Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZA1VqSJNwRmSRBIUvOX8PDStsFQ.roa
File: ZA1VqSJNwRmSRBIUvOX8PDStsFQ.roa (raw, json)
Hash identifier: HSFP7nXkainW2qUQBbVS8yyby9i8oBMMHKhs8N51/Tg=
Subject key identifier: 64:0D:55:A9:22:4D:C1:19:92:44:12:14:BC:E5:FC:3C:34:AD:B0:54
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0110
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZA1VqSJNwRmSRBIUvOX8PDStsFQ.roa
Signing time: Wed 24 May 2023 16:10:17 +0000
ROA not before: Wed 24 May 2023 16:10:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:10:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=640D55A9224DC11992441214BCE5FC3C34ADB054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:c6:82:ee:dd:10:5f:0c:a2:10:af:16:43:
c4:d1:50:dd:6f:32:14:31:47:2e:3e:8d:a3:12:7d:
8f:85:29:f1:41:9d:02:b3:79:30:e1:df:ba:e9:ed:
9c:c9:19:54:56:7c:6e:07:69:49:bd:33:90:ff:56:
01:05:4c:89:9b:60:14:5c:9d:37:69:18:c0:51:45:
e3:be:3e:5a:a4:f2:72:70:c5:6e:68:ae:7a:1e:8f:
0c:be:ee:50:22:6b:f3:2d:8c:d3:8f:2b:05:d5:6c:
a5:51:a2:22:90:c7:4d:e5:08:12:8c:1c:aa:1e:03:
02:d6:a6:1f:8e:fb:70:f0:4b:7c:07:42:e6:d7:b9:
d0:b4:fa:21:4f:79:34:11:68:b4:a3:e6:86:a9:fc:
6b:6b:2d:a0:44:a1:98:bc:cb:e9:c1:a5:c6:8c:5c:
2a:96:80:c2:18:05:af:6e:5a:7d:a3:08:ce:9f:9f:
7a:5d:26:15:f3:76:f3:d2:18:48:72:8d:45:f3:9f:
37:bb:b0:ce:3d:7b:3f:48:77:09:5f:5a:6f:3f:61:
b8:2d:f1:27:d7:95:c4:0f:d0:41:a1:bc:cb:d4:47:
f1:42:6b:27:43:ef:b3:3f:0c:fa:5e:66:2d:48:d2:
71:93:95:b6:62:e8:0c:4b:29:65:b6:eb:2c:6b:1d:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:55:A9:22:4D:C1:19:92:44:12:14:BC:E5:FC:3C:34:AD:B0:54
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZA1VqSJNwRmSRBIUvOX8PDStsFQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:cb:e0:17:a4:4d:84:19:6d:f3:c4:88:e5:e1:59:9e:40:c9:
b8:db:5e:25:6d:f3:e9:dc:c8:43:10:13:98:a6:5c:fb:5c:62:
5c:77:a7:7e:e8:4c:b2:71:c6:6b:af:eb:fc:60:8f:03:89:ee:
c4:97:56:c3:24:2e:f8:5b:a9:25:ea:e1:bf:9b:cd:d2:c5:e6:
33:ee:78:26:3f:64:6c:3d:18:f3:08:58:1c:a0:e2:ba:cb:47:
58:67:b8:d8:f4:fd:8a:be:67:57:f0:0f:de:d9:8b:bd:b1:3c:
5d:21:54:16:71:93:d2:6a:87:d2:4a:06:f0:2d:d0:01:58:9c:
7d:b1:15:d6:4c:1b:05:33:3d:90:bb:4c:e6:e7:00:9e:34:18:
eb:e9:54:27:e3:a6:ae:99:4d:04:60:e8:56:7b:9e:52:19:21:
a8:0f:ac:60:6e:6c:f7:08:57:76:74:6e:5d:a1:cb:29:d6:27:
05:52:33:c1:1d:cd:8d:05:26:4f:4e:a3:3c:ee:b4:8d:d9:5f:
4e:91:4a:30:f9:65:9e:d1:a7:14:aa:55:7c:af:04:fa:f6:48:
65:66:43:a5:26:a5:e5:ad:e9:c5:f2:b9:76:27:a0:cb:e9:6e:
ea:ed:b7:e1:f3:f0:f0:6a:9d:72:ac:5e:7c:a2:73:cf:4e:b7:
64:07:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org