Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1jGh4blw1gDLwTcNXQ9fbZ4BBYw.roa
File: 1jGh4blw1gDLwTcNXQ9fbZ4BBYw.roa (raw, json)
Hash identifier: BYrNWck2Q8KG+5QGgr70Sd+ptuFRmA4x1YYodKwqEA8=
Subject key identifier: D6:31:A1:E1:B9:70:D6:00:CB:C1:37:0D:5D:0F:5F:6D:9E:01:05:8C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0186
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1jGh4blw1gDLwTcNXQ9fbZ4BBYw.roa
Signing time: Wed 24 May 2023 16:33:26 +0000
ROA not before: Wed 24 May 2023 16:33:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D631A1E1B970D600CBC1370D5D0F5F6D9E01058C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:41:aa:d3:e6:f0:e6:e3:ed:fe:25:f4:23:
1b:98:d7:8e:e9:d0:19:c5:b9:07:ae:af:dd:67:64:
36:91:b7:1d:a6:3e:d9:00:93:25:31:a3:8f:32:6b:
05:9b:3c:ba:52:9e:fb:05:34:e7:f4:34:f6:0a:fd:
e5:ea:41:3b:3f:2d:8a:32:79:b5:3d:c9:e3:22:31:
7d:45:46:40:de:70:a3:8a:ef:6f:49:a8:4a:ea:1a:
79:a4:36:06:9e:6a:ed:79:f4:b4:f2:55:8a:10:8e:
cb:f8:0d:97:75:d4:5b:9b:79:f6:92:e4:f7:51:e3:
2d:46:10:6a:25:0e:fa:35:23:38:be:d6:74:e6:12:
3f:e6:f9:5c:2b:d5:3b:48:99:3f:19:cc:c6:18:6e:
40:7b:c4:a1:34:6f:e5:9e:85:21:78:b2:32:19:66:
a4:c2:15:21:94:33:a0:72:0c:66:0b:01:e6:24:72:
b5:e8:a9:ea:44:f3:a1:3a:92:8b:62:43:ae:9f:2e:
ab:c2:5d:ef:7a:43:5c:fd:d6:ce:c5:34:63:c7:d6:
74:7a:a0:ca:11:6f:6a:a8:dd:94:6e:9f:da:c0:58:
a2:3c:c6:9c:ec:4d:96:d0:34:58:87:8b:7f:12:fb:
e4:07:65:ea:0a:6f:97:62:d2:5f:36:34:b8:d1:4b:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:A1:E1:B9:70:D6:00:CB:C1:37:0D:5D:0F:5F:6D:9E:01:05:8C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1jGh4blw1gDLwTcNXQ9fbZ4BBYw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.88.0/23
Signature Algorithm: sha256WithRSAEncryption
74:18:33:0d:b5:18:97:cb:e2:1d:2b:63:1e:11:15:6c:36:5d:
b6:75:a0:0c:55:88:fc:da:90:3a:98:5b:04:e4:c7:d8:b7:3c:
af:e0:b5:e7:13:e1:7c:9f:f6:fa:71:9a:94:0e:d1:23:ed:54:
e8:ba:f5:4a:f2:8a:36:72:e8:49:02:fe:98:1f:8c:1f:a7:18:
5c:72:d3:1c:bf:aa:d5:c9:63:e1:06:78:07:27:95:b9:68:c2:
d0:7a:7a:67:3c:26:42:76:dc:30:c1:7c:b0:29:57:9b:b4:97:
e9:d7:c6:56:89:f0:36:14:68:59:78:92:b6:10:3b:c3:51:a7:
45:fd:45:fb:08:b9:db:e7:43:8e:ab:87:c6:6a:7b:6d:f6:27:
9a:0c:1b:17:10:dc:c1:e4:a0:a8:1e:ef:a5:40:47:3e:ef:f8:
99:7c:28:e2:ca:3f:0c:22:a1:d2:51:3c:65:e6:9d:f9:ad:af:
82:91:26:42:db:a3:5b:ef:0f:2c:05:73:0e:3e:0e:e3:eb:f0:
2a:d6:1a:58:16:d1:c8:21:c5:d2:6e:99:01:b2:44:0b:db:1d:
94:d6:65:e3:7f:fc:40:e0:ee:c0:f5:8c:46:83:fd:8d:e9:83:
98:6c:ab:22:1b:30:da:6c:ce:a2:86:03:67:07:aa:44:60:23:
de:41:88:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org