Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UsTy9-dyfw0iRNDuRUbg-0a4zGg.roa
File: UsTy9-dyfw0iRNDuRUbg-0a4zGg.roa (raw, json)
Hash identifier: Uy5PN1T/FFgeIZRNuuxfUGEbnqVpW/FB1dgQM//5T5g=
Subject key identifier: 52:C4:F2:F7:E7:72:7F:0D:22:44:D0:EE:45:46:E0:FB:46:B8:CC:68
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0176
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UsTy9-dyfw0iRNDuRUbg-0a4zGg.roa
Signing time: Wed 24 May 2023 16:33:21 +0000
ROA not before: Wed 24 May 2023 16:33:21 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.102.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:21 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=52C4F2F7E7727F0D2244D0EE4546E0FB46B8CC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:d5:f7:8b:24:eb:1f:17:e5:a5:bf:0e:f5:
68:68:b5:3c:18:cd:41:6d:0a:97:8a:a1:35:74:5d:
59:23:85:59:f9:8b:55:a2:4c:63:81:ed:6c:c2:97:
d0:0c:b9:76:ca:5c:16:76:86:ba:01:34:5c:b2:e7:
9b:ee:1d:e7:39:67:05:12:73:d0:47:91:f6:06:1c:
44:77:aa:30:bc:ce:0f:7a:bc:be:2c:e4:5f:e1:6a:
87:84:79:35:dd:09:eb:52:ef:87:1c:27:86:fb:09:
ef:3b:2e:25:66:bb:0a:97:62:74:59:50:ce:81:ca:
8e:e3:67:4d:3c:f9:55:0c:1f:ea:34:0a:40:60:de:
12:b2:c7:89:f0:3f:c1:de:71:0a:e8:5a:4e:9d:30:
e9:56:6b:ea:03:d3:1a:cf:98:f6:c7:2b:46:e5:af:
13:c4:23:7c:62:6a:80:bc:32:75:75:ac:aa:50:55:
a4:5a:d7:66:c5:09:1b:ef:e0:a1:1c:86:87:35:bd:
d9:90:d8:29:62:a2:7e:0f:48:a9:a2:ec:01:2e:0b:
05:d1:cf:a1:20:b9:c5:02:1a:c3:2a:a0:c7:ea:d0:
e7:5e:ed:78:07:cd:95:bf:01:84:17:2d:16:aa:7e:
91:66:6c:ae:b3:08:c4:87:fd:af:fe:bf:85:dd:12:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:F2:F7:E7:72:7F:0D:22:44:D0:EE:45:46:E0:FB:46:B8:CC:68
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UsTy9-dyfw0iRNDuRUbg-0a4zGg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.102.0/23
Signature Algorithm: sha256WithRSAEncryption
19:2c:3d:cb:0e:72:6f:f2:ff:14:ac:f2:ac:d1:a6:5a:2f:43:
1a:db:6e:97:23:3d:5c:22:77:18:34:e8:dd:cd:d9:b3:38:82:
af:12:e6:72:96:b7:3b:54:21:b1:4e:e5:32:a0:1c:81:c2:9c:
9a:18:c8:c2:4e:99:81:ec:9c:73:e6:9f:05:ba:22:5d:8c:0c:
82:b0:35:38:f4:74:34:0e:16:3b:ed:04:51:a5:c3:e3:23:3e:
c0:56:68:d5:0f:09:c5:c6:f4:a6:92:d8:1c:83:14:fe:4d:7e:
8d:c2:59:bb:e7:53:87:80:f9:0f:5f:67:9b:98:9a:40:77:e8:
bf:29:01:3d:de:05:d2:5f:b7:94:50:d1:e3:f2:df:8c:c5:e6:
bc:ae:c4:a0:ca:95:58:63:e9:67:75:66:6b:e8:21:eb:5f:90:
8f:66:85:91:13:40:f5:c0:d3:2f:62:b1:e4:8b:d9:63:a4:87:
d3:0d:4c:48:33:8d:84:0e:8f:de:17:29:bf:ae:d8:79:57:d8:
40:33:b7:38:a5:93:1b:e1:55:f0:05:d3:a0:5e:b6:b0:25:50:
89:66:4a:83:2d:fb:69:5c:60:9b:a8:09:e6:e0:3d:ca:71:fa:
9b:50:cd:a2:d3:e6:53:82:51:bf:e9:dd:16:0a:a0:17:7a:d4:
79:50:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org