Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wc8LR47ZaB6w_XLxAv_Sj1FdljA.roa
File: wc8LR47ZaB6w_XLxAv_Sj1FdljA.roa (raw, json)
Hash identifier: 2Ww5a7My9izIKdEVrSQmlz4DT6rucqQ7MT0ByeWfbwA=
Subject key identifier: C1:CF:0B:47:8E:D9:68:1E:B0:FD:72:F1:02:FF:D2:8F:51:5D:96:30
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0113
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wc8LR47ZaB6w_XLxAv_Sj1FdljA.roa
Signing time: Wed 24 May 2023 16:30:11 +0000
ROA not before: Wed 24 May 2023 16:30:11 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.214.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:11 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C1CF0B478ED9681EB0FD72F102FFD28F515D9630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:e0:48:64:cf:3d:d9:f0:c1:c0:38:d7:1c:
ac:1d:0a:53:07:ed:c6:d6:7a:f4:43:84:28:3e:ad:
d0:a1:97:b3:97:6f:bf:f3:85:9a:cf:37:d8:a5:bb:
9c:6a:ad:55:3a:8c:dc:b1:a9:57:f4:01:16:12:67:
40:5e:71:14:b4:ba:17:74:22:84:51:b0:69:c8:a0:
cf:7b:41:89:e9:84:ae:6a:bc:51:ba:13:3e:df:06:
ba:79:b2:35:04:da:05:af:89:18:da:6b:0c:2f:14:
c1:cf:43:64:ef:bc:e1:78:49:9b:60:c6:de:58:be:
b6:2c:ba:91:d3:ad:dd:6f:57:eb:31:ae:28:8b:83:
21:bd:01:87:fe:69:76:1c:e6:50:d8:40:2d:19:c8:
7f:5a:03:14:2b:ed:2e:7b:e5:65:e2:41:fc:03:85:
a1:a8:1c:ca:27:b4:26:e5:74:a7:0e:0a:3c:a8:3c:
05:aa:b2:f5:d8:54:91:7f:16:15:51:19:7f:09:2a:
9a:cd:de:3e:86:59:5e:e1:bb:42:11:59:80:29:15:
93:39:ce:e1:4c:e8:2f:e6:37:4d:51:2e:60:a1:cb:
cb:93:da:4c:4e:ad:2a:03:e9:6c:cd:35:19:f9:2c:
9a:24:4d:1a:70:7c:21:5a:4d:e2:e3:a2:ae:28:6e:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:0B:47:8E:D9:68:1E:B0:FD:72:F1:02:FF:D2:8F:51:5D:96:30
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wc8LR47ZaB6w_XLxAv_Sj1FdljA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.214.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e1:71:5d:26:3a:e5:22:f1:e6:64:39:3a:3f:94:13:51:0a:
9a:40:19:42:c7:db:03:8b:b4:8f:27:97:66:9b:4c:66:77:44:
d8:f1:bd:32:9f:81:b2:76:2e:be:9b:a2:fb:01:0d:1b:81:60:
14:ff:65:a5:bb:7c:b6:90:6c:ea:cd:23:68:b9:83:cf:e8:2e:
68:16:67:da:32:85:a4:2d:ed:7d:fd:b8:ce:7b:65:9b:54:c6:
96:21:b1:2b:85:ab:61:3a:5b:00:bb:f8:20:1e:7d:0f:05:66:
ac:a4:52:4d:f8:87:5d:8d:e7:0a:02:eb:61:53:0f:bf:8d:05:
8a:87:12:1b:05:ad:37:c9:26:db:8a:9c:5c:b1:a8:93:8e:68:
6b:3a:ef:dc:20:7b:12:9a:4f:7f:aa:2c:7d:f2:02:bc:f0:ac:
13:38:dd:cb:45:21:32:65:c4:dd:66:7f:b8:40:93:07:a2:4a:
a4:29:bc:b0:10:cf:1b:31:d1:66:bc:9b:31:e1:c5:41:d2:b1:
cb:69:35:1e:4f:a6:f8:01:48:87:e9:c4:53:5b:30:04:80:eb:
6f:44:75:3f:36:59:2a:c0:53:32:dc:d3:e4:ee:e5:2c:05:03:
94:02:98:c3:23:a7:85:54:fa:ba:b3:3a:4c:af:ad:c6:da:54:
09:8e:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org