Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1sOAbuMgvWwKoSgFdQq0yWA_RI8.roa
File: 1sOAbuMgvWwKoSgFdQq0yWA_RI8.roa (raw, json)
Hash identifier: qHfTGverIcLZC3xVAnkZmqWqrmUXRHkdL7Au9X2RoC8=
Subject key identifier: D6:C3:80:6E:E3:20:BD:6C:0A:A1:28:05:75:0A:B4:C9:60:3F:44:8F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03D0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1sOAbuMgvWwKoSgFdQq0yWA_RI8.roa
Signing time: Tue 06 Jun 2023 16:03:03 +0000
ROA not before: Tue 06 Jun 2023 16:03:03 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.88.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:03:03 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D6C3806EE320BD6C0AA12805750AB4C9603F448F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:2e:71:d1:06:0e:e6:e6:39:43:cf:6d:b6:
a0:1d:e9:e6:ae:a2:dc:41:da:e8:65:d0:d2:96:1c:
89:39:aa:fc:0c:d3:1a:be:bf:f4:ed:35:4b:3e:0d:
a9:6a:3c:a5:5e:be:2a:5f:af:f8:68:ff:72:9d:ec:
04:b0:79:0e:65:97:6c:e0:3e:e9:5e:db:ae:1a:cf:
95:35:97:89:e9:0b:ff:f2:26:f7:5e:be:67:26:d7:
4c:98:f8:fd:67:5c:97:80:e5:a4:fa:a4:19:be:24:
5e:60:23:61:40:e9:27:3f:72:5f:57:00:ba:be:9d:
30:b6:c0:07:95:7c:60:b9:49:bb:91:b2:85:ca:df:
d4:5c:08:8f:b3:9a:a1:4f:ed:91:17:59:a0:34:a1:
28:2a:1f:8e:f7:46:dd:2b:6c:be:ef:d3:ff:1b:0a:
69:b7:5b:82:7a:72:9b:86:c7:25:d1:d1:10:39:b6:
71:82:0d:54:0b:cc:1c:c4:1b:86:81:53:6a:af:93:
8e:7b:da:bc:d5:04:f6:67:b9:c3:7b:ef:59:8a:a7:
57:d4:e6:35:d1:6d:c4:ce:d3:5d:b5:ae:8d:fa:d3:
44:88:1f:c5:d8:f9:b6:5e:87:a5:15:2f:27:6f:0f:
b8:a8:3e:54:30:27:0d:3d:70:15:1f:6c:6b:06:c4:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:80:6E:E3:20:BD:6C:0A:A1:28:05:75:0A:B4:C9:60:3F:44:8F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1sOAbuMgvWwKoSgFdQq0yWA_RI8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.88.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:c0:52:8c:cf:d3:a4:65:f3:70:1e:c0:51:b5:94:1a:c2:c5:
c7:8a:9e:54:8f:dc:34:5f:ec:97:84:77:c1:f8:61:b5:68:4d:
f1:af:0c:25:ec:b3:43:a7:49:f4:dd:78:cd:97:3e:9c:4a:37:
69:91:22:a9:e0:98:4c:a8:2c:6c:83:83:c9:28:bf:e8:c8:6c:
3b:ca:b7:7c:bb:ea:93:cc:34:13:a2:ca:d9:fa:de:9a:bb:4e:
ab:f5:61:ca:f8:14:6f:14:d5:47:bb:fb:ff:0e:c5:79:81:52:
3d:f1:d5:86:76:02:84:0d:0c:ae:35:fe:82:50:e6:36:8a:ea:
bd:e8:5c:aa:48:f7:ba:e2:f4:af:dc:4b:8d:c7:69:80:e3:17:
3d:d3:42:3b:3b:ab:9a:62:ee:f3:0a:f6:2d:b1:75:e0:21:96:
e9:a5:c4:9a:8b:2a:de:08:15:f3:65:c2:02:c2:6f:54:c7:05:
f8:9f:20:be:55:3c:58:03:b1:c7:8b:88:02:ed:58:67:b7:a7:
5d:db:04:25:a7:c5:e2:00:6e:10:ba:74:bb:f3:a1:47:4e:12:
ad:d3:c3:99:45:40:63:62:e9:bd:11:4f:4a:8a:3b:41:49:0e:
67:a4:fb:32:0d:33:0e:83:23:9f:ca:63:d0:ba:e0:cc:98:1a:
29:fc:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org