Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/aPsRbJeSWMjSLotAvl3wRMVN4zg.roa
File: aPsRbJeSWMjSLotAvl3wRMVN4zg.roa (raw, json)
Hash identifier: S0T7kJzbmgWd6KVSnnO16OxFG8ho348BEDnoZ/eazf8=
Subject key identifier: 68:FB:11:6C:97:92:58:C8:D2:2E:8B:40:BE:5D:F0:44:C5:4D:E3:38
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 043C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aPsRbJeSWMjSLotAvl3wRMVN4zg.roa
Signing time: Thu 27 Jul 2023 16:03:10 +0000
ROA not before: Thu 27 Jul 2023 16:03:10 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.98.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084 (0x43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:03:10 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=68FB116C979258C8D22E8B40BE5DF044C54DE338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:85:38:d2:56:21:4d:8d:cd:ae:36:dd:3e:
37:38:22:98:7c:b5:b7:06:ef:ca:65:1f:6e:66:17:
25:69:73:ec:26:27:4b:7d:d4:18:30:08:9d:fb:b4:
c2:8d:36:20:bc:2c:c9:67:0a:48:9d:6e:34:8f:98:
c2:d6:54:13:a2:9a:46:b6:42:0e:fe:4d:fc:c3:7f:
dc:3d:aa:7f:3e:30:12:99:be:11:13:d6:49:de:b3:
95:ce:c2:94:a9:f1:c9:f5:f7:c6:1e:ae:cd:06:d0:
5e:df:0a:cd:fb:69:be:93:37:96:e7:30:cc:6f:c4:
2e:1d:0f:89:5c:79:46:0d:33:de:89:99:f6:83:52:
4d:81:68:a2:1f:ca:cf:fb:f2:0e:26:54:04:d6:99:
79:90:7f:0e:49:df:62:97:94:05:f8:22:1a:3b:04:
16:b2:29:37:78:ee:16:60:5b:3d:bf:2d:f7:e5:c2:
fe:13:7e:be:40:6f:ed:1e:35:5e:d9:a8:29:1d:6f:
5e:a9:d0:9b:75:8b:a5:32:e2:b0:dc:05:08:f7:01:
b9:62:00:1a:73:4c:79:73:06:fe:f9:6e:f4:39:41:
72:f3:41:9d:e4:cf:01:43:a0:1e:fe:33:78:8d:e4:
e6:a5:29:09:1d:9b:35:79:18:b0:38:4f:ea:bb:35:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:11:6C:97:92:58:C8:D2:2E:8B:40:BE:5D:F0:44:C5:4D:E3:38
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aPsRbJeSWMjSLotAvl3wRMVN4zg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:24:eb:05:1b:11:ff:f4:ee:69:f5:3c:6a:39:ae:9a:91:59:
18:a1:d6:fb:90:a9:a6:c6:30:31:88:7c:b1:9c:27:67:5c:ec:
ce:4e:6e:9a:bc:ef:e8:c4:d0:d8:2a:b1:17:1a:6f:3a:01:c7:
7f:40:1a:e0:10:dc:ac:d7:4e:45:51:a1:8c:39:82:bf:eb:fc:
0b:73:c9:21:01:6c:98:b8:84:5e:9d:ef:f3:c3:da:5a:93:a3:
d0:bb:0e:fa:e6:f4:34:95:51:80:90:7c:d4:64:c2:3f:ac:ab:
be:bc:d6:2b:e7:1d:09:bc:c2:c6:22:87:2a:1e:ed:ac:80:93:
b3:84:f0:27:e9:2c:53:37:49:62:93:e9:ed:c1:50:df:14:15:
7e:ff:0b:fb:86:7c:5f:d6:45:89:c1:33:5f:85:a3:d9:85:91:
8a:6c:70:9a:44:6b:ee:ff:4a:fa:ce:40:c9:92:be:c8:23:74:
71:03:33:ed:8a:a4:15:60:27:16:94:6f:21:33:43:f4:bf:9a:
23:27:d3:06:71:c9:e1:f5:d1:87:6f:62:3e:51:ef:bb:c6:2c:
bc:a3:8b:63:35:2e:e0:9d:98:65:83:e9:1b:07:b2:e6:8d:28:
11:3f:92:c1:32:69:dd:91:5d:2e:81:87:9a:b0:b6:72:7f:f9:
7d:cb:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:20 2024 by rpki-client on console-fra.rpki-client.org