Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/h5ijCxBehoM-Okn0GC6YXLzdTzg.roa
File: h5ijCxBehoM-Okn0GC6YXLzdTzg.roa (raw, json)
Hash identifier: qXkIPZviB2xwBYPrKkAB+gMLxbgJBB3tKXj9IOTa1QA=
Subject key identifier: 87:98:A3:0B:10:5E:86:83:3E:3A:49:F4:18:2E:98:5C:BC:DD:4F:38
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0772
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h5ijCxBehoM-Okn0GC6YXLzdTzg.roa
Signing time: Tue 30 Apr 2024 02:01:47 +0000
ROA not before: Tue 30 Apr 2024 02:01:47 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:01:47 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8798A30B105E86833E3A49F4182E985CBCDD4F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d2:67:22:9f:ce:1a:e7:e0:7f:60:22:5f:6d:
fc:c5:ab:c1:03:a7:47:92:b4:24:cd:e1:d0:06:da:
67:e9:6d:9a:e5:d1:9f:95:3d:4e:72:e3:e5:c1:6e:
c4:38:f7:97:63:db:f6:36:8e:7d:27:04:4d:62:9d:
b2:33:17:7a:6b:1a:cc:1c:65:e4:56:5d:8e:41:bb:
20:83:cb:71:b2:12:e0:82:f5:8a:04:1c:62:1b:ce:
6d:d0:b5:7c:ca:9b:31:3f:f9:8f:68:ca:84:ba:02:
a2:08:67:8b:cc:9c:7f:06:c5:14:fa:04:2a:f3:fa:
7f:cc:d0:af:bc:55:61:76:0b:8a:e4:37:9a:d7:f0:
f8:e8:b7:92:d1:24:a9:fd:2e:03:ff:4d:63:16:f4:
85:bf:82:6f:2a:73:03:3b:fa:86:fa:01:f9:21:2a:
4f:b4:57:87:86:5d:b0:1a:91:51:1b:72:8d:d0:56:
ee:79:de:20:4a:84:83:c9:f9:1a:29:21:4f:97:28:
5d:ee:76:91:86:8d:df:f4:13:d2:08:74:8a:2c:6c:
49:a5:96:23:bd:bb:8e:21:84:25:7d:38:3a:2a:5e:
c4:d5:e0:43:94:cf:53:4c:bd:4d:16:06:09:f2:fd:
c4:9f:ee:e7:72:12:46:07:80:b3:2c:f7:c3:52:ed:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:A3:0B:10:5E:86:83:3E:3A:49:F4:18:2E:98:5C:BC:DD:4F:38
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/h5ijCxBehoM-Okn0GC6YXLzdTzg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.164.0/23
Signature Algorithm: sha256WithRSAEncryption
00:cf:15:74:bf:b2:24:61:6b:2a:9b:43:93:6b:c3:67:db:ca:
b7:93:3a:0e:de:6d:5f:ec:12:d1:bd:48:53:87:3b:11:35:74:
a3:91:0d:67:88:61:6f:6f:e9:d5:c8:df:00:5b:f4:c2:ae:00:
c4:49:08:51:01:d3:9d:2a:38:42:83:e0:7f:d8:45:d6:85:68:
02:4d:09:43:de:45:9e:4c:fb:1a:0c:86:ed:09:b3:9b:26:87:
07:68:2d:57:c6:45:5a:8b:73:9b:13:6e:6d:28:52:34:92:da:
84:76:08:8e:04:f7:d0:14:08:e5:ea:32:4d:17:42:63:b0:5c:
37:ae:ff:2a:db:aa:70:e5:07:d6:1f:fb:ac:b0:d2:38:80:5b:
60:20:8c:d3:a4:e7:87:65:f6:45:63:c8:80:b1:8c:66:b6:9f:
cd:34:6f:1f:77:fd:e0:cd:5e:75:74:43:c8:d6:c0:38:1e:f5:
9a:f8:dc:c8:d4:e9:50:b8:8f:b0:5e:a6:58:59:41:88:ba:c4:
39:4b:dc:77:65:ac:62:18:88:76:5a:c3:fb:81:e4:c6:cd:2a:
09:9c:2d:67:2a:8b:80:11:52:78:d1:9f:c2:d6:5d:bd:5e:69:
d9:01:2e:31:dd:9f:30:b8:29:b0:33:2a:8d:d9:b3:b1:23:54:
6f:2f:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:06 2025 by rpki-client