Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa
File: mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa (raw, json)
Hash identifier: /qO+ioFjz/bEW/L+eZNExIsLCEdRy8+3FtXsaO1TdiM=
Subject key identifier: 9A:56:E4:DF:61:35:7F:AF:B2:51:64:00:8F:31:7E:73:56:B6:44:C4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06BD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa
Signing time: Tue 30 Apr 2024 01:46:53 +0000
ROA not before: Tue 30 Apr 2024 01:46:53 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1725 (0x6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:46:53 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=9A56E4DF61357FAFB25164008F317E7356B644C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:f1:6b:91:cd:e4:2e:5c:26:e2:ba:d1:be:
76:97:86:45:be:e0:f0:76:7e:ad:9c:55:c4:bc:71:
f2:31:4c:68:8b:99:aa:69:1b:ac:0f:1b:a3:14:94:
62:4b:a7:de:7a:f2:f7:94:25:cc:ad:ae:42:48:cf:
eb:b4:54:9c:e1:aa:04:f2:57:66:20:ef:6b:87:bb:
80:a8:7b:e7:1e:b8:9b:8e:fc:53:3d:4a:0b:f6:8f:
c4:28:fc:a7:9b:8b:bd:b3:73:8b:df:35:85:f1:27:
1e:bf:13:6a:da:97:ef:2d:c2:5c:79:1f:09:ca:0e:
92:e4:28:02:d2:f2:92:90:f3:ec:fe:52:d3:c9:d2:
a1:89:7e:ac:90:eb:90:c9:af:9b:0f:65:0f:07:4a:
06:aa:ea:28:cb:6d:db:c6:e7:77:cc:6b:19:98:2b:
92:db:49:cb:42:68:8b:c5:93:51:0e:4a:c3:fa:d1:
55:5c:e3:e6:56:15:13:e8:f5:a0:d0:c4:f6:68:b8:
8e:c4:91:b2:39:ab:28:8c:b8:64:ff:4f:9d:90:a8:
9b:3f:67:a5:e4:23:d0:84:13:eb:8e:16:f2:32:97:
fa:91:cc:41:53:8a:22:06:66:2c:21:2f:33:22:d1:
1e:4a:01:ca:07:45:4c:c3:29:69:bf:ec:fd:d6:30:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:E4:DF:61:35:7F:AF:B2:51:64:00:8F:31:7E:73:56:B6:44:C4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mlbk32E1f6-yUWQAjzF-c1a2RMQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:20:71:22:93:cf:91:cd:7e:e1:3a:ea:f9:36:7c:ac:c3:46:
6f:d7:5b:8e:84:61:cd:ed:a8:ec:11:c2:fd:cc:40:e4:54:ee:
11:3f:0e:cc:c2:14:d6:f9:69:d9:e3:96:3d:0f:de:b2:29:5d:
dd:bb:a1:78:94:a8:a6:a9:3a:b7:7c:e2:0d:cb:28:32:8f:2a:
68:07:93:35:5c:36:9c:d5:54:8a:6b:b7:ab:90:9d:85:e8:93:
a7:7a:15:e3:f0:09:a3:e7:4e:79:f2:3c:e4:51:61:78:09:0f:
4c:1c:d6:4c:14:4f:0e:9a:09:23:b8:a6:36:ea:5e:ba:04:e9:
3d:a7:06:49:fe:9f:99:c5:11:3c:85:aa:7d:62:3a:82:21:06:
42:a4:8d:3a:05:51:68:a4:9a:a2:9e:40:47:21:de:5d:a3:d6:
15:24:46:ee:62:a0:01:b2:3c:ff:cd:bb:27:b6:0f:4c:10:2c:
7e:9a:7e:76:95:58:8f:66:92:14:b2:c8:ff:09:3f:61:e2:f7:
eb:b5:2d:88:a7:1e:40:4e:f9:6d:11:5f:15:30:0a:69:d1:a3:
f0:68:37:c2:ec:d2:49:f7:16:c6:76:01:88:c3:f4:70:7c:55:
3e:04:ab:c3:7f:75:47:95:dc:0f:82:43:69:31:4c:40:a0:f8:
33:56:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:33 2025 by rpki-client