Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/r1gTM52fLWPcVwbpd_aau7D92wM.roa
File: r1gTM52fLWPcVwbpd_aau7D92wM.roa (raw, json)
Hash identifier: yRBN7YTvwidqSzfF3YWIusKg0p9EAhIQ3874mLZ7VFQ=
Subject key identifier: AF:58:13:33:9D:9F:2D:63:DC:57:06:E9:77:F6:9A:BB:B0:FD:DB:03
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r1gTM52fLWPcVwbpd_aau7D92wM.roa
Signing time: Thu 29 Feb 2024 01:32:12 +0000
ROA not before: Thu 29 Feb 2024 01:32:12 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:32:12 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=AF5813339D9F2D63DC5706E977F69ABBB0FDDB03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:96:f2:20:a8:28:b5:e4:42:cd:92:84:fa:
1b:f5:ef:ed:1d:bf:e7:1c:e4:97:a5:12:bf:c0:8c:
ef:80:80:fb:7a:12:5c:37:65:57:3f:09:fb:82:18:
b0:bb:56:10:a7:fa:a0:61:b9:a9:be:35:ab:be:89:
b4:c7:b4:9b:08:b0:19:e4:2f:f6:50:fd:d6:2e:df:
a5:12:50:59:85:9c:66:65:e5:ab:72:32:52:8a:23:
3f:5a:25:7e:f0:fc:2b:b1:d4:64:fc:b0:49:74:46:
bb:bf:b7:ad:6a:44:54:10:35:70:9a:9e:94:58:36:
8e:00:dc:79:8e:43:25:b5:a5:0b:c6:03:2c:74:99:
49:f2:91:95:55:18:4a:58:0a:7c:da:ab:a1:9e:0b:
6a:15:76:06:84:a8:2a:19:d2:fd:e4:a1:2d:51:8e:
d7:31:7b:0a:bc:6c:36:4c:52:61:ea:13:e8:4a:e3:
04:38:14:07:67:66:a2:c9:e6:fe:a2:db:54:4a:7e:
16:28:7e:a1:26:e8:21:9b:e8:c1:68:33:da:16:4a:
bd:dc:30:b8:88:51:31:dd:07:35:3a:6a:99:2d:45:
96:6b:76:62:5c:07:b1:8a:e2:0d:31:cb:94:5d:74:
09:8c:40:6b:62:1c:eb:b3:55:5c:5e:9b:01:56:66:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:58:13:33:9D:9F:2D:63:DC:57:06:E9:77:F6:9A:BB:B0:FD:DB:03
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/r1gTM52fLWPcVwbpd_aau7D92wM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.10.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d5:08:35:93:95:3d:3a:33:f6:8e:50:2e:aa:6c:2a:98:81:
9c:df:26:7b:c8:16:4d:8a:71:a8:2b:af:5b:ce:2a:e4:78:9d:
63:99:8c:a5:cd:28:52:79:fa:98:48:0c:e1:38:3b:92:1a:cb:
5a:df:ae:e9:bc:74:b8:07:a0:36:5f:8c:ea:08:11:d6:62:3b:
19:b5:bd:2f:11:30:9c:ab:39:0f:dd:91:31:c5:f8:bb:2e:a5:
fc:4f:fa:97:3a:2b:e8:1f:cb:b9:62:81:f3:f1:2b:77:ed:17:
a8:d9:4e:76:3f:b7:98:3d:f1:ee:69:03:5a:90:b7:41:6d:c7:
8d:d7:8e:43:3b:89:86:24:8e:d7:57:1f:eb:cf:c7:6e:b8:2a:
27:22:07:7d:b4:4a:09:b3:f8:81:b3:07:d4:62:6f:9c:5b:8f:
d7:e9:ab:b5:59:f3:ce:ed:ae:77:55:4d:d0:78:19:0c:7b:4a:
20:ee:19:82:7a:53:0b:58:12:3a:1f:1a:5a:c6:57:a7:f4:ed:
02:99:81:c2:00:e2:e1:8e:ff:5b:07:de:69:33:82:cb:14:ba:
d5:dd:bc:45:8b:91:96:4f:0c:a8:3b:b8:71:eb:70:13:26:60:
ee:20:58:04:f4:96:ad:29:d1:ba:ab:a0:b4:db:4e:39:85:58:
8b:72:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:09 2025 by rpki-client