Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hcrPhxrAb2MBTVTs0aca0TC5v7E.roa
File: hcrPhxrAb2MBTVTs0aca0TC5v7E.roa (raw, json)
Hash identifier: zbrrQHGZ42mOOu1fGUSeQPLJjLOglZcu+JdAH/yVTt0=
Subject key identifier: 85:CA:CF:87:1A:C0:6F:63:01:4D:54:EC:D1:A7:1A:D1:30:B9:BF:B1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hcrPhxrAb2MBTVTs0aca0TC5v7E.roa
Signing time: Tue 30 Apr 2024 01:52:47 +0000
ROA not before: Tue 30 Apr 2024 01:52:47 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:52:47 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=85CACF871AC06F63014D54ECD1A71AD130B9BFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:54:ec:a0:5a:b1:6e:6d:60:41:d3:91:fe:
7b:ba:ce:b9:54:85:06:45:95:53:a2:da:c0:09:7d:
6f:65:33:8e:37:66:e9:24:d3:da:10:ba:0f:a9:45:
68:25:42:03:a3:1a:64:a4:e1:e9:ee:94:b9:30:92:
fe:2d:44:0c:2f:72:2b:56:25:6e:72:52:a3:bf:9d:
27:70:b6:0f:98:c9:e5:9d:77:26:99:34:01:b0:b3:
a7:19:3d:a5:1f:5a:68:cb:53:3a:d3:3e:0e:2f:d4:
63:48:43:c8:88:cb:0f:6a:16:09:b4:82:27:95:e7:
c1:ef:ea:da:d8:40:a3:3e:c8:54:4b:fe:4b:c8:de:
c3:62:84:31:ee:39:79:47:88:59:7b:47:d0:72:ce:
32:d1:a9:f8:33:dc:84:29:8f:60:93:3e:0e:a4:d8:
c1:1d:7a:81:d7:bb:4e:11:04:f3:7d:a6:27:12:7d:
59:74:35:cd:7f:58:99:1e:85:78:44:63:4a:4f:87:
54:1e:d8:33:cb:49:04:d8:ad:22:ee:fe:07:5a:02:
45:31:30:3d:db:a4:7a:c1:13:67:71:4c:32:85:81:
d6:d2:38:c9:ed:76:3b:1d:9b:61:3c:42:42:52:78:
81:90:23:34:ba:c6:c8:13:9a:b4:fb:e4:5a:cd:b1:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CA:CF:87:1A:C0:6F:63:01:4D:54:EC:D1:A7:1A:D1:30:B9:BF:B1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hcrPhxrAb2MBTVTs0aca0TC5v7E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.96.0/22
Signature Algorithm: sha256WithRSAEncryption
af:5c:43:23:fe:7e:75:4a:bb:6e:a7:97:9a:ae:b6:cc:f3:ed:
6c:79:0b:bd:2d:3b:59:52:41:e0:c1:a8:80:b6:1d:73:55:5d:
5a:7c:43:d9:0a:e6:9f:97:56:dc:02:fe:d6:e2:71:58:4c:c7:
59:8e:16:b2:64:2a:e5:6d:c5:b4:f7:b5:da:cc:9a:69:69:da:
53:ed:d6:91:e1:9e:0b:72:3f:8f:0b:bc:a8:37:64:3a:12:f4:
54:60:62:c2:01:29:5a:ec:9a:0d:08:14:4c:77:e9:f4:6a:9f:
b8:b9:86:f0:af:51:ca:97:35:d6:9e:3e:c4:c8:be:d7:de:1b:
25:dd:91:44:07:dd:e9:71:c6:9f:d3:f2:56:70:a2:8b:cb:11:
63:33:6c:9c:3c:bd:b4:71:77:6a:31:f2:2a:a0:d9:2b:1f:66:
23:5f:e1:70:b7:a9:7d:bb:cd:84:be:96:e1:0c:60:bb:b6:38:
26:8e:0d:51:46:6f:b6:87:ae:96:53:9b:17:11:d6:7b:e0:39:
84:8e:56:67:9e:bc:40:dc:78:f0:68:37:d4:9b:cb:4d:46:ac:
0e:31:11:ec:2a:ae:73:f8:d4:d0:91:4d:a1:68:7c:44:41:d1:
3f:36:13:52:23:82:a1:84:13:57:3b:09:1c:15:21:6f:50:57:
6d:5a:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:13 2025 by rpki-client