Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AZzmWuqqIM8TMjizvyitn8m648g.roa
File: AZzmWuqqIM8TMjizvyitn8m648g.roa (raw, json)
Hash identifier: NY7JvVZJqQgzaSF9q1AlUV7godMDXZ6bnnPUL0XYnvg=
Subject key identifier: 01:9C:E6:5A:EA:AA:20:CF:13:32:38:B3:BF:28:AD:9F:C9:BA:E3:C8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 41
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AZzmWuqqIM8TMjizvyitn8m648g.roa
Signing time: Mon 27 Mar 2023 16:02:10 +0000
ROA not before: Mon 27 Mar 2023 16:02:10 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:10 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=019CE65AEAAA20CF133238B3BF28AD9FC9BAE3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:bf:90:4c:16:12:3e:f9:c1:cc:80:c5:75:
7d:f2:86:f0:9d:3a:dc:b4:1c:e0:09:5a:ee:bd:79:
28:f4:26:16:15:e7:85:45:be:7a:de:53:8e:14:25:
1e:44:64:6b:b6:a9:5c:8b:23:06:a3:fb:b7:94:e7:
7e:14:2c:96:7d:13:4f:2a:97:2a:b0:a4:19:fe:44:
b6:79:57:c8:8b:07:71:25:ed:c3:23:ec:54:77:99:
a7:c6:bd:f9:90:61:e7:c0:80:9c:ec:0e:83:2f:00:
0a:b3:14:01:75:90:34:52:45:54:74:fb:91:24:45:
1e:72:b1:7f:3a:c3:3b:73:84:3b:19:fe:14:79:0f:
4d:a3:6c:69:b4:00:2b:48:2f:04:91:dc:bf:a9:4b:
a2:8c:3d:45:f3:2e:c7:95:4e:13:a9:6b:89:4c:0c:
0f:76:16:af:a9:79:bc:43:aa:dd:27:91:a6:71:fd:
f3:7c:40:08:5d:c6:16:fa:49:e2:97:f6:07:12:f7:
7a:dc:bb:62:e6:12:1b:88:11:4b:5f:70:b6:59:e8:
3f:41:a0:e8:1e:d2:a4:6b:2f:40:2c:f2:3e:43:93:
b5:6d:cc:a9:5f:b4:ab:2c:92:b9:fc:2d:2e:21:ba:
03:f7:dc:ab:1e:22:1f:e4:2d:0a:f4:93:2a:eb:55:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9C:E6:5A:EA:AA:20:CF:13:32:38:B3:BF:28:AD:9F:C9:BA:E3:C8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AZzmWuqqIM8TMjizvyitn8m648g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f7:00:55:7e:69:5a:ed:40:78:ac:fe:d5:0d:15:20:8e:29:
f5:53:16:04:7d:ab:76:86:eb:3e:0d:0c:e0:f3:6b:ab:58:6a:
fb:95:be:40:a7:69:9a:ae:40:ed:e8:40:24:33:8b:a2:a5:69:
62:a4:7e:2e:16:57:f8:62:3b:07:b3:89:6f:ae:8d:ac:ca:23:
af:a8:c3:9b:5c:a8:bf:5d:78:71:ca:a9:e2:0b:03:cf:11:45:
95:03:e0:5d:45:75:0c:a9:25:f9:9d:30:2d:6e:61:86:cf:6d:
0c:72:5a:f5:02:62:ad:b7:5d:a0:07:1e:32:58:6c:cf:09:cf:
e0:7a:6b:8f:66:f8:63:f2:5f:7b:17:fa:09:24:ce:b4:af:eb:
51:77:9a:f1:d1:4d:6d:76:4a:4f:ce:8c:07:0e:c9:ac:4f:49:
49:30:0e:ac:eb:1e:2b:7e:ee:27:5d:e9:d8:53:94:c5:6a:1b:
c2:c4:b0:4f:49:3c:42:5d:06:79:89:94:01:c6:b4:ea:36:56:
0f:e6:09:2a:9a:25:9e:05:e1:e5:3d:52:27:61:8a:a7:6f:7a:
83:03:9b:af:15:4e:0c:07:61:e6:e0:32:cb:54:76:f0:e7:4c:
7b:71:0c:df:10:e5:23:e9:c2:6b:16:66:c8:be:7b:b0:7e:9d:
a2:bc:57:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org