Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3QL-M8qyDN1ssOVOo9vmZ8zfdMQ.roa
File: 3QL-M8qyDN1ssOVOo9vmZ8zfdMQ.roa (raw, json)
Hash identifier: H/3J+7Y+mZW76oeui5dSd1est36MKehfG8cK3USkY3E=
Subject key identifier: DD:02:FE:33:CA:B2:0C:DD:6C:B0:E5:4E:A3:DB:E6:67:CC:DF:74:C4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02DA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3QL-M8qyDN1ssOVOo9vmZ8zfdMQ.roa
Signing time: Tue 30 May 2023 17:18:26 +0000
ROA not before: Tue 30 May 2023 17:18:26 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:18:26 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=DD02FE33CAB20CDD6CB0E54EA3DBE667CCDF74C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:a8:99:2b:8f:d8:66:08:77:db:68:2d:88:
54:ca:10:a4:58:9e:bd:82:34:d9:c4:f3:4c:63:67:
66:ed:dd:40:44:76:f5:34:4c:4a:23:a8:a9:bd:66:
de:ee:43:4e:9f:8a:74:d5:b5:9e:87:ea:d6:46:ae:
38:4e:1a:6c:15:73:e4:df:49:1d:f2:80:36:8c:98:
1d:9f:ac:52:82:ab:69:31:30:3f:8b:56:fd:e3:64:
7c:2f:65:bd:f5:ce:d4:07:7c:c0:ad:ae:85:a6:10:
ae:a5:b4:34:b5:e6:d2:82:11:7d:c6:42:2a:fc:d6:
b4:b6:84:c0:14:77:36:f9:67:73:50:9c:74:93:0e:
00:1d:c9:f8:98:0d:5b:31:d3:e7:e4:51:1c:fd:32:
34:c9:ab:d1:01:06:a2:7f:18:f5:fb:d8:eb:f3:b4:
7d:54:94:51:81:7d:da:e3:31:ae:3c:d4:59:33:d5:
40:ef:fe:bb:fe:1d:83:0f:e4:ec:7e:b5:6b:e8:ac:
7d:fd:5b:08:9f:e0:40:c4:1f:ae:54:70:56:bd:59:
fe:11:c0:7e:6e:7b:69:98:16:1b:c1:e1:b3:51:a9:
8f:5f:16:1a:47:2c:99:1a:35:67:f8:4d:bc:8e:42:
a8:17:ec:04:72:c3:99:ce:04:ea:63:5e:e6:2e:0c:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:02:FE:33:CA:B2:0C:DD:6C:B0:E5:4E:A3:DB:E6:67:CC:DF:74:C4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3QL-M8qyDN1ssOVOo9vmZ8zfdMQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.128.0/18
Signature Algorithm: sha256WithRSAEncryption
cf:ed:3e:91:a8:0c:34:b7:4d:21:a4:bc:48:00:92:68:2d:b7:
a2:3a:44:b2:3e:ef:ca:f2:28:f7:43:ff:48:c3:2b:fc:cd:35:
90:98:dc:c2:5b:ee:f2:20:f4:21:05:5a:a6:00:ed:8c:4e:ac:
7a:e5:a5:7f:18:46:3a:a7:2f:43:5f:14:d5:21:d3:ed:3d:c1:
c0:d6:77:25:b9:f0:6e:f7:9b:b1:09:df:81:8d:7a:5f:f6:34:
25:0a:d2:ed:1d:00:0e:2e:51:93:77:7b:85:c0:e1:18:d1:f0:
57:3f:31:09:e2:7c:d0:0f:5f:dc:5d:d8:dd:bb:d8:b4:02:e8:
18:2d:5f:2c:77:2c:6c:ec:e9:41:7e:92:71:d9:97:67:07:f6:
dd:78:ca:26:6b:16:7f:e7:49:c9:2d:11:b5:19:24:99:f6:c0:
f7:2f:c1:4a:c4:9c:72:2b:06:28:1a:33:a9:e1:27:98:5e:66:
91:a9:f4:f3:cf:61:78:01:99:01:77:87:59:82:69:d2:24:7c:
68:8b:4a:b7:85:af:7b:7f:a5:c0:c1:3e:00:94:6f:3b:92:1d:
ea:ab:67:e6:a0:29:e2:70:8c:46:52:e2:86:33:4b:70:53:42:
60:28:d6:26:56:86:a8:ef:5f:1e:3d:b6:09:21:e9:6b:5b:b9:
05:7a:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org