Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2UV2AmUEcdCvcEAE5tuRqell5Dk.roa
File: 2UV2AmUEcdCvcEAE5tuRqell5Dk.roa (raw, json)
Hash identifier: Bp8WOlIH7zB2yKVxetzQjzdl5LdU46VbC+Z6DbmVFLA=
Subject key identifier: D9:45:76:02:65:04:71:D0:AF:70:40:04:E6:DB:91:A9:E9:65:E4:39
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0342
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2UV2AmUEcdCvcEAE5tuRqell5Dk.roa
Signing time: Thu 01 Jun 2023 16:10:45 +0000
ROA not before: Thu 01 Jun 2023 16:10:45 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:10:45 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D9457602650471D0AF704004E6DB91A9E965E439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:44:11:34:3e:24:90:f1:df:91:6c:1e:cc:
7e:c9:2c:f9:97:79:72:21:e8:4b:6e:21:03:11:43:
ba:46:3b:46:cc:c6:1c:43:20:aa:30:3e:bc:3c:70:
91:6a:a8:6b:26:33:f6:ed:4c:57:5b:05:ab:50:ec:
75:97:f9:79:aa:4e:a6:a5:0e:4b:85:97:4b:e6:93:
36:a1:bf:3e:48:15:6a:0e:42:bf:b8:00:54:4b:77:
0e:4e:3e:b7:db:0d:e5:fa:8a:e0:19:fe:70:20:50:
f4:ca:b9:d6:51:fa:61:a3:05:dc:cb:ca:96:9e:cd:
5c:4f:93:95:1d:0b:c0:a6:59:09:f6:14:73:ac:e3:
be:49:b5:6c:90:30:de:c3:cb:e0:9e:f2:0b:a4:f2:
53:00:78:15:8a:03:9a:d0:32:9c:22:64:64:40:77:
8a:50:7d:2a:ee:b9:2a:01:d9:39:a6:91:d4:f1:a4:
58:4a:0e:22:bd:1e:4d:26:51:19:f4:7e:a7:e7:66:
4a:02:6b:5f:e7:b0:42:ed:fe:78:c6:91:91:1b:9c:
45:af:d6:83:7f:32:06:9f:51:1e:bd:cf:92:76:fe:
55:d8:b5:31:7e:53:21:e0:67:91:dd:6e:cc:42:61:
0c:9a:d8:4c:74:fb:94:77:da:f0:28:26:82:6d:60:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:76:02:65:04:71:D0:AF:70:40:04:E6:DB:91:A9:E9:65:E4:39
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2UV2AmUEcdCvcEAE5tuRqell5Dk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:56:35:51:5b:15:dc:33:87:d2:1b:e5:02:d7:bb:29:73:cf:
18:02:eb:57:b6:13:5c:b5:3d:94:39:a1:82:20:68:eb:9a:fd:
ef:69:9d:14:d4:7c:16:d5:18:b2:c0:4a:16:f8:8e:3a:4e:1a:
c0:15:27:be:28:ae:1d:ee:60:c4:b3:0b:ac:bc:ac:99:18:b2:
8c:95:a8:cb:20:5f:6b:35:9a:8c:b9:5b:1a:ab:d2:13:f7:82:
48:eb:70:38:2a:0c:bf:7a:0b:29:d2:5b:84:e2:ab:4b:50:94:
66:0f:ff:72:b3:84:f7:1e:66:28:f6:75:5a:f8:52:4f:d4:a5:
4d:9e:9d:79:da:1a:96:be:03:b1:8a:30:6f:b8:1c:31:4f:b4:
14:85:5d:2d:87:09:6e:92:56:4c:a9:22:7c:f9:f0:5d:79:fa:
5e:4d:85:1c:d6:3e:27:ad:42:c7:71:e8:ad:0e:78:34:5f:a0:
ef:45:b0:8b:4b:aa:b8:69:61:6d:36:1d:ca:32:d5:fb:69:32:
22:79:68:25:62:f8:8d:df:aa:e1:2a:09:02:4d:90:94:a0:1d:
92:1e:42:61:f9:a7:74:39:de:c5:b3:a1:e3:a3:cb:af:93:c8:
5b:be:e7:8c:f1:38:08:b5:dc:22:4c:47:5e:15:5f:0d:86:f4:
1d:5d:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org