Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RJjy1BBDZXHn9-HlrMAIYfZqbC4.roa
File: RJjy1BBDZXHn9-HlrMAIYfZqbC4.roa (raw, json)
Hash identifier: DS8HymtUzoayBrO2A6NBLIPkh5F839tjfasqu9Zs5zg=
Subject key identifier: 44:98:F2:D4:10:43:65:71:E7:F7:E1:E5:AC:C0:08:61:F6:6A:6C:2E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 034B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RJjy1BBDZXHn9-HlrMAIYfZqbC4.roa
Signing time: Thu 01 Jun 2023 16:10:49 +0000
ROA not before: Thu 01 Jun 2023 16:10:49 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:10:49 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=4498F2D410436571E7F7E1E5ACC00861F66A6C2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:b0:83:ca:a9:78:2e:21:96:ab:4e:26:09:
38:c5:fa:34:89:06:51:ce:45:13:72:03:1a:8b:1d:
12:ad:82:ce:22:f4:40:60:5c:b1:44:88:56:13:38:
93:99:89:dd:b2:80:47:50:ea:bc:67:e7:a9:f5:a1:
75:75:c0:4b:9b:46:08:c4:df:d6:35:3a:b3:c1:01:
7b:99:c3:55:25:27:af:c0:ab:e9:12:ea:3d:ca:10:
40:5c:c8:94:5d:06:34:3e:ef:91:37:4f:64:ce:48:
21:65:38:b1:35:44:ab:e3:be:07:35:1e:c5:7c:3a:
2d:6b:c4:5c:12:ca:4b:78:37:f7:4d:8e:c7:c7:72:
71:5c:ec:ac:83:b9:a1:6e:fb:7b:fb:3c:c7:e4:16:
0d:fa:e5:d1:10:45:7f:22:33:de:99:4f:5c:ea:86:
f9:e8:ef:98:2e:d3:bf:34:a6:08:64:9d:8b:73:04:
8f:1d:46:1c:20:38:3b:65:b8:5a:ac:2c:2e:05:1e:
94:d6:03:c4:21:e5:55:69:8d:13:98:b8:8c:08:ad:
27:25:8e:e8:73:0b:a0:e4:3d:02:fe:b4:06:c8:f9:
fc:3c:48:aa:0f:e4:ac:ae:1e:58:8b:d8:65:43:24:
bb:c1:38:46:20:9f:b9:91:fa:0c:22:e2:b6:1a:6c:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:F2:D4:10:43:65:71:E7:F7:E1:E5:AC:C0:08:61:F6:6A:6C:2E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RJjy1BBDZXHn9-HlrMAIYfZqbC4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:83:26:7d:ea:84:07:63:8f:83:eb:8d:1c:55:0d:a7:1e:7b:
25:65:e2:fe:9d:4e:14:dc:e9:ba:b7:a6:11:96:9e:d5:5e:e2:
34:c2:d4:ff:d2:14:a3:96:a0:37:10:e7:d2:a1:c4:2e:22:16:
27:6f:1b:18:c6:38:83:66:ea:88:4f:72:45:90:60:cd:98:ed:
41:28:40:e3:4f:91:65:57:42:81:32:a5:66:01:8d:b8:d6:ae:
ae:af:68:7a:bd:c8:b5:ba:4e:0a:6e:4e:da:85:31:5d:cb:42:
48:9a:d6:5d:0f:ca:64:5b:d7:4e:54:e4:35:75:c1:bf:75:64:
69:f7:fc:6b:3c:50:6e:ad:2f:42:47:11:a5:63:b7:5e:94:78:
16:50:e0:0b:ae:c3:6d:b5:69:1b:88:df:ac:4b:8b:40:fd:00:
7a:e7:2b:87:f2:27:2b:3f:b2:8f:ca:1c:79:d2:78:e0:4f:5b:
37:97:1b:85:19:68:fb:5e:f5:9f:47:f5:3e:75:26:3e:68:f7:
f7:8f:d9:88:41:90:7b:5a:c6:9a:8d:50:d8:5e:c0:ff:ae:7d:
bf:78:ff:76:ad:f7:93:5e:9f:bd:78:c6:47:77:3c:8b:98:20:
39:27:ac:f7:53:2b:62:50:18:ac:5f:9f:0a:b5:91:22:e4:02:
66:6f:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:33 2024 by rpki-client on console-fra.rpki-client.org