Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L1fOXD1sO9EFE_jKkrWIknDo41E.roa
File: L1fOXD1sO9EFE_jKkrWIknDo41E.roa (raw, json)
Hash identifier: faMpy8mYm+0c12VNDMG+2bAsCms74ukSkg/G4dImYXo=
Subject key identifier: 2F:57:CE:5C:3D:6C:3B:D1:05:13:F8:CA:92:B5:88:92:70:E8:E3:51
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 5A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L1fOXD1sO9EFE_jKkrWIknDo41E.roa
Signing time: Mon 27 Mar 2023 16:04:30 +0000
ROA not before: Mon 27 Mar 2023 16:04:30 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:04:30 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=2F57CE5C3D6C3BD10513F8CA92B5889270E8E351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:49:5a:9b:35:47:99:a7:40:90:aa:6d:fb:
73:a6:56:87:8b:59:4f:f5:a6:85:91:01:f8:0b:a0:
77:7b:b9:08:bf:a0:bd:12:05:9b:47:72:a0:0f:0f:
dc:7a:ee:98:76:81:02:a2:53:b2:77:8b:4f:0a:79:
2d:5b:9c:24:d8:39:8f:dc:7a:87:dd:b4:64:ba:2f:
64:be:43:13:95:11:3d:6a:c5:33:5a:c5:2b:26:2d:
11:f5:69:b7:c4:95:f0:ef:31:66:7c:f6:01:c9:ad:
ee:9d:f3:26:ef:9e:63:e9:83:dc:88:32:64:f4:72:
05:1a:66:7d:62:b4:5e:e0:91:4e:f5:24:f4:97:db:
d2:21:7d:ae:b1:98:c0:65:20:b9:c7:4d:6d:57:f9:
e1:9d:ba:40:28:7a:4d:2f:a2:7d:c5:a8:32:e8:12:
ba:28:50:18:f4:04:f8:14:5b:25:53:89:65:75:33:
76:1f:c1:da:56:0f:c0:25:f8:59:f2:b5:e7:79:9e:
8d:95:5e:88:aa:90:13:c0:53:0b:37:e6:15:ec:92:
66:74:aa:db:05:96:72:09:0c:45:20:b5:bd:24:82:
3f:43:00:31:98:26:9e:36:ae:c5:f1:ae:83:2c:cc:
c6:f1:2e:3a:c4:7b:6c:73:25:b5:44:7f:92:0e:0c:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:CE:5C:3D:6C:3B:D1:05:13:F8:CA:92:B5:88:92:70:E8:E3:51
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L1fOXD1sO9EFE_jKkrWIknDo41E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0e:b7:fc:7f:d3:5f:31:b1:63:3c:5b:1d:af:24:20:2c:51:
ca:a7:0c:8d:87:00:b7:5f:0c:99:40:a8:b6:69:c2:0a:7f:f9:
c9:5c:3f:c3:df:f9:5f:01:2d:49:c5:60:83:43:49:67:54:a0:
b1:7a:cd:0c:cb:fc:f6:ab:b8:31:c0:f8:e4:36:80:f0:39:a3:
db:42:32:96:64:c7:c7:eb:e7:7a:ac:14:90:91:5e:a4:f9:2b:
08:d0:d6:d8:fb:99:b9:ba:36:c2:b2:8f:ec:68:a3:83:a1:7d:
20:56:23:7a:f4:c3:53:7d:aa:3e:10:b0:a3:22:0f:ed:eb:ab:
58:65:3a:3d:ee:35:ff:f7:52:5d:09:a7:91:42:72:9c:16:61:
21:07:c4:f7:9a:79:d6:30:18:d7:01:6f:59:f2:6b:5f:f7:84:
49:c5:cc:12:e4:cf:8d:3c:05:0e:f8:19:89:96:fb:1f:2b:3f:
3b:4c:9b:39:c7:0f:2d:2f:03:9a:ee:ab:bc:94:64:4b:bb:f3:
85:95:4e:00:1f:6d:9e:15:20:12:c4:32:a5:19:ee:12:8a:f5:
bf:54:b8:9d:93:e1:14:d0:36:e1:7f:a1:f7:49:d1:da:03:e6:
8c:1b:b1:c1:60:d8:40:c6:29:0a:a8:1e:3e:c4:b6:db:12:9f:
28:b2:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org