Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qJAMkctotybdWifMWjPf-up2-7c.roa
File: qJAMkctotybdWifMWjPf-up2-7c.roa (raw, json)
Hash identifier: /K5y+nXk1WKYxEKIGirXg4le6A1MmCOsk0osBZ54f24=
Subject key identifier: A8:90:0C:91:CB:68:B7:26:DD:5A:27:CC:5A:33:DF:FA:EA:76:FB:B7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06BE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qJAMkctotybdWifMWjPf-up2-7c.roa
Signing time: Tue 30 Apr 2024 01:46:53 +0000
ROA not before: Tue 30 Apr 2024 01:46:53 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726 (0x6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:46:53 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=A8900C91CB68B726DD5A27CC5A33DFFAEA76FBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:94:34:53:32:c1:f5:f0:9d:22:ba:70:b6:
59:1c:08:dc:ef:a5:7c:1f:ff:36:02:7c:39:7b:ef:
e3:d1:96:9f:a8:4d:cf:95:1c:52:ee:30:00:23:4a:
c0:89:c6:b4:4b:32:af:48:b6:0c:69:af:9c:5a:40:
af:f5:91:4b:bc:33:1a:34:fc:76:2e:52:1f:a2:9a:
ed:16:75:bb:fa:6f:d4:84:33:f8:60:66:35:23:07:
68:bb:99:86:c6:8b:ba:92:7d:1f:1b:48:d7:e4:bb:
eb:c1:38:7f:48:80:8f:e9:e8:28:b1:b0:6b:92:97:
89:95:ab:7b:79:26:35:0b:4d:a2:f5:3b:8c:21:04:
ab:c8:7a:51:f9:f7:c0:b8:06:d9:92:0f:41:b8:c7:
15:f7:9b:a3:c9:93:4a:15:da:ab:3b:76:ec:e1:b4:
9e:c2:a0:37:bb:81:58:c8:d7:dc:8b:85:e3:4b:0a:
bd:a0:b4:68:02:7e:f0:52:5c:2f:7f:e8:ac:72:a6:
e3:4a:75:6a:94:ac:ad:02:fd:22:75:cf:2a:d5:3a:
70:7c:0d:6b:79:73:a5:39:92:22:28:1a:7b:d7:69:
80:9c:fd:30:da:16:24:c3:df:88:44:a8:22:82:68:
ec:9b:76:66:e7:89:65:b4:14:a8:20:2a:93:29:56:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:90:0C:91:CB:68:B7:26:DD:5A:27:CC:5A:33:DF:FA:EA:76:FB:B7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qJAMkctotybdWifMWjPf-up2-7c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.88.0/21
Signature Algorithm: sha256WithRSAEncryption
40:89:e9:bc:74:35:fb:cf:0f:e8:96:20:26:a2:2c:90:e2:55:
a5:39:b8:26:dd:cd:d9:0b:f6:ee:28:22:74:30:b2:bf:0b:96:
f8:01:6f:3a:e0:8b:ef:57:b4:16:2a:d4:da:73:b9:47:75:83:
8f:ff:6e:df:7d:b9:83:db:1e:6a:74:9d:4f:10:17:b5:ab:8e:
b6:03:c3:3c:6f:38:4b:e5:17:f0:6a:8f:b6:0c:9d:c3:37:ff:
bf:41:ec:88:9a:e9:b4:bd:96:9d:17:61:4c:ef:67:f9:19:21:
0b:64:41:b1:97:9d:ed:cb:7f:d1:58:5c:e7:a3:0c:90:18:68:
58:8e:6e:9c:c7:a0:30:b8:0d:e1:21:f4:94:9a:2d:19:3c:62:
f4:ee:d6:77:11:34:c1:92:30:c9:67:cc:99:62:cf:90:9f:3c:
32:34:4a:7b:d2:3f:8f:3e:68:45:b8:66:dd:f8:35:08:cf:4a:
51:9a:76:3c:89:43:71:02:e3:d0:d3:6c:b6:ff:0f:e8:80:89:
0a:1b:9a:33:fa:e7:bf:29:5e:f0:be:e0:c3:19:5b:59:19:d5:
e4:f6:24:d0:16:2b:cd:a0:2c:cf:d9:eb:c0:4c:18:36:6f:c6:
48:30:f8:63:11:d7:22:f5:b8:75:b1:27:51:89:b1:54:eb:8d:
69:37:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:40 2025 by rpki-client