Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RKae1zUxHC3t9lE19tzH5AUClzo.roa
File: RKae1zUxHC3t9lE19tzH5AUClzo.roa (raw, json)
Hash identifier: skUNExBM1O5G1bd6AXX+UHNbJt3oL98UrFt9VY3+sks=
Subject key identifier: 44:A6:9E:D7:35:31:1C:2D:ED:F6:51:35:F6:DC:C7:E4:05:02:97:3A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 32
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RKae1zUxHC3t9lE19tzH5AUClzo.roa
Signing time: Mon 27 Mar 2023 16:02:05 +0000
ROA not before: Mon 27 Mar 2023 16:02:05 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:05 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=44A69ED735311C2DEDF65135F6DCC7E40502973A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:bb:47:18:96:fe:57:ee:b4:3c:d6:02:97:
bf:b2:74:62:5f:98:ea:ed:4e:ab:46:0d:c4:ea:a5:
18:1f:03:53:6a:16:a2:07:0c:7a:c1:e3:22:92:79:
95:d5:76:35:8e:36:df:e6:84:aa:93:2e:d1:b5:dc:
4e:d4:27:1a:f7:c8:75:95:2a:8d:f6:1e:d0:d8:d7:
33:a2:f4:1b:92:13:32:2e:40:14:95:7e:3e:2f:84:
7b:d1:7f:bd:d5:a9:49:34:a0:18:c2:21:da:2e:63:
6e:17:f5:45:df:c6:65:dd:fb:0d:6d:b3:32:4c:37:
da:b6:ec:4e:9f:b2:cd:09:0a:ea:f4:03:23:44:3b:
fa:4a:13:ef:f6:34:9a:95:e3:db:a2:07:09:d7:13:
c6:58:67:e0:8e:f6:37:21:d9:12:0a:d8:87:8d:ad:
93:0b:53:fe:2d:72:9c:18:c7:78:45:d5:08:52:9f:
75:b5:43:78:0b:e1:73:01:a6:ad:ba:e5:4c:82:01:
eb:3d:8b:c6:a7:40:73:0d:22:c3:11:42:df:40:c2:
cd:22:5c:d7:83:32:a3:d1:80:4d:3f:6b:94:19:f8:
6a:29:dd:e8:97:d9:6b:8a:b5:34:a2:41:88:db:d5:
db:ce:95:60:4f:a3:7e:20:f3:07:cd:91:32:17:ee:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:9E:D7:35:31:1C:2D:ED:F6:51:35:F6:DC:C7:E4:05:02:97:3A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RKae1zUxHC3t9lE19tzH5AUClzo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.99.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b8:4e:c5:7d:03:07:3c:a9:14:e2:c2:64:36:c4:79:37:3b:
bc:af:65:3b:24:ce:c9:8b:cb:27:3c:d0:27:19:44:d3:63:e2:
df:b8:65:3b:48:c8:6c:87:9e:d0:f9:17:96:6f:9b:d2:30:b4:
04:67:35:8f:53:15:7c:2e:8a:20:da:d6:c6:2e:b7:31:3e:7c:
f9:e3:ea:3d:42:d0:e5:6f:32:25:c1:8d:41:b1:36:03:54:7c:
1f:96:c3:f5:c4:16:a3:07:7a:30:1e:a3:e1:dc:48:08:ad:f1:
d0:af:85:34:0e:a1:32:69:0e:c4:16:89:1c:5b:9e:fb:1a:14:
d9:75:23:9d:ef:b3:30:ac:d2:9a:14:fc:35:a9:34:b4:55:85:
1a:48:5b:37:9f:47:59:f7:6a:86:0e:a8:94:d2:d0:b0:16:cc:
bd:df:e5:37:c7:e8:9c:e9:f1:58:bf:d8:d5:d1:93:09:12:26:
78:42:ea:60:26:e4:57:f1:4f:20:87:34:ef:a3:5d:29:a1:f6:
e4:be:01:b2:12:58:83:32:aa:e8:dd:65:04:2d:b6:e4:57:c1:
78:38:8c:09:1c:78:03:2c:e4:1e:45:15:32:20:8d:34:f7:3a:
b9:64:54:51:8a:67:fb:67:ea:00:0b:a5:38:0b:1f:55:a6:9e:
b1:1f:b2:c3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MDIwNVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNDRBNjlFRDczNTMxMUMy
REVERjY1MTM1RjZEQ0M3RTQwNTAyOTczQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANlAu0cYlv5X7rQ81gKXv7J0Yl+Y6u1Oq0YNxOqlGB8DU2oWogcM
esHjIpJ5ldV2NY423+aEqpMu0bXcTtQnGvfIdZUqjfYe0NjXM6L0G5ITMi5AFJV+
Pi+Ee9F/vdWpSTSgGMIh2i5jbhf1Rd/GZd37DW2zMkw32rbsTp+yzQkK6vQDI0Q7
+koT7/Y0mpXj26IHCdcTxlhn4I72NyHZEgrYh42tkwtT/i1ynBjHeEXVCFKfdbVD
eAvhcwGmrbrlTIIB6z2LxqdAcw0iwxFC30DCzSJc14Myo9GATT9rlBn4aind6JfZ
a4q1NKJBiNvV286VYE+jfiDzB82RMhfu9+ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBREpp7XNTEcLe32UTX23MfkBQKXOjAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvUkthZTF6VXhIQzN0OWxFMTl0ekg1QVVDbHpvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEADFhYzANBgkqhkiG9w0BAQsFAAOCAQEAWLhOxX0DBzypFOLCZDbEeTc7vK9l
OyTOyYvLJzzQJxlE02Pi37hlO0jIbIee0PkXlm+b0jC0BGc1j1MVfC6KINrWxi63
MT58+ePqPULQ5W8yJcGNQbE2A1R8H5bD9cQWowd6MB6j4dxICK3x0K+FNA6hMmkO
xBaJHFue+xoU2XUjne+zMKzSmhT8Nak0tFWFGkhbN59HWfdqhg6olNLQsBbMvd/l
N8fonOnxWL/Y1dGTCRImeELqYCbkV/FPIIc076NdKaH25L4BshJYgzKq6N1lBC22
5FfBeDiMCRx4AyzkHkUVMiCNNPc6uWRUUYpn+2fqAAulOAsfVaaesR+yww==
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org