Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/637TrGSnOQqD16tmzjrxpAuh3_o.roa
File: 637TrGSnOQqD16tmzjrxpAuh3_o.roa (raw, json)
Hash identifier: lhf/bKeo3k7Hxcy8fZkT98tbY7Gdm0ge3w+UWndRMF0=
Subject key identifier: EB:7E:D3:AC:64:A7:39:0A:83:D7:AB:66:CE:3A:F1:A4:0B:A1:DF:FA
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/637TrGSnOQqD16tmzjrxpAuh3_o.roa
Signing time: Thu 01 Jun 2023 16:05:22 +0000
ROA not before: Thu 01 Jun 2023 16:05:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:05:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=EB7ED3AC64A7390A83D7AB66CE3AF1A40BA1DFFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:46:2d:68:f2:51:65:8c:f7:1b:e6:d9:d9:
f6:d3:21:b7:2c:ec:fd:68:6c:59:c0:14:39:1f:55:
3b:cb:12:8e:fc:a3:55:48:b9:e7:af:41:1a:f6:0e:
e3:f8:81:68:06:5c:66:6e:b1:79:18:34:7e:8a:b5:
cb:15:d2:f1:35:6c:32:c6:ce:68:5e:e8:f4:58:68:
e2:73:cc:34:e5:2a:84:a5:8e:28:43:05:b4:f1:6f:
6e:f9:39:77:e9:77:6e:67:f2:15:b4:16:ab:f1:94:
58:37:0b:0b:6c:ea:0b:51:f7:de:bd:eb:7b:cf:62:
4a:db:9a:a1:5f:9b:99:da:ea:73:2b:0e:37:25:47:
9d:71:aa:82:f3:2c:a9:e1:52:cc:35:1f:e5:82:6a:
12:83:9e:3e:92:bb:fb:7d:80:c9:27:41:d3:2b:4b:
00:ad:74:a4:98:a9:4b:8c:3c:31:27:92:fb:92:d9:
6e:3e:a8:45:12:6b:35:55:79:98:d3:0b:0e:be:b5:
c5:f2:8c:dc:ab:a4:52:a5:01:6d:ba:12:83:f3:97:
5e:63:54:82:55:05:85:a6:67:05:5a:cf:9e:8f:bb:
a3:fd:e8:79:8d:12:c9:e3:af:28:7f:ac:68:a1:3b:
88:90:0b:15:de:e6:11:31:b6:16:08:ba:8d:08:ec:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:D3:AC:64:A7:39:0A:83:D7:AB:66:CE:3A:F1:A4:0B:A1:DF:FA
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/637TrGSnOQqD16tmzjrxpAuh3_o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.96.0/22
Signature Algorithm: sha256WithRSAEncryption
89:8a:38:46:94:a5:22:66:72:b1:8a:8e:f5:b7:86:bc:90:20:
de:1f:55:48:84:38:cc:62:b1:94:66:80:56:90:f9:66:d6:c4:
91:7b:7e:64:46:e7:72:2c:89:8b:b9:62:d5:cb:b2:f6:30:ac:
5b:3c:5c:ef:6f:dc:83:8c:20:22:ac:e5:20:b2:56:58:5f:a7:
0d:7f:be:b4:e7:aa:2f:7c:3b:ab:6d:a2:ea:d5:31:e9:20:24:
9a:db:b8:df:27:47:3f:88:b9:81:5c:9e:b2:58:33:83:f0:4d:
ad:f8:c3:88:fa:74:d0:81:3f:0c:66:cd:4d:56:7d:ae:f3:30:
06:56:cb:eb:b0:9e:e0:77:f9:1c:2f:19:93:f1:b1:0d:06:8f:
41:ae:62:65:96:90:73:f5:0b:5f:7f:e9:d3:f1:4a:3f:37:08:
fa:8e:8d:42:11:e7:83:ea:8e:1e:8e:20:c9:ba:f5:65:fb:f6:
5c:6c:a9:e1:b0:e1:dd:60:52:c8:e6:dc:c0:f3:6f:b6:28:e4:
c0:94:26:ef:67:73:3d:9c:74:b3:d2:59:fa:73:1e:93:28:d9:
4b:c1:29:ca:c6:35:21:1c:42:c3:ac:6c:9a:78:d0:96:2f:5c:
1a:3d:d1:20:a3:7c:e1:e9:c9:1f:16:7b:04:e0:0a:15:25:e1:
86:b7:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:31 2024 by rpki-client on console-fra.rpki-client.org