Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FgCJZXWeH_RgS2_9RUFoVgazkb0.roa
File: FgCJZXWeH_RgS2_9RUFoVgazkb0.roa (raw, json)
Hash identifier: efJj0fJ7KmTxx1Q/qzSl0uphoE+O79qNEFfWnms8kWg=
Subject key identifier: 16:00:89:65:75:9E:1F:F4:60:4B:6F:FD:45:41:68:56:06:B3:91:BD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0100
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FgCJZXWeH_RgS2_9RUFoVgazkb0.roa
Signing time: Wed 24 May 2023 16:03:17 +0000
ROA not before: Wed 24 May 2023 16:03:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=16008965759E1FF4604B6FFD4541685606B391BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:c8:77:a9:bb:2f:4d:c6:0f:2d:32:72:cd:
54:ab:c8:b6:94:5a:dd:f2:60:8f:78:0f:6f:07:5b:
80:ed:33:a1:7e:4a:aa:f9:ab:a0:aa:3f:59:f3:6e:
77:b5:62:1d:ba:93:22:6c:ef:af:70:99:bb:45:c6:
46:06:16:42:fc:db:24:77:2b:73:b4:6f:c7:41:9a:
81:88:46:b3:06:5e:e4:e7:a0:5b:c3:0d:bf:ca:70:
12:b0:24:38:d0:a8:e5:cd:35:00:f4:ce:b7:cb:d2:
72:32:97:7b:30:9c:56:c8:c7:40:41:56:9b:0b:c2:
0c:d6:32:67:01:1a:f9:67:69:09:75:c8:c1:d3:ec:
15:0c:60:bf:fe:04:7a:9a:e2:5d:05:01:d4:b5:c7:
a5:39:72:88:44:98:6c:10:9f:a6:06:aa:e1:98:63:
f0:cc:a6:f4:51:9f:27:a6:58:bf:4f:af:da:4c:e4:
31:44:e3:ae:84:6a:56:6e:c7:54:cc:20:85:35:de:
26:ec:6e:13:1a:d2:c7:50:05:79:47:c4:96:d8:50:
77:99:0c:d9:03:03:91:6a:b8:0c:a5:6b:f5:1a:67:
d2:bb:dd:c3:28:39:5d:a8:e5:03:cc:72:f2:83:15:
08:43:d3:50:37:81:d4:05:ac:b7:ef:44:7d:a4:91:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:89:65:75:9E:1F:F4:60:4B:6F:FD:45:41:68:56:06:B3:91:BD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FgCJZXWeH_RgS2_9RUFoVgazkb0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.196.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:dd:20:95:4e:d2:1f:eb:0d:05:66:6e:87:52:26:26:bb:b0:
ee:5a:93:63:4a:a4:28:24:8e:56:4f:6c:74:7c:9b:56:84:b9:
e1:9f:c5:a3:fc:d2:fd:3f:12:52:56:31:34:94:9a:70:b9:97:
d5:20:0b:c9:7b:f0:9c:44:11:93:c0:6a:fb:6f:79:3f:d1:91:
bf:e7:50:e1:81:e6:0e:88:6f:d2:0c:c8:27:34:f0:e3:87:15:
91:32:5e:7e:a6:ad:4d:3b:5b:07:d6:64:44:6f:79:bd:c5:8e:
a4:b0:2d:81:e4:9b:75:6c:fa:c9:7a:69:2f:10:28:85:e0:36:
af:6e:72:01:ae:a3:f0:21:40:65:a0:6c:e0:47:4c:32:b7:2e:
38:16:81:c1:ab:23:aa:30:48:c7:53:5c:bc:0b:ab:f7:8e:0d:
46:f0:8a:9b:f3:8e:fa:4a:a3:21:44:2e:a9:45:63:28:dc:d6:
1b:c7:bd:6a:8c:00:9f:12:2a:64:a6:73:a6:ec:99:a3:80:dc:
71:0c:c5:ce:28:b1:da:90:a9:a4:74:70:de:71:e2:d8:af:32:
64:cd:3f:a0:c9:11:dc:4e:4c:d8:8e:22:02:b7:89:d8:5a:2f:
d9:23:a4:fe:8c:64:f3:a8:36:ba:5a:3c:73:72:45:47:7f:d6:
d6:7d:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:32 2024 by rpki-client on console-fra.rpki-client.org