Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jNdIYeegrR8OgOyjp3ij3PnvLFY.roa
File: jNdIYeegrR8OgOyjp3ij3PnvLFY.roa (raw, json)
Hash identifier: /2A+e0HB3psu5LuVlTcnnzlCYIlcvk3WdnFGz5nKaLc=
Subject key identifier: 8C:D7:48:61:E7:A0:AD:1F:0E:80:EC:A3:A7:78:A3:DC:F9:EF:2C:56
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 090E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jNdIYeegrR8OgOyjp3ij3PnvLFY.roa
Signing time: Tue 30 Apr 2024 02:28:42 +0000
ROA not before: Tue 30 Apr 2024 02:28:42 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.186.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:28:42 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8CD74861E7A0AD1F0E80ECA3A778A3DCF9EF2C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:e6:57:cc:6a:60:c6:d5:6c:06:fc:83:99:
85:9c:54:28:7a:84:24:29:36:88:9d:89:ca:67:8d:
00:57:4e:6a:bb:77:02:c3:49:f4:52:ab:67:84:65:
f0:a6:b0:81:5a:83:7b:29:8b:50:63:d1:52:9e:68:
11:86:01:7d:2b:83:91:92:52:c0:83:3e:26:d1:1a:
97:46:54:42:f2:91:eb:97:f4:0a:c8:8f:59:6d:e9:
54:ef:3f:11:2f:a8:ed:b0:5a:4c:63:6f:fd:47:a7:
03:c5:75:c5:fa:e8:cb:74:6c:09:8a:dd:56:7e:43:
cf:74:da:fe:63:99:23:4e:1b:90:b8:1c:69:94:1f:
3c:7e:33:8a:ee:a3:82:81:0b:e4:de:5f:85:90:2d:
2e:fe:8f:94:b8:b6:6d:42:3e:89:82:3b:17:80:65:
96:76:d3:69:33:1e:65:12:e2:40:e2:eb:59:95:c3:
50:ce:7f:5a:17:95:e1:e7:e6:d8:dc:48:30:58:84:
1d:98:a5:99:e2:a7:72:c8:1d:b4:ab:19:07:aa:e1:
92:00:f9:98:76:b6:6c:b6:a1:e8:ff:88:83:ba:92:
18:51:6d:84:1d:0a:05:f6:17:06:70:dd:ac:b8:93:
a7:be:ea:a1:e4:ff:88:4c:86:d9:2e:92:c4:44:1a:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:48:61:E7:A0:AD:1F:0E:80:EC:A3:A7:78:A3:DC:F9:EF:2C:56
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jNdIYeegrR8OgOyjp3ij3PnvLFY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.186.0/23
Signature Algorithm: sha256WithRSAEncryption
30:94:2b:1d:bb:c5:b7:f3:a6:3f:cf:de:14:ee:6d:e4:ba:ef:
d0:10:da:c3:06:a9:85:98:6b:b8:1e:9a:b3:c9:d4:01:6d:3b:
0e:8f:76:ce:62:d7:6b:a6:5c:ab:6d:b7:cf:17:4e:bb:20:3e:
6b:3d:5b:57:61:19:24:de:f3:c7:87:ad:5a:3e:9f:85:7f:0b:
b2:53:ea:41:0f:64:ca:f9:a1:4e:8f:84:0f:d4:80:e6:40:ef:
60:aa:11:90:a7:63:b7:ab:1e:ea:ee:5e:53:c8:3c:b9:83:49:
33:9a:87:42:cc:eb:96:a0:97:64:2c:a9:94:1b:a8:df:fc:ac:
4e:18:d3:2b:94:b7:a6:e4:59:5b:64:49:76:0b:94:b5:9a:54:
60:b6:2d:e1:71:34:71:38:89:2b:da:64:97:71:7a:ab:f2:34:
c1:9d:52:40:94:7b:76:86:0a:4f:78:37:63:06:29:48:69:6f:
b3:08:ef:27:79:49:10:ff:9d:a8:6a:0e:5a:3f:66:a7:f3:50:
8c:2b:44:5e:6c:41:0b:79:18:99:65:c0:41:3e:18:b1:78:cd:
50:a9:47:69:37:16:fe:93:22:52:18:a4:68:fa:b6:67:82:25:
cd:18:e3:ff:70:8f:4e:c5:1a:b0:2b:6f:12:d2:f2:30:a5:f8:
1c:43:71:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:38 2025 by rpki-client