Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa
File: 0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa (raw, json)
Hash identifier: ohwD+xSDPNrfntMzypWejo448KVue0qH1hBYzae9L0Q=
Subject key identifier: D2:6F:08:E8:25:54:E9:85:DC:7C:BF:56:15:B5:5B:06:93:24:D2:16
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05EE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa
Signing time: Thu 29 Feb 2024 01:35:39 +0000
ROA not before: Thu 29 Feb 2024 01:35:39 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1518 (0x5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:35:39 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=D26F08E82554E985DC7CBF5615B55B069324D216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:ae:b8:48:8d:c4:a1:7d:1c:81:4d:cc:a5:
18:f3:07:db:26:5a:26:76:68:7a:e9:e6:f5:ad:14:
0a:ff:98:62:c5:8d:a4:b0:79:c7:4d:55:8d:78:77:
3a:58:1d:ef:8c:2a:76:a5:68:1f:c5:90:36:15:ca:
70:31:f2:f4:af:0c:53:66:1a:b4:00:d3:0e:f9:34:
f6:db:e1:f6:cb:fb:33:97:fa:b2:dc:1a:25:22:45:
58:07:57:65:04:1a:41:60:ab:b3:9c:2a:e7:b8:b4:
d5:ab:2b:87:91:f6:72:06:a6:de:f8:5d:91:2f:34:
c1:e9:dc:27:12:19:95:c1:09:3f:f5:d3:1a:40:12:
ca:ee:19:bf:47:3b:b2:22:b8:bb:a8:9b:0f:9f:26:
71:d0:e1:4e:1c:a3:6d:96:c1:e7:83:aa:8e:ba:35:
17:20:6d:e7:76:fe:74:92:6e:9b:4e:aa:a7:6d:b4:
b9:5b:8c:2f:ee:4d:6a:4f:da:05:6a:49:78:41:e1:
90:0d:1c:5c:6b:54:db:ac:bb:2c:a1:c4:0d:13:97:
88:2f:b9:c7:3a:d9:34:c5:41:4e:e3:1e:8e:53:88:
bb:60:5b:59:33:47:4d:f3:e7:ee:86:8f:36:4f:49:
a2:96:fb:3a:fd:85:32:62:47:5e:f6:d9:cf:0e:3f:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:08:E8:25:54:E9:85:DC:7C:BF:56:15:B5:5B:06:93:24:D2:16
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/0m8I6CVU6YXcfL9WFbVbBpMk0hY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:17:81:61:a2:de:fd:ff:8e:80:f5:90:cd:ea:5d:77:13:61:
2c:d4:be:a5:fb:6d:4f:8d:56:d8:e9:4b:e1:29:49:97:9d:5e:
1b:81:24:c0:f6:8c:0e:7a:1f:d1:d4:a4:b6:d1:21:7d:3f:d5:
cd:74:c3:70:46:f8:c3:4f:07:0f:fa:12:a1:ac:55:75:4c:95:
85:85:f2:81:42:90:b0:f8:a8:45:67:8e:34:04:c7:a2:3f:b6:
c3:f0:0a:59:53:15:02:25:67:07:a4:76:2f:86:8f:3a:63:c3:
2f:60:6b:3c:d1:94:09:23:0b:12:bf:92:99:38:af:7d:7d:9d:
f0:8e:55:f9:b1:79:f9:1a:89:0a:98:03:2e:28:89:f2:31:be:
e2:8f:7d:92:d1:d4:14:24:3f:03:ae:77:d0:76:d5:b3:77:a8:
d6:84:a0:5c:b4:05:79:4b:8a:27:57:06:e5:a6:03:45:58:a5:
89:43:d8:8e:f4:6b:13:d3:b4:08:32:bf:3a:b1:56:dc:d1:32:
6b:22:a1:4c:3c:5b:47:c9:b5:41:26:ef:68:48:70:9e:6f:62:
92:bc:4e:5f:93:d7:82:20:ab:34:e2:d3:e7:6a:71:db:8c:ae:
99:60:e1:82:48:18:24:80:6e:d5:44:8a:32:54:ff:69:92:44:
b7:55:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:16 2025 by rpki-client