Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RaB1eagrHEYYR8yEYjyzTIwFuok.roa
File: RaB1eagrHEYYR8yEYjyzTIwFuok.roa (raw, json)
Hash identifier: hYUbQZD7Q8u+PkJwaI50BCNRbDpzMX7DBozZOs3FYuQ=
Subject key identifier: 45:A0:75:79:A8:2B:1C:46:18:47:CC:84:62:3C:B3:4C:8C:05:BA:89
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RaB1eagrHEYYR8yEYjyzTIwFuok.roa
Signing time: Tue 30 Apr 2024 02:24:41 +0000
ROA not before: Tue 30 Apr 2024 02:24:41 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:41 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=45A07579A82B1C461847CC84623CB34C8C05BA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:be:9b:07:e2:ec:fb:4a:17:c2:cd:1e:27:
37:c4:1a:1d:f2:33:44:f4:d8:5a:cb:aa:2b:38:33:
85:40:9f:5b:8b:46:0f:b4:e1:f3:bb:1d:a7:0f:5d:
51:56:e4:c4:a7:d4:b7:54:1c:54:28:33:87:04:77:
85:b1:f2:47:e5:55:81:c5:95:fd:c4:8b:74:0f:ea:
6d:dc:5e:c8:8f:5e:6d:b1:b9:e4:64:d3:9b:34:31:
94:31:28:3f:30:09:b9:c5:2a:35:f1:c8:a9:e5:5c:
19:ac:b3:b0:7f:6a:8f:61:76:2f:43:d8:a0:a1:09:
70:60:dd:ce:7f:0f:82:94:81:93:92:2c:95:74:95:
44:f4:01:80:41:d3:75:5b:b1:40:ba:77:9e:48:a0:
84:bd:e8:57:37:c1:00:c4:19:08:62:76:33:2b:4b:
9a:ff:8a:7d:68:7c:67:46:b0:94:31:92:b1:01:c5:
f2:c6:71:13:c2:8f:07:9b:fa:92:82:78:16:00:26:
77:9a:4d:3f:07:a0:d6:47:70:3b:51:74:ae:2e:61:
d0:fc:e5:a2:07:04:f9:17:71:9a:27:c0:01:4a:93:
10:f3:fd:f4:7e:75:e5:ef:22:b2:6e:75:93:51:34:
f1:39:b9:0c:54:a9:88:89:32:f1:dd:19:9f:2c:ea:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:75:79:A8:2B:1C:46:18:47:CC:84:62:3C:B3:4C:8C:05:BA:89
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RaB1eagrHEYYR8yEYjyzTIwFuok.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ee:04:b7:49:10:7a:f1:99:96:4c:a0:78:74:69:06:47:bc:
39:4b:6d:0c:7a:8f:fe:c4:f4:8a:76:9f:a2:14:c8:e3:3e:76:
8e:a2:8b:19:90:51:d9:3f:ec:51:a5:5e:fc:8a:f4:18:21:e7:
8e:49:2e:72:e4:92:d0:ff:ed:64:e4:36:9b:80:38:2f:2d:d0:
d7:36:88:47:f4:c4:d5:c1:db:1d:f6:40:ce:11:a9:f8:43:1c:
02:a0:92:62:47:bd:bd:df:39:c3:99:95:2e:5c:26:5a:d7:2e:
da:a2:b6:36:fa:50:54:6e:6f:5e:27:18:0d:42:07:7f:1b:ed:
cf:97:fd:dd:ba:3b:95:a9:d8:8b:bd:86:58:a1:8f:78:ed:2d:
06:9d:7c:2d:19:bc:36:49:60:da:a7:34:2c:7b:a6:c3:3d:11:
ea:b2:aa:28:74:ee:7f:62:0e:20:ad:8a:c4:17:0d:df:5d:97:
bf:d2:64:f6:05:1e:17:61:fe:df:49:73:d9:14:f2:74:74:9e:
65:6e:44:18:21:a3:fd:39:6b:05:ac:84:39:6a:4a:fe:8d:3a:
4e:95:e5:ee:a4:f1:1a:7b:e6:da:82:40:5b:fb:b8:0b:69:23:
17:a7:75:45:fc:2b:01:7d:c1:9c:43:5f:02:6c:9f:6f:79:1e:
bf:56:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:30 2025 by rpki-client