Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xjg_KZ9YILcJF_c-h7lKpV1_3O0.roa
File: xjg_KZ9YILcJF_c-h7lKpV1_3O0.roa (raw, json)
Hash identifier: vCJaxDC5IG2gw12FeTySpPa52nHwAhHA/xNglcz/poc=
Subject key identifier: C6:38:3F:29:9F:58:20:B7:09:17:F7:3E:87:B9:4A:A5:5D:7F:DC:ED
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0465
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xjg_KZ9YILcJF_c-h7lKpV1_3O0.roa
Signing time: Thu 27 Jul 2023 16:44:01 +0000
ROA not before: Thu 27 Jul 2023 16:44:01 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 61.195.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:44:01 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=C6383F299F5820B70917F73E87B94AA55D7FDCED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:a5:e8:a9:b0:30:70:72:d2:f2:fc:53:d6:
5f:0c:d4:a0:cd:f4:89:f8:8d:9c:65:4d:f8:86:50:
fb:f3:e0:cc:70:d4:b2:63:9e:f4:3d:56:0c:f9:67:
fc:9b:49:28:da:d1:28:21:8e:4b:7e:d2:62:80:dd:
17:98:b1:2c:e4:d6:d8:1a:82:37:85:d7:19:91:2f:
35:25:19:ec:d9:9b:f1:8f:19:fc:46:0f:ea:84:88:
65:11:1b:fa:e0:de:a0:27:64:e9:d5:47:16:54:36:
60:05:ae:08:8b:9b:fd:31:59:46:5b:87:65:de:96:
80:ce:2d:38:ca:76:2f:66:6c:4a:aa:71:bc:a2:34:
0a:ee:3c:b9:d2:6a:1c:13:72:e6:2b:47:ac:5f:b2:
d5:8b:bf:77:cc:3c:15:f5:02:eb:fb:9a:a2:9d:cf:
33:98:44:71:5f:36:09:b1:d0:b2:e3:b7:91:e4:bd:
3f:8d:d2:99:78:03:50:48:06:4a:08:6e:d9:95:2b:
45:e4:59:8e:1f:eb:1c:79:f2:03:db:1d:ad:f3:90:
89:0c:7f:64:b9:42:94:d3:a7:e1:f3:c3:27:a3:47:
4e:1c:06:1e:96:e4:00:01:7a:0f:fc:27:e4:bc:17:
30:df:c3:2c:1c:33:46:17:d9:49:22:57:76:2d:4b:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:3F:29:9F:58:20:B7:09:17:F7:3E:87:B9:4A:A5:5D:7F:DC:ED
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xjg_KZ9YILcJF_c-h7lKpV1_3O0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.195.220.0/22
Signature Algorithm: sha256WithRSAEncryption
93:85:42:85:8c:26:f2:1c:f5:b8:d2:ac:22:7b:eb:d1:4e:16:
0b:66:04:3e:f8:92:01:5d:3c:5a:06:db:7c:73:ad:13:79:d3:
c3:01:ff:87:66:10:da:a1:c7:c5:cd:86:72:96:54:ec:2a:e5:
56:53:27:c9:21:c4:b0:80:b8:0f:cf:40:4b:d7:78:b1:16:61:
a1:55:2d:c8:5a:fb:a7:51:83:4a:7e:f4:96:88:7f:dd:f3:68:
62:a1:22:de:c4:73:c9:09:4d:fd:8d:6c:62:61:82:a4:18:36:
21:87:0d:b6:32:71:54:f4:60:31:a5:b5:1b:79:47:31:da:f8:
59:d5:b1:72:4a:25:53:ad:ac:1b:f1:cf:a4:74:23:f0:c4:9f:
c0:d7:bf:8c:2e:10:3e:64:ff:c6:04:57:fc:ae:8c:b3:9f:1a:
04:cf:11:39:25:76:01:a3:5f:5d:bf:06:e3:8a:79:68:a9:34:
c7:55:20:a7:a6:62:c8:89:1a:34:23:8b:e7:2f:f3:f5:ff:0d:
29:51:5f:07:10:5e:97:d6:eb:1c:49:f5:e8:c3:d9:1d:40:48:
ba:45:10:4b:a9:6c:6c:fd:43:93:53:68:fb:12:6b:25:05:5c:
37:33:4b:bb:ee:c4:b1:2d:7c:b6:d9:ae:2c:01:0e:20:79:2f:
53:ce:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org