Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qdns1sxVyArm7QEFwGQ80j3eXJs.roa
File: Qdns1sxVyArm7QEFwGQ80j3eXJs.roa (raw, json)
Hash identifier: tkNbk4UbeK2NqocL3LXJ0+bi2N3H5H4Y60pIJ9lvoqM=
Subject key identifier: 41:D9:EC:D6:CC:55:C8:0A:E6:ED:01:05:C0:64:3C:D2:3D:DE:5C:9B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 6D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qdns1sxVyArm7QEFwGQ80j3eXJs.roa
Signing time: Mon 27 Mar 2023 16:06:42 +0000
ROA not before: Mon 27 Mar 2023 16:06:42 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.168.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:06:42 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=41D9ECD6CC55C80AE6ED0105C0643CD23DDE5C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:d8:7d:0b:f2:91:7a:c6:59:30:66:b9:5c:
72:97:e6:11:72:55:6e:b2:27:cd:29:e6:16:47:ea:
e0:4e:1a:79:03:a6:38:dd:35:bf:bb:f4:2a:c2:1b:
e2:01:b0:92:ac:a8:f4:bb:90:1f:36:46:b8:ac:c6:
b6:79:46:9b:b5:e6:da:4c:8c:61:e1:1b:3a:f6:2e:
09:d4:2e:66:0e:49:c2:36:f7:25:eb:9d:0e:cb:d6:
d4:02:09:c3:2e:33:15:26:7b:cf:26:88:f4:a5:83:
54:32:b0:ff:5a:67:47:de:f8:5c:0b:1b:c4:19:95:
80:d4:33:e6:e0:1b:27:39:85:03:2c:4e:1f:14:68:
65:16:dc:b4:86:ba:34:bc:8d:67:4b:78:4a:51:7d:
f3:c3:d0:d3:d6:b9:18:e0:e0:d8:52:c7:21:e0:59:
a5:56:b1:59:63:89:b4:40:a6:68:26:36:ec:81:34:
c1:d0:06:71:2a:3d:83:9e:74:62:0e:7a:79:36:46:
d6:01:94:bb:f7:a5:7a:1f:a7:0b:60:95:b8:f3:44:
3b:26:55:e8:ae:07:ee:f7:d5:b5:d7:a8:eb:ad:f0:
ec:34:30:00:3b:53:90:9e:f6:67:83:c9:3a:f8:26:
28:09:0b:ce:58:1c:76:36:55:83:cc:99:82:ce:25:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:EC:D6:CC:55:C8:0A:E6:ED:01:05:C0:64:3C:D2:3D:DE:5C:9B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Qdns1sxVyArm7QEFwGQ80j3eXJs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.168.0/21
Signature Algorithm: sha256WithRSAEncryption
88:3c:4f:7e:fe:a5:e2:90:8f:29:45:42:2f:f4:50:3c:99:76:
aa:43:1b:ce:88:48:b5:77:78:00:05:a3:9b:94:eb:f7:f8:7c:
81:a1:af:37:bf:ba:de:14:d8:7d:fd:bc:de:bd:78:5a:36:c1:
81:ae:12:a1:1d:10:2a:1b:87:e9:c7:f3:76:25:6e:ce:72:8c:
20:81:ae:41:05:8b:a6:a8:2e:f0:8a:0b:7b:22:5e:5f:e5:8a:
4f:e3:14:f3:db:0f:18:8a:c2:b0:d5:50:7f:4f:56:e5:8e:a3:
ef:d9:70:11:5c:24:63:fc:d2:20:6d:8f:b2:b9:3d:87:dd:cd:
a4:6b:00:f2:57:f2:ab:4e:74:23:d5:2d:8a:2e:30:9b:c3:43:
b1:39:77:7a:ab:2c:28:a3:4d:89:28:fa:dd:d1:23:61:65:57:
0b:1f:bc:09:a2:12:62:7d:62:8c:c1:cf:67:61:88:98:b1:b8:
ba:8e:71:b5:ec:e3:23:29:af:0b:c4:a0:6c:83:24:45:11:ac:
1d:f3:15:b1:88:6b:1e:0f:c2:48:ea:9e:d3:39:5b:e3:49:c4:
f0:e5:1a:d7:f7:b4:59:85:a7:14:2b:31:1f:ce:d7:b8:1d:02:
a5:b6:fa:d6:5e:a9:af:61:8c:8f:a3:7b:63:db:66:57:98:03:
79:0a:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org