Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qRPRq5aunNJUS1amMul0jAVwAzc.roa
File: qRPRq5aunNJUS1amMul0jAVwAzc.roa (raw, json)
Hash identifier: SZlGHRhir25kqKs1MyouC9HqZgfyUpFEOxTUjw5LaWM=
Subject key identifier: A9:13:D1:AB:96:AE:9C:D2:54:4B:56:A6:32:E9:74:8C:05:70:03:37
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05E4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qRPRq5aunNJUS1amMul0jAVwAzc.roa
Signing time: Thu 29 Feb 2024 01:32:21 +0000
ROA not before: Thu 29 Feb 2024 01:32:21 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:32:21 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=A913D1AB96AE9CD2544B56A632E9748C05700337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:88:4b:52:d3:a1:cd:bd:f8:03:cd:fb:12:
ac:da:c1:7b:82:f3:bd:01:59:b6:0f:1a:c8:97:46:
35:a8:61:0c:61:66:72:c5:4e:53:d3:f9:b9:fd:1b:
fd:8e:d2:93:1e:b1:3e:53:1e:df:f3:c7:53:49:89:
ce:79:ac:9b:c8:c2:7a:b4:c2:ce:2c:4f:8d:e3:a0:
ca:54:d3:50:cf:64:32:ae:b5:af:8b:bf:19:fe:4f:
f7:c6:26:06:16:0e:51:7b:6c:5c:42:5e:24:5b:b5:
2e:1a:0c:e8:2d:a4:2c:a2:e2:17:2d:ef:e6:1d:82:
c3:03:00:3f:da:3a:3c:a6:a3:d7:77:e2:e2:cc:ec:
63:0e:91:c1:64:50:b2:dd:c4:58:6e:38:cf:e2:e2:
e1:7b:28:61:8f:69:99:4a:02:03:65:66:02:73:7d:
9d:a3:e9:04:42:d7:e2:aa:1f:61:f9:c9:49:0b:cd:
46:61:bc:04:5b:5e:0b:39:56:4f:74:41:41:83:a4:
b9:44:34:18:c2:ed:8e:4f:0b:d4:df:34:26:cd:f0:
69:59:b0:9e:ae:fa:e4:80:69:b3:1f:37:85:44:e6:
00:53:6d:7d:ef:0f:fd:36:16:ea:4b:c5:d8:6d:d4:
3a:6a:d4:5d:e8:05:fc:d5:e5:9e:84:c8:ae:07:54:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:D1:AB:96:AE:9C:D2:54:4B:56:A6:32:E9:74:8C:05:70:03:37
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qRPRq5aunNJUS1amMul0jAVwAzc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f9:03:4e:e8:e7:5e:26:1d:fd:ba:ee:73:c7:1d:d2:03:e4:
f0:a1:46:43:a1:94:13:69:00:2a:19:31:c9:cd:77:d5:63:3a:
7a:6a:88:e5:05:66:04:48:00:19:b5:6a:45:88:26:20:c4:50:
b8:5f:a4:f7:1b:61:0f:92:be:d8:d8:b7:68:f8:7c:f3:2b:83:
a1:87:28:a7:4c:04:c5:08:a6:ed:2e:44:0c:d9:0f:34:72:2c:
c1:ac:37:5f:28:3f:c0:e5:6c:d5:85:4a:ab:b4:9d:63:92:6a:
0e:ca:b1:d4:c6:3f:ea:e9:d5:2c:31:51:78:07:3a:41:28:bf:
c6:50:36:2b:f6:02:da:4c:b6:b1:5b:f3:8f:28:ee:af:c7:a5:
e1:58:33:09:42:4c:ec:da:58:5b:1e:52:a3:54:31:93:c5:24:
f1:8c:d6:9e:2a:8a:5a:73:47:07:a0:1e:ce:ca:e8:a5:07:6e:
25:00:e3:01:5d:db:38:f9:03:07:2d:cc:27:72:53:d7:07:9e:
52:34:35:27:6b:d6:95:1d:da:2b:54:67:d5:36:06:25:6e:d3:
34:6b:ab:9b:d6:a1:a4:3f:1f:9d:ac:fb:65:ef:59:61:58:05:
53:a8:b7:53:17:2d:99:8c:58:11:2d:0c:ff:92:e4:0c:7f:86:
5a:21:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:20 2025 by rpki-client