Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa
File: xzqEehc0fBzFACKriJUrRuEdrZ0.roa (raw, json)
Hash identifier: EbYrMlPovwHK9OXVpjw0uM9/3gZF2dfb6055KQbhwEI=
Subject key identifier: C7:3A:84:7A:17:34:7C:1C:C5:00:22:AB:88:95:2B:46:E1:1D:AD:9D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 07C3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa
Signing time: Tue 30 Apr 2024 02:08:46 +0000
ROA not before: Tue 30 Apr 2024 02:08:46 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:08:46 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C73A847A17347C1CC50022AB88952B46E11DAD9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:45:a9:a8:c3:f1:07:26:d0:ed:98:05:d4:
ab:5d:46:ec:94:81:e0:84:c6:d8:c3:82:90:9e:48:
70:af:82:0f:ee:6d:e2:58:77:21:f2:ae:46:51:bf:
34:a7:bd:4c:55:81:26:01:88:fd:52:55:a2:88:50:
7a:94:96:bf:31:73:91:7a:44:62:59:e1:da:09:99:
aa:90:a7:ea:2f:38:1d:d0:d8:7a:30:6d:29:4c:3c:
99:b1:68:4f:28:f3:21:ff:8a:e9:42:85:a1:ae:4c:
54:80:b5:c4:25:d8:9c:8b:e1:32:44:28:c6:05:c2:
7e:f1:bc:33:80:ee:3b:32:45:67:e5:5e:30:64:5b:
58:e3:d9:a4:b1:ef:55:08:81:29:88:bb:7b:62:55:
a0:6a:e5:9e:9d:16:66:fe:98:56:65:e6:a6:ee:dc:
54:e1:3d:e0:76:8d:86:8a:56:3a:c2:27:3f:9f:c7:
57:9b:22:99:31:68:0e:8d:20:bb:21:2e:d6:db:93:
6b:2b:4d:56:f7:d3:dc:ef:dc:0d:55:34:b0:c3:14:
76:6b:73:67:d1:32:fc:f0:2a:ac:e5:9d:e5:45:91:
04:6d:9c:1e:52:f7:d6:68:da:00:a0:ed:cc:db:0c:
ff:0e:95:64:79:95:2e:7a:03:29:7e:84:e1:89:ed:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:84:7A:17:34:7C:1C:C5:00:22:AB:88:95:2B:46:E1:1D:AD:9D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xzqEehc0fBzFACKriJUrRuEdrZ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:7b:4a:7c:df:80:1c:ae:00:08:93:ee:98:bf:94:7b:49:7f:
70:d5:00:ae:a2:58:2d:12:eb:c2:f2:a5:95:d9:4a:dc:3b:9e:
e5:0d:f6:e3:ca:0a:85:ee:16:e9:22:29:10:9e:ec:03:f5:81:
e8:dd:89:8f:be:cd:7e:3d:52:b8:80:1a:95:43:ca:81:59:4c:
b6:ac:3f:19:42:78:5a:dd:57:1e:74:d7:31:82:37:66:6e:12:
51:97:9d:ff:24:19:0d:ca:fa:1a:c4:36:52:9f:8b:4f:d4:b0:
45:d4:39:ee:fa:17:07:e6:02:56:cd:45:e3:cc:a1:ff:89:54:
45:e1:cb:b6:d9:e0:c9:66:9c:f7:d3:19:db:3f:85:dd:2f:b4:
c8:e6:41:d6:a6:e7:78:62:b7:f6:b1:cd:f0:ff:12:a6:49:30:
46:84:a5:06:8b:73:a5:d9:89:a4:00:c5:65:ad:64:30:8c:28:
bd:a4:3c:3e:77:23:c3:74:c8:e0:37:3b:c7:85:07:b1:ea:7b:
73:7a:fd:dd:9a:d5:67:68:83:94:11:56:44:6f:6b:ea:c5:32:
27:ef:0a:c5:3f:ac:20:0c:bc:dc:69:a2:56:03:38:38:11:b5:
2d:7d:83:ac:6b:3f:60:b2:4f:1f:dd:cc:2c:de:83:59:52:f9:
90:e3:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:04 2025 by rpki-client