Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CcuGU3LIexVyjJ-TUcUnl8S1BiA.roa
File: CcuGU3LIexVyjJ-TUcUnl8S1BiA.roa (raw, json)
Hash identifier: MpgEY2yv3J5Zw+OuT44ytNpW35OaSX7JSTwLrdFU52M=
Subject key identifier: 09:CB:86:53:72:C8:7B:15:72:8C:9F:93:51:C5:27:97:C4:B5:06:20
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0385
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CcuGU3LIexVyjJ-TUcUnl8S1BiA.roa
Signing time: Thu 01 Jun 2023 17:57:37 +0000
ROA not before: Thu 01 Jun 2023 17:57:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901 (0x385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:57:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=09CB865372C87B15728C9F9351C52797C4B50620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:a5:5e:1f:98:ad:64:fa:1d:27:d7:c6:7d:
a9:3a:6a:5e:32:27:2b:16:de:66:bb:7b:c2:93:7d:
9a:9e:3c:64:cf:1e:ec:71:08:9f:53:5d:81:9c:4c:
d2:76:3d:22:e9:cc:4f:fb:87:4c:7d:6c:24:23:c4:
d7:4a:f5:24:52:6e:f6:51:a9:45:57:7a:10:30:b5:
e1:5c:6e:88:90:f3:f9:38:81:f9:d1:22:84:69:f4:
d0:a1:76:67:13:00:d7:7d:cd:fb:82:46:24:8d:9a:
1f:94:c0:17:c7:80:b2:a2:fd:f6:e2:d2:f7:99:ce:
18:b5:c3:d0:30:26:89:ad:90:c6:23:61:0f:df:84:
c7:c5:59:f1:6c:61:f0:9f:a9:fd:db:dc:05:86:05:
c0:56:a0:9c:d6:b9:89:e3:a7:01:ae:57:70:3c:18:
a6:6d:c5:af:ab:e7:55:86:99:f2:fc:44:58:62:11:
22:05:33:ef:30:ad:2c:32:24:e1:ae:43:c6:d3:08:
8f:96:af:e6:ec:16:87:7a:7e:ba:ea:1e:c5:c0:eb:
3d:c5:a8:0e:8d:b4:d6:6d:e8:ec:88:76:07:e0:ab:
a5:48:5e:5f:d3:3a:0f:56:30:fc:7c:66:10:b9:cc:
ad:3a:f4:80:14:a7:5a:a0:5d:db:a6:1c:db:82:80:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:86:53:72:C8:7B:15:72:8C:9F:93:51:C5:27:97:C4:B5:06:20
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CcuGU3LIexVyjJ-TUcUnl8S1BiA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.32.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b4:57:99:10:0f:be:09:d3:89:63:f8:5c:14:b8:5c:aa:52:
58:28:94:be:3b:a0:d9:5e:55:9f:de:68:d1:5d:7f:44:12:6b:
1e:5e:58:9e:0e:88:72:6f:0a:cb:21:dc:c3:9a:b0:a3:0f:12:
20:6e:47:ac:1e:31:6a:3c:3c:f1:21:f0:4f:d5:41:7c:5b:35:
a6:44:50:3a:b3:f7:eb:22:ff:ae:c5:56:db:c7:46:04:6d:a0:
3d:ed:67:85:43:c1:2e:ba:54:3e:0f:4b:70:e5:f9:45:0f:88:
cb:ac:31:44:a9:72:06:91:e1:bc:c6:b3:15:56:96:52:87:39:
33:52:bf:75:09:13:b7:e2:e3:d4:6c:3e:5b:1d:6e:7d:26:7f:
97:37:fe:88:47:55:18:94:c2:b9:a6:3c:d0:ff:ed:f8:8a:6b:
36:7f:dc:e6:bd:f2:c2:81:ce:0b:61:2a:47:14:e8:20:a1:fa:
3c:1f:6a:c0:2a:b9:3f:db:2a:fd:ea:04:a2:7d:9f:3e:30:b9:
36:84:a6:e3:4a:2f:9e:d8:f5:23:fc:b8:16:fc:d9:1f:54:01:
2d:1f:e4:84:b9:31:ee:05:2b:f3:b0:33:76:2c:87:e8:37:11:
c8:be:83:09:fb:34:ea:7c:de:08:02:54:0a:89:2a:f6:a1:2f:
c1:e2:99:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org