:01:8d:99:95:46:27:d5:3c:
f3:86:bd:56:0c:2b:ce:6f:88:ae:31:c1:b7:32:c2:
0b:26:74:a9:3e:78:7a:bd:aa:51:20:93:38:2f:68:
06:bf:4b:6e:3a:18:89:9b:61:c5:84:08:e6:3f:ad:
89:13:a9:af:d5:67:0d:72:cb:c6:09:9e:64:12:d3:
bc:23:17:a4:4a:f1:a0:88:0f:ba:30:5f:6c:0d:ab:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:B1:57:AE:73:0D:00:5A:9D:4D:59:D3:51:9B:5D:64:AF:3E:1C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/npOxV65zDQBanU1Z01GbXWSvPhw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.48.0/20
Signature Algorithm: sha256WithRSAEncryption
64:44:6c:9f:ea:23:df:b6:46:d0:d9:fe:8c:0c:e0:57:84:61:
e6:08:f3:49:46:d0:b4:4f:ac:d3:3c:71:4f:a4:be:b5:e0:8f:
83:cf:fc:c5:56:65:a8:1b:3e:93:4d:be:64:33:1f:42:ef:13:
1a:05:89:a9:b6:69:fb:a5:86:fd:9d:42:c7:13:1b:e6:f8:76:
a0:d3:96:75:7f:63:fa:ab:4d:1d:5c:84:56:3c:4e:b8:f0:8e:
cd:d6:13:88:06:ec:f0:38:98:28:bf:71:5b:0f:41:69:45:8b:
f8:64:1e:2a:a1:1e:ba:6a:65:c7:85:39:01:ff:ab:c8:29:17:
5c:9d:a1:f7:ef:85:da:0d:1b:12:15:b6:5a:6d:8b:f7:0b:ee:
28:15:17:45:aa:88:48:b8:fa:c4:a0:38:93:ef:1c:5b:ba:10:
23:5b:00:a5:32:19:ac:8c:b8:b6:8b:87:2d:cc:f0:c2:e3:96:
13:1f:7e:f3:db:36:92:a8:e4:ed:33:16:5e:89:f3:b6:08:ea:
94:5c:3b:88:ff:2e:fa:ff:27:85:0a:5b:d2:0f:78:60:b9:8e:
fb:39:7a:45:42:84:f9:45:88:96:19:ed:f5:cf:3f:5b:1e:42:
fe:8d:05:1a:75:c0:44:43:81:de:50:46:92:be:d3:ab:0e:e0:
72:04:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org