Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PnoqVi97YpLcJQoM1ZKSGbUQcfY.roa
File: PnoqVi97YpLcJQoM1ZKSGbUQcfY.roa (raw, json)
Hash identifier: y8FklQl27fXBbEgJ2lLv8wmM+m66eNzzWVlN8k0kbeQ=
Subject key identifier: 3E:7A:2A:56:2F:7B:62:92:DC:25:0A:0C:D5:92:92:19:B5:10:71:F6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0193
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PnoqVi97YpLcJQoM1ZKSGbUQcfY.roa
Signing time: Wed 24 May 2023 16:35:11 +0000
ROA not before: Wed 24 May 2023 16:35:11 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:11 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3E7A2A562F7B6292DC250A0CD5929219B51071F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:b9:72:29:8b:69:4f:20:3c:c5:08:c6:a7:
6b:2c:2d:e3:2b:ed:76:d2:91:ce:5b:56:01:cf:93:
5a:d0:a4:ff:93:49:31:63:0d:c7:1e:cd:07:2c:43:
ef:7b:7d:75:d7:8c:3c:71:d4:7c:9b:01:56:86:d1:
e5:5a:75:73:86:73:1a:29:61:b6:4e:33:62:6d:fb:
41:19:d9:5b:77:40:9a:09:55:81:79:de:e0:0b:19:
d4:09:54:52:6c:1f:0a:8a:72:6a:e0:7d:52:65:5f:
3b:b9:06:e6:25:86:bc:9d:39:46:bb:5d:27:59:b6:
9b:68:21:79:78:df:1b:7f:04:dc:4f:40:50:0a:de:
64:fe:ef:f6:4b:9c:61:6d:a0:b7:ef:d9:12:45:2d:
da:db:3a:1c:05:b6:ef:0a:45:af:79:17:44:d3:39:
30:33:2f:b2:6e:f9:2f:96:4a:02:4e:4f:90:a7:f1:
ab:53:cf:cd:00:76:3d:66:60:4a:ad:fa:56:80:68:
a5:3b:cc:88:8c:ce:06:ab:89:a9:99:77:63:1a:54:
70:ec:a6:9a:a1:b5:e6:56:7d:37:2d:f6:f4:49:fe:
4e:41:f8:56:bd:82:98:6c:3f:8a:b1:dd:78:7e:41:
cc:80:ad:8c:0d:dd:1c:9f:03:95:21:8a:c8:3d:6c:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:2A:56:2F:7B:62:92:DC:25:0A:0C:D5:92:92:19:B5:10:71:F6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PnoqVi97YpLcJQoM1ZKSGbUQcfY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0f:16:a8:84:2e:1c:72:01:dc:5e:42:e2:36:98:4e:21:bd:
2b:a4:68:38:44:15:60:4e:84:0e:93:a0:01:ee:08:d1:b5:60:
5d:53:86:5e:85:d9:41:e7:9b:89:a2:6d:da:56:86:9c:fb:b8:
7c:3e:82:1b:db:5a:07:c7:a8:bb:28:63:0b:e4:68:e6:5d:00:
2a:cc:9c:85:2a:a9:fa:bb:31:d0:b4:7f:82:50:bf:bc:8d:10:
0c:c1:01:30:42:21:54:d1:38:6f:cf:03:2f:e1:4f:06:27:c4:
39:fb:9e:87:25:53:18:b3:dc:fb:03:e2:08:c2:7b:4a:98:f8:
1b:d2:26:82:24:f7:c4:1e:0d:a5:2b:d5:b0:28:33:df:5e:6f:
98:9e:9d:ed:19:e2:6d:de:ac:38:78:76:ef:ec:5d:da:84:d7:
87:59:09:df:97:ca:34:3c:9e:c8:5c:8b:3b:0c:0b:f3:e6:14:
8a:8d:35:d3:ef:5a:a0:09:37:d1:2b:49:3e:88:ae:e3:fc:da:
35:8a:9a:01:a2:70:1c:87:6c:3f:21:74:99:1a:0c:f2:ca:f0:
b0:7c:90:67:de:c0:44:9d:cc:eb:4f:9b:32:ce:1d:d2:45:f2:
71:e8:b2:84:69:91:75:4b:3a:c4:4a:3f:1a:0c:b3:5c:a6:e1:
bc:42:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org