Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/s3WPJOgEIwa4RkLdZ5V3UzlstEw.roa
File: s3WPJOgEIwa4RkLdZ5V3UzlstEw.roa (raw, json)
Hash identifier: Lz7+T43fpR27MNCXDA6m+sOvMvkDh1TSHVoF2Zb+lEY=
Subject key identifier: B3:75:8F:24:E8:04:23:06:B8:46:42:DD:67:95:77:53:39:6C:B4:4C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 017D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s3WPJOgEIwa4RkLdZ5V3UzlstEw.roa
Signing time: Wed 24 May 2023 16:33:23 +0000
ROA not before: Wed 24 May 2023 16:33:23 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:23 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B3758F24E8042306B84642DD67957753396CB44C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:cc:a1:24:50:6a:a3:04:eb:0e:a3:78:a2:
91:f0:25:ac:15:1e:6d:9c:17:98:8e:5d:5c:84:e7:
ea:d6:b2:2d:d6:cb:4d:19:1e:fc:3d:2c:ef:34:79:
f6:be:d6:f8:16:e2:33:8f:71:51:3e:f7:3f:95:d5:
e3:ff:2b:3a:f3:40:1f:cf:96:47:f8:85:00:6f:c7:
66:e7:a3:93:b8:f9:2e:8f:0f:94:e1:3f:65:a0:4a:
f1:22:34:4d:2d:21:7c:85:8c:69:d2:77:0c:a7:54:
31:ac:8c:99:c7:29:8f:19:07:50:5e:b8:f7:fc:3c:
18:4d:5a:7e:bd:c8:d3:d5:21:e3:eb:b1:64:0f:d3:
5e:aa:73:48:72:fe:63:a6:d9:14:ff:4d:c9:5a:d2:
7e:ad:f0:a1:66:e9:c4:a0:80:b0:4c:7c:b5:aa:c8:
87:a4:28:92:d1:ce:67:0b:83:8a:40:0d:1a:b6:2f:
4a:45:27:f1:b4:f3:f0:05:a8:00:46:a0:08:17:00:
81:45:83:65:34:17:5b:5e:9d:9f:8c:a6:8c:36:05:
ac:7e:1c:af:40:d2:51:b8:d7:f3:f9:38:d7:9b:1a:
f5:b6:00:94:7d:eb:23:2d:b5:0d:98:c4:76:33:e9:
2b:94:84:86:b7:23:fd:e3:2b:6e:32:41:b5:bf:d5:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:8F:24:E8:04:23:06:B8:46:42:DD:67:95:77:53:39:6C:B4:4C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/s3WPJOgEIwa4RkLdZ5V3UzlstEw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.12.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:ff:36:d0:12:50:a7:3d:60:a2:11:eb:d0:45:1a:8c:34:55:
b3:fe:9f:79:78:2a:6a:21:58:75:45:13:8e:b6:42:e5:99:bc:
f1:06:1e:dc:b6:d2:a1:81:f3:28:de:a1:08:67:63:2b:a5:d2:
c4:04:7f:77:6c:a3:ad:64:6e:d7:da:98:2b:f0:3d:5e:3a:cd:
a7:1f:24:51:47:a2:7e:70:87:71:4f:98:f2:d2:ea:bb:8a:e3:
fa:fc:39:f7:d9:80:46:fb:a3:fb:95:03:d9:87:86:c5:5c:17:
a0:60:9c:08:8e:f4:00:7b:d5:ce:0f:72:87:fb:15:33:da:2f:
9a:02:5b:37:49:45:ec:04:7e:06:e6:d6:34:4c:17:3e:15:f2:
4f:97:97:bf:80:9d:62:0f:03:fb:73:a3:5e:f9:7b:ba:31:ff:
70:82:43:3f:7f:a4:5d:24:6c:29:de:46:f4:20:67:0d:44:3c:
bd:bd:a4:9a:a4:3a:2e:51:cb:3a:72:55:9c:ca:04:a7:b2:17:
fb:83:64:78:6e:18:a3:87:4a:3c:d3:ce:9c:52:ac:24:e9:95:
03:89:7a:8a:be:f3:5a:5c:11:d7:3d:ed:7d:17:81:76:14:8c:
dd:0e:33:fe:a6:b9:ef:cd:f8:28:ef:c9:cc:cf:42:e6:68:0d:
6a:d8:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org