Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yESqb_6-QdnVMvxUHOW1stK7ns4.roa
File: yESqb_6-QdnVMvxUHOW1stK7ns4.roa (raw, json)
Hash identifier: EnBSCm1NhV3ewu9ZNRiAcwriA8AgA02a4OOrTptjBuk=
Subject key identifier: C8:44:AA:6F:FE:BE:41:D9:D5:32:FC:54:1C:E5:B5:B2:D2:BB:9E:CE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 30
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yESqb_6-QdnVMvxUHOW1stK7ns4.roa
Signing time: Mon 27 Mar 2023 16:02:05 +0000
ROA not before: Mon 27 Mar 2023 16:02:05 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:05 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C844AA6FFEBE41D9D532FC541CE5B5B2D2BB9ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:c0:06:60:3c:6a:6a:6a:26:84:cb:1e:25:
79:3b:96:9b:c5:ff:94:66:93:56:c6:84:d9:8d:0e:
50:f8:01:f4:60:b6:69:2b:75:b9:61:a1:50:19:12:
ca:af:3a:53:50:ec:ea:d4:a7:95:ef:51:b8:fb:e1:
b8:ad:3a:a5:6b:4a:1b:e6:47:da:d7:d7:b8:9e:a4:
d8:1c:62:a1:ff:8d:9d:49:9b:53:50:9a:58:ae:96:
b6:85:31:b5:e2:0f:b9:b8:1f:32:57:65:c8:26:a7:
e8:bb:fc:1a:25:27:34:fd:a7:a8:78:1e:3b:02:08:
0f:04:7b:36:21:a4:39:29:75:f9:ff:ac:03:8c:a4:
ac:7d:19:55:b9:0e:17:67:fe:bb:d2:e1:4c:26:ef:
8a:cb:fe:0e:a7:8d:72:14:78:f7:75:b1:aa:92:9d:
97:59:85:0b:d2:ce:37:5f:08:07:f8:3c:d9:cf:eb:
90:70:42:44:0a:c4:64:51:2f:b0:23:39:07:53:ad:
ea:5c:82:03:52:9f:d0:d8:6a:c6:f8:6c:aa:7f:41:
53:6f:23:7e:89:19:87:53:ce:42:a6:38:91:cf:44:
dc:61:07:12:d6:86:9f:3c:e6:a5:72:ba:25:6e:f9:
84:6b:1c:c4:bb:e4:95:e6:16:f2:ad:60:3e:e4:4a:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:AA:6F:FE:BE:41:D9:D5:32:FC:54:1C:E5:B5:B2:D2:BB:9E:CE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yESqb_6-QdnVMvxUHOW1stK7ns4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.128.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:58:e8:46:f7:e3:9c:b6:2d:ce:ea:75:f1:a7:8c:7f:b0:78:
79:61:3e:25:ba:33:b7:32:27:49:4a:37:f1:09:cd:60:25:5f:
c6:2a:1d:83:40:fa:b5:70:eb:f1:44:2a:0d:b6:f7:71:34:b4:
ea:63:bf:94:83:f9:b5:13:8f:08:89:9f:de:74:21:8b:45:11:
18:36:cd:ce:85:8c:42:f5:77:fd:d9:da:d7:bf:30:40:8f:52:
1d:cd:8d:7a:9c:4a:6b:8d:a7:bb:70:0c:0d:94:2e:c5:ee:8c:
fd:e2:e5:53:4e:e0:a4:71:c7:05:f9:8b:11:ac:ec:d1:f2:f6:
0b:ce:b4:20:45:67:d6:40:dc:12:f1:8b:b5:45:ff:e2:db:6e:
99:a4:40:50:d9:72:70:30:1e:e3:e5:8c:68:8a:0e:89:b7:d0:
2e:d3:1c:52:5a:d2:a5:0e:ec:7f:ae:72:4e:9f:a2:bd:aa:8c:
04:65:e1:d7:2b:6c:a7:dc:6c:60:a7:41:0b:43:0d:92:30:c5:
03:f7:48:f3:ce:46:ad:24:b6:a1:af:50:12:d5:cf:fb:e4:8d:
68:e2:7e:f2:68:71:47:72:58:7b:99:0c:3d:a2:36:0e:6d:a8:
7a:c2:2a:47:e2:6e:1e:40:b7:35:47:1a:65:0b:f4:2f:b9:5c:
2e:03:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org