Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1qTYUrddXzr2ufBdnqVodYeOmA.roa
File: s1qTYUrddXzr2ufBdnqVodYeOmA.roa (raw, json)
Hash identifier: HwhQM8ZLZLhFl007r2i/j0s803qiDbf0AQmcnRNa6Ws=
Subject key identifier: B3:5A:93:61:4A:DD:75:7C:EB:DA:E7:C1:76:7A:95:A1:D6:1E:3A:60
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05B0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1qTYUrddXzr2ufBdnqVodYeOmA.roa
Signing time: Thu 27 Jul 2023 17:00:23 +0000
ROA not before: Thu 27 Jul 2023 17:00:23 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.79.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 17:00:23 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=B35A93614ADD757CEBDAE7C1767A95A1D61E3A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:91:14:62:fd:2e:01:e6:49:f8:ec:44:3f:
ec:0d:bd:9d:94:81:4b:f1:1f:85:5f:d0:8c:b9:63:
53:05:26:e4:14:c5:e0:1f:e4:9d:3e:c8:65:e1:56:
21:e2:f7:ad:24:c0:c2:81:22:f4:f2:66:36:42:c1:
de:97:ad:35:51:0d:22:61:c7:41:4e:bf:3a:ea:65:
50:91:40:31:fd:5d:0f:db:14:fa:1b:37:70:da:cc:
84:7b:fe:96:f7:0b:5d:62:5b:c0:1e:96:4e:dc:46:
5b:3b:84:ff:a8:b7:46:78:b8:87:87:8d:4f:26:51:
f1:a4:d2:95:77:53:66:fa:9f:ab:bd:07:06:0b:bc:
e2:71:2c:53:e8:4a:8f:1f:3c:32:6d:02:25:87:41:
3f:56:d6:80:7e:f6:c7:48:81:65:f1:d2:ca:12:99:
7b:77:80:69:a0:7b:43:95:5c:48:17:88:e5:ae:62:
ca:44:e8:bf:ec:0b:81:5d:22:35:24:ea:7f:4b:98:
dc:b2:f1:76:4a:f5:e5:1c:50:9b:57:d0:ab:15:a3:
bc:b5:07:f0:ea:4b:1c:e7:8f:f4:5b:db:da:13:67:
fa:7b:4e:7e:b6:99:5e:78:83:68:97:37:52:e2:4a:
d4:45:41:93:9c:09:33:5f:17:dd:c1:80:62:d7:87:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:93:61:4A:DD:75:7C:EB:DA:E7:C1:76:7A:95:A1:D6:1E:3A:60
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s1qTYUrddXzr2ufBdnqVodYeOmA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.174.0/23
Signature Algorithm: sha256WithRSAEncryption
85:30:4e:7a:1f:30:69:6f:e1:88:55:9f:f9:0b:8a:7b:47:3e:
f7:60:3d:31:61:fe:3e:60:bc:9a:9c:90:da:11:0b:9f:71:35:
de:11:bc:95:ec:63:d7:ad:21:ac:3c:4f:6c:bd:72:1d:c7:fb:
55:bb:e1:90:c0:78:b4:67:31:cd:db:6e:e6:fa:a7:c8:97:e2:
66:14:52:2c:1b:c0:51:9f:e0:a3:e0:05:c3:28:a6:cf:44:c2:
70:86:db:76:20:50:f5:28:9e:9b:04:e9:7c:ff:85:f2:25:c0:
d4:30:7b:ed:b9:2e:8f:9c:39:3c:3f:ec:db:50:0a:6e:0a:a0:
03:97:06:89:3f:9f:55:6a:75:dc:16:1a:b6:87:42:39:51:83:
c0:76:43:d6:9f:91:59:23:ef:2f:d6:c4:cd:4c:aa:e4:97:24:
e0:c5:59:28:8e:07:10:f2:6c:bc:b2:f7:a8:cd:17:ff:a0:6c:
48:50:b7:05:a9:c3:da:ab:91:9e:f5:76:df:93:13:d8:e9:df:
f2:88:a7:e9:15:05:62:85:8b:de:01:80:dd:1c:d3:67:6c:e5:
78:16:b6:c7:7f:af:fd:db:29:ca:31:ae:0f:af:c2:e8:65:9c:
60:6e:e2:97:3e:b8:8c:12:de:9c:42:39:c5:85:4f:bd:5d:bb:
d3:6c:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:20 2024 by rpki-client on console-fra.rpki-client.org