Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phwraGVrRC4Xo7ExSehKkBJ7bs.roa
File: 2phwraGVrRC4Xo7ExSehKkBJ7bs.roa (raw, json)
Hash identifier: TKs4/2HppwRIfhDqS7QcP2Svxg0n5eKUobY7+Fh5L8I=
Subject key identifier: DA:98:70:AD:A1:95:AD:10:B8:5E:8E:C4:C5:27:A1:2A:40:49:ED:BB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0374
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phwraGVrRC4Xo7ExSehKkBJ7bs.roa
Signing time: Thu 01 Jun 2023 17:57:31 +0000
ROA not before: Thu 01 Jun 2023 17:57:31 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:31 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=DA9870ADA195AD10B85E8EC4C527A12A4049EDBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:53:de:38:4f:af:36:bc:22:1c:9c:ad:d9:
c0:1e:65:0a:68:61:b2:5a:2a:a0:8b:ca:f2:ef:a5:
0c:b7:86:8c:2f:f0:b4:2f:f9:bf:d3:1e:bb:82:a7:
06:53:29:5f:c2:7a:3a:a4:cd:72:10:f0:5c:55:89:
e3:bc:c4:a7:76:6e:89:18:bc:c1:8b:1e:62:2e:bb:
68:a7:6a:f5:6b:b8:4c:22:d9:08:d4:6a:fb:07:13:
bb:7a:67:7f:90:00:47:dd:e5:4f:3f:2d:db:f9:5d:
32:1c:47:4d:71:00:36:92:ed:bd:49:3e:78:42:1c:
5f:e1:af:0b:1a:34:4f:46:2b:54:ba:f3:f9:2d:3d:
e0:b3:a4:e1:39:82:12:e0:6d:b0:3f:88:32:2e:c0:
a8:0a:22:8f:00:e8:e1:50:94:c1:62:fd:55:31:ab:
d5:21:75:e9:43:ea:ec:ad:f5:e8:d6:40:23:75:b6:
b1:6d:48:c9:71:24:20:ce:67:0a:be:e3:14:8e:5b:
64:39:3c:ea:45:6f:3d:5c:f9:c0:dd:24:cc:9f:55:
ef:f7:f3:70:38:84:38:3b:c3:22:28:73:1c:fe:20:
27:95:01:e0:15:f5:ef:8f:2a:7a:a4:b9:de:ba:e8:
2f:cf:cc:47:6f:8b:06:ac:7e:44:32:97:65:6d:ab:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:70:AD:A1:95:AD:10:B8:5E:8E:C4:C5:27:A1:2A:40:49:ED:BB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2phwraGVrRC4Xo7ExSehKkBJ7bs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.231.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b9:27:d2:54:db:35:a1:0c:9f:de:f0:09:3a:dc:4a:2c:b2:
02:6f:70:03:6c:d2:ad:e6:20:11:f2:ee:dc:39:49:eb:05:57:
0a:2f:31:69:33:a2:47:ee:ad:53:3b:b5:dc:26:79:a7:5b:c8:
d2:d8:93:72:df:89:c1:43:a8:6b:47:95:34:ee:70:46:8b:ae:
96:71:f9:fe:17:2a:1e:59:10:1c:d1:e4:9c:f2:99:89:7f:e0:
39:56:9c:96:dc:0a:32:f2:23:a0:b0:37:08:48:81:4f:8e:97:
d4:30:24:21:b9:f8:91:cc:29:de:25:b1:27:66:fd:63:f5:72:
99:11:5e:cf:f9:bc:e2:d0:80:25:21:f1:f2:0f:e0:56:c1:27:
b5:b6:87:68:7f:dc:07:f3:91:40:4d:46:cb:6b:7f:0c:08:4a:
b7:ff:8d:7e:8f:6c:c2:09:52:51:b3:9d:44:e4:a2:ab:28:64:
97:dd:bc:b4:a7:a7:e8:48:2d:b6:9c:93:69:84:29:2c:82:1f:
9c:2f:67:82:e3:49:71:92:3e:3a:7d:7b:92:f0:a6:6b:c4:f9:
8f:de:03:b7:4c:b7:8f:89:65:cf:6d:57:4e:bb:04:4b:14:9b:
ce:cc:e8:1b:bf:9d:35:4f:fa:3a:08:1e:ce:62:eb:7b:63:0b:
a0:d5:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org