Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-xso7p3jaJWkVrLtW2r--9LL4s.roa
File: y-xso7p3jaJWkVrLtW2r--9LL4s.roa (raw, json)
Hash identifier: woLVTJYaFe6edNLra6TMrvHrL9I3tHhUSQeZP/DV548=
Subject key identifier: CB:EC:6C:A3:BA:77:8D:A2:56:91:5A:CB:B5:6D:AB:FB:EF:4B:2F:8B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 6F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-xso7p3jaJWkVrLtW2r--9LL4s.roa
Signing time: Mon 27 Mar 2023 16:06:43 +0000
ROA not before: Mon 27 Mar 2023 16:06:43 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:06:43 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=CBEC6CA3BA778DA256915ACBB56DABFBEF4B2F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:fa:af:e3:ad:1f:3c:df:b6:e2:58:d1:59:
63:18:b9:42:9e:d4:23:31:05:cd:11:12:27:a6:31:
09:4a:12:1e:f5:73:5e:15:78:f0:8c:28:ca:28:cf:
64:df:b6:64:b3:01:88:6f:03:f7:07:33:78:da:f8:
40:39:28:f5:c2:a5:51:15:86:6b:26:c0:3d:25:99:
42:59:44:de:3e:dc:4f:ba:58:e9:08:48:c5:bd:a4:
f4:08:5b:aa:3d:06:67:f1:9c:61:12:1b:42:bc:1c:
b1:39:fe:c3:ab:45:30:61:20:d0:74:85:68:ba:aa:
9b:7b:41:72:c1:81:61:68:e9:15:7e:e8:f6:2c:20:
99:d0:d6:74:17:db:f7:23:08:3b:89:bd:9d:dc:50:
24:4d:7c:4a:29:d4:9b:49:2c:8c:68:ea:4c:a2:d4:
b5:10:30:b3:31:51:b8:ee:a9:54:ff:60:5b:e2:d6:
ec:42:fd:d5:b4:a2:91:cb:0c:cf:65:cb:a8:c3:6c:
08:ed:07:a4:8e:c5:d8:7d:f3:12:a5:98:58:2a:08:
60:66:0a:82:13:af:1c:a5:8c:6b:7f:f7:35:25:91:
ec:22:32:5a:f5:17:d6:b9:bf:e6:d1:18:ee:a0:ae:
20:ec:93:84:42:6a:b6:0d:6f:bd:bd:63:9b:1a:12:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:6C:A3:BA:77:8D:A2:56:91:5A:CB:B5:6D:AB:FB:EF:4B:2F:8B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y-xso7p3jaJWkVrLtW2r--9LL4s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5c:88:98:89:67:37:0b:d7:99:73:d7:7e:cc:c1:df:29:f9:
a7:55:79:9b:7d:46:dc:82:4f:8d:b4:26:51:c0:58:f6:5d:63:
02:65:6a:84:f2:c5:0d:6e:04:47:fb:93:34:6f:84:7f:89:84:
22:7b:3d:67:40:ce:1f:f3:a0:14:da:a9:4d:92:ea:75:8f:5b:
62:a9:64:83:3f:68:b8:e8:89:bc:0f:85:46:10:78:0f:e0:95:
8a:8a:bc:d4:c1:65:bf:d4:82:8f:4d:99:f1:ea:ef:1d:95:d3:
ca:ab:61:2d:21:0c:9e:f6:bc:a0:5e:32:c5:4a:e8:72:57:f0:
7c:73:2a:c8:f5:6a:a3:ad:01:79:a5:35:ed:f7:fa:2b:1f:51:
f0:eb:ff:28:52:d9:e5:0d:00:d3:46:71:32:13:45:92:5c:44:
8e:62:bf:bc:fc:ea:8e:25:ee:23:2e:64:f1:ae:ae:27:85:23:
d4:69:9b:5c:52:16:f4:86:04:00:d3:d1:7d:50:4b:7e:81:93:
41:bb:3a:60:d5:bb:63:b5:00:08:cb:04:a4:d7:be:a5:f0:08:
25:25:d8:c4:56:c9:98:85:3b:8d:75:66:11:11:37:4c:60:20:
81:42:5b:6d:52:af:d7:b2:aa:09:7a:5e:ee:27:89:db:fe:07:
5a:48:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:05:49 2024 by rpki-client on console-ams.rpki-client.org