Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYxYwijqlT_1-MR8OhvIbBzEcY.roa
File: xJYxYwijqlT_1-MR8OhvIbBzEcY.roa (raw, json)
Hash identifier: wMDLFamo+AJTgWo3Pub3voYs7NLocBge2VjZ/bIPLTM=
Subject key identifier: C4:96:31:63:08:A3:AA:54:FF:D7:E3:11:F0:E8:6F:21:B0:73:11:C6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0674
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYxYwijqlT_1-MR8OhvIbBzEcY.roa
Signing time: Tue 30 Apr 2024 01:37:57 +0000
ROA not before: Tue 30 Apr 2024 01:37:57 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:37:57 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C496316308A3AA54FFD7E311F0E86F21B07311C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:15:a7:11:5c:32:4e:42:bc:be:f1:22:03:
dd:92:97:f1:c3:9c:5a:d1:9e:ca:b3:eb:36:5c:ba:
c7:37:e8:c2:bd:9b:5c:80:e8:bd:93:2c:2e:d4:db:
78:fd:17:20:58:83:4a:f8:51:ba:cb:2f:bc:d9:1b:
00:0d:04:cc:d2:c1:86:bd:92:d3:99:a3:5b:b7:bd:
8f:cf:d9:74:29:54:d8:e8:ae:1c:c1:27:ac:74:99:
c9:83:c5:95:59:07:5a:53:76:d7:30:28:7f:29:af:
05:76:8c:f0:59:d3:2b:5b:31:ce:ed:e1:d9:ec:7a:
0a:b0:9d:d5:71:ab:23:f0:6c:39:7f:c9:14:64:b5:
63:b7:9e:62:6f:1b:83:e7:e6:81:44:88:66:b4:f0:
78:a2:67:4e:c5:fd:1c:24:80:18:06:7a:ac:ea:f6:
91:6f:02:db:48:83:2c:79:01:90:1f:d6:20:f1:b2:
ca:1c:4d:c3:ac:d7:3a:0c:18:e4:72:cf:64:a8:dc:
65:89:3a:2a:d3:cd:f2:7e:5f:97:ef:6e:14:50:50:
80:74:75:6a:73:4f:0d:f8:6a:c5:6c:39:21:de:94:
74:91:cc:df:6d:98:93:7b:b1:2d:cf:4c:e3:45:ff:
8f:ef:59:cf:e1:0f:93:1c:65:b8:8a:77:19:4f:e5:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:31:63:08:A3:AA:54:FF:D7:E3:11:F0:E8:6F:21:B0:73:11:C6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYxYwijqlT_1-MR8OhvIbBzEcY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:22:87:35:e5:f9:7d:7f:b5:4d:2f:50:b6:d0:e2:17:fe:a4:
1f:7f:9e:39:b6:d1:c6:58:29:f9:e4:5a:cf:56:6e:cb:75:e1:
41:73:3d:e4:27:10:dc:cd:bd:99:44:02:23:9b:b8:fc:58:82:
72:e6:a7:32:01:0d:e1:81:32:ce:32:cd:05:32:40:0d:14:b1:
99:80:9f:08:e1:ed:a9:4e:93:db:13:ee:58:e2:e9:29:9a:cf:
f4:62:90:e0:7f:c0:74:d8:4e:41:9f:ed:fd:a9:7d:fa:4c:21:
21:59:fa:fb:e1:35:98:69:2d:1b:87:e2:1c:f4:1a:7c:87:a9:
e0:3f:7d:4b:c4:37:3d:dc:98:d1:de:7f:67:db:49:9e:05:6a:
e6:f2:19:39:54:89:0a:39:3e:67:ca:98:c7:1d:a4:b4:bd:5b:
9c:66:8b:5a:48:4c:4c:5e:d7:46:28:9e:51:49:9e:a7:b6:68:
09:d8:41:c8:ed:18:1c:6a:df:96:0c:15:f5:0e:28:03:97:37:
3c:82:56:8a:24:8b:1e:6a:02:5c:52:6e:60:c2:9d:4f:38:06:
0a:ba:6b:34:ec:54:fe:03:fe:3b:9b:69:a1:38:3d:ac:57:75:
22:99:3b:55:c4:3f:0e:40:4f:66:86:63:f0:33:33:1b:fa:2c:
4a:3b:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:07 2025 by rpki-client