Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/p6iMKiWtZsFFxYu03hSjg5eIgGw.roa
File: p6iMKiWtZsFFxYu03hSjg5eIgGw.roa (raw, json)
Hash identifier: 0BVBG4gQc4I9cLRsU+3kE1zkb00rpaMdHDsHoBgEohE=
Subject key identifier: A7:A8:8C:2A:25:AD:66:C1:45:C5:8B:B4:DE:14:A3:83:97:88:80:6C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0228
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p6iMKiWtZsFFxYu03hSjg5eIgGw.roa
Signing time: Tue 30 May 2023 16:30:33 +0000
ROA not before: Tue 30 May 2023 16:30:33 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.74.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:33 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=A7A88C2A25AD66C145C58BB4DE14A3839788806C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:3b:bf:66:48:b6:9b:56:63:4d:39:33:3a:
24:07:d7:f2:67:e0:da:57:f1:1f:7b:b3:aa:1a:2c:
89:b2:55:86:b5:52:81:7d:5f:7a:db:c2:ef:bf:55:
2d:dc:f5:41:0d:ed:da:9a:c1:3e:66:0a:42:f7:66:
ce:1f:8f:5d:b0:6e:b3:21:6b:6f:ee:97:28:2d:68:
65:6b:48:5d:d2:4e:84:4c:d0:ee:3f:65:b2:3c:e5:
71:65:8e:a7:71:62:b1:da:9f:6f:a7:16:6c:9f:32:
68:80:64:93:d2:88:cb:32:47:7e:96:39:0f:6e:f0:
10:dc:6c:84:f7:bb:30:d7:06:63:f3:30:f0:1d:4a:
b3:9b:5f:be:36:bf:e5:f9:91:09:6b:42:80:e4:cd:
27:18:13:20:38:6e:e5:f5:84:ec:98:94:32:69:db:
b6:b3:42:cf:92:55:8f:b0:e0:90:3b:76:71:5a:60:
fb:fc:66:8b:2f:9c:93:ce:6a:ea:5d:13:d5:d8:59:
d2:00:83:f3:9a:bb:4e:37:20:ea:4c:0a:53:12:d2:
71:65:03:0f:86:38:37:c6:a7:8c:6d:6b:d1:c1:42:
4e:a5:27:b6:33:31:86:02:e5:60:fe:b5:1a:36:bc:
e2:5c:36:c2:17:85:70:9b:b7:65:b3:a1:f9:94:16:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:8C:2A:25:AD:66:C1:45:C5:8B:B4:DE:14:A3:83:97:88:80:6C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/p6iMKiWtZsFFxYu03hSjg5eIgGw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.74.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:3d:45:0b:0f:bd:6e:5e:72:0c:c7:60:61:5e:4c:16:ad:47:
2b:7c:0f:c2:be:47:68:36:30:1d:8a:63:19:7e:31:57:b7:ae:
e8:27:b7:ef:91:6a:73:50:ff:e9:3e:76:64:fa:32:75:38:d6:
21:07:6d:d5:3f:c2:18:66:a8:6c:b5:9e:2e:f1:0b:8e:7d:78:
88:09:2d:60:b0:cc:b7:5c:b8:f2:6d:f2:eb:9b:cc:69:6e:0b:
e3:37:ca:35:7d:3c:dd:8a:9f:10:f8:ce:90:1f:72:12:7d:28:
55:3a:10:29:8c:e3:86:7c:aa:42:6c:05:b3:3b:ea:54:45:4c:
c3:d8:a6:e4:2e:78:7b:31:16:f8:3f:a4:6f:1a:07:ee:27:b9:
87:18:8d:e3:d4:e1:83:08:a6:91:f3:cf:c5:82:f4:29:9e:63:
7a:a6:7c:84:93:2b:dc:83:b8:d4:f2:53:35:0e:d7:ea:87:29:
9d:41:ba:90:ca:dc:36:01:89:a9:64:d2:3c:7b:8b:c4:e2:cf:
2b:0d:41:08:a1:ed:bd:24:a4:46:63:f2:01:aa:93:8a:7e:81:
32:42:c0:ca:5e:70:59:41:33:ee:af:67:90:41:a7:60:65:8f:
e7:8a:28:19:5a:67:11:7d:d0:ae:2b:ec:45:50:c5:95:af:de:
45:70:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org