Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcBecaEDplq8HRW9--dxrQZJ6QI.roa
File: LcBecaEDplq8HRW9--dxrQZJ6QI.roa (raw, json)
Hash identifier: PYsnbjISjnkgPMHMwLlK6HEQxJv0ilZxyxHG60bWoOw=
Subject key identifier: 2D:C0:5E:71:A1:03:A6:5A:BC:1D:15:BD:FB:E7:71:AD:06:49:E9:02
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 063F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcBecaEDplq8HRW9--dxrQZJ6QI.roa
Signing time: Tue 30 Apr 2024 01:31:27 +0000
ROA not before: Tue 30 Apr 2024 01:31:27 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.100.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 18 Sep 2024 04:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:31:27 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=2DC05E71A103A65ABC1D15BDFBE771AD0649E902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:e8:0f:eb:06:c2:94:93:16:dc:2e:6a:a4:
a2:ce:f9:9a:2a:b7:8a:88:dc:66:d0:02:86:0f:f8:
44:41:b0:68:1b:37:71:f1:93:e3:24:92:85:80:e9:
f3:14:38:f7:be:f3:61:ec:95:4c:77:74:28:ef:51:
08:15:b6:54:b7:1a:f3:e0:36:0d:6f:9a:ac:df:31:
12:82:39:00:b1:9b:73:44:ae:1e:1f:a6:e0:7d:d3:
67:c3:e9:ea:76:17:09:ba:92:c5:de:8d:4d:65:ca:
b0:69:31:ef:16:8e:89:28:48:c0:e6:ad:4a:d4:ae:
6b:d4:56:c5:1b:34:a6:f5:0d:c2:86:0a:54:fd:ff:
23:e1:4f:04:30:3f:31:39:74:03:6e:2a:b0:10:5e:
c5:a2:10:c4:b4:97:25:91:3a:38:99:56:b7:b6:c2:
ea:81:d9:66:60:be:93:1b:6a:e3:2b:f9:f9:62:a6:
c6:c4:83:1a:c3:6b:33:ff:ea:0e:ca:cb:f2:7f:a7:
be:e5:ae:1c:93:6e:db:df:23:c0:02:ce:9c:57:2e:
c1:37:c6:74:5a:14:a4:36:b4:30:2a:3c:6d:21:54:
a0:67:39:a7:fd:40:eb:18:87:e0:84:65:dd:5e:32:
15:33:4e:1e:ff:97:1c:d0:13:f4:de:5f:c0:60:1c:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:5E:71:A1:03:A6:5A:BC:1D:15:BD:FB:E7:71:AD:06:49:E9:02
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LcBecaEDplq8HRW9--dxrQZJ6QI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.100.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:e3:73:af:d4:83:a7:18:88:2a:d8:2e:6c:aa:69:54:07:b9:
aa:91:f7:04:55:41:0d:c3:6a:fb:6b:5c:8a:08:26:bb:1b:2f:
75:dc:66:e0:71:f1:8f:ea:48:4e:26:8c:40:fa:65:c7:bf:33:
7b:0d:23:96:1a:4a:b2:72:b5:03:80:33:86:0e:29:71:8b:db:
5c:f3:e9:3f:07:5a:54:44:b4:b2:7a:df:f7:da:76:e3:79:4e:
4c:b8:88:58:e8:4d:76:91:be:a6:8c:5d:e3:57:a1:14:b1:11:
3e:be:4b:4a:6f:57:7a:dd:f0:e3:25:50:8e:69:fc:5c:09:32:
45:4a:da:36:90:52:73:8a:55:15:db:9e:06:eb:31:39:cb:98:
ac:67:47:2d:bb:45:59:dd:4c:d6:51:0f:48:49:88:f6:67:b8:
3f:51:33:09:4a:d3:9b:c3:ac:63:6d:b6:9f:d8:5e:cf:ae:fa:
77:e1:b1:46:54:9e:a7:68:49:0a:bd:9e:ed:7e:03:0f:f5:30:
54:9e:8d:1a:88:ff:d8:98:0e:d0:97:49:3c:e8:9f:d5:3d:cc:
25:d0:1e:6b:61:bd:1b:2a:8a:6e:14:f9:a6:69:1e:68:2d:03:
a9:e6:23:a8:91:8f:93:e7:f5:fa:2e:79:13:38:fa:9d:19:14:
f7:e1:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:05 2025 by rpki-client