Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cTzk9Zv5QQwhdY08IZwnqz8MQvM.roa
File: cTzk9Zv5QQwhdY08IZwnqz8MQvM.roa (raw, json)
Hash identifier: 15bpElJDR8ntuzu3pNVxK1kNrpZFor+o8CkAo4T0Lgg=
Subject key identifier: 71:3C:E4:F5:9B:F9:41:0C:21:75:8D:3C:21:9C:27:AB:3F:0C:42:F3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 03C4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cTzk9Zv5QQwhdY08IZwnqz8MQvM.roa
Signing time: Tue 06 Jun 2023 16:02:58 +0000
ROA not before: Tue 06 Jun 2023 16:02:58 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:02:58 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=713CE4F59BF9410C21758D3C219C27AB3F0C42F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:86:0c:d6:76:01:36:70:51:29:2f:8d:92:
39:03:28:38:e9:59:48:d9:d9:54:d5:52:cc:fd:08:
13:c0:8a:c2:1e:87:5f:35:9e:aa:af:1b:8f:a2:07:
f5:88:b0:18:cf:82:74:5d:39:0c:24:0d:5b:80:6c:
00:55:3e:8c:8f:da:ac:93:35:e3:14:d1:2b:55:da:
67:53:58:4a:76:86:f7:cf:70:a0:a4:1d:04:33:98:
b4:32:c0:bc:76:53:ee:dc:b8:bb:87:b1:98:16:a7:
92:65:9d:bf:33:bd:47:7c:51:30:c5:a5:92:2c:40:
f2:14:96:47:98:5a:5e:b0:e5:3e:a6:f3:68:d0:aa:
68:36:63:f4:ee:56:99:25:87:0c:39:73:54:d2:88:
67:5d:1e:2c:b3:5f:a2:ad:cd:0d:15:3e:70:61:1e:
36:5e:1f:94:14:9b:ac:93:5f:eb:de:6a:79:ec:4e:
e6:9b:15:cf:69:4d:1b:7d:66:33:a7:42:d7:9b:3f:
3d:d7:d5:83:57:51:9a:29:0b:0b:8e:cb:4c:ba:75:
79:8c:28:21:80:b0:68:53:b1:84:74:e2:e1:79:96:
d6:62:e4:a4:d6:b5:07:d0:f5:a6:0a:ce:b8:56:52:
c5:6d:27:ab:f8:b1:ca:51:a9:4a:3d:92:da:b8:7e:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:E4:F5:9B:F9:41:0C:21:75:8D:3C:21:9C:27:AB:3F:0C:42:F3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cTzk9Zv5QQwhdY08IZwnqz8MQvM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.0.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:a7:19:cf:cd:52:7e:9b:a0:3a:84:0d:3f:27:b3:7b:37:24:
2e:07:9f:3d:79:99:b4:95:2e:c4:ac:b3:38:44:d3:83:ff:d5:
62:33:c7:c9:09:64:fb:55:0c:d5:12:92:1a:69:b7:31:93:5a:
84:ad:bc:16:ec:a7:24:4e:4e:a0:95:17:4e:3f:6c:fd:fb:ed:
a2:ea:06:58:21:36:7b:13:38:fc:ed:58:07:bc:af:15:ba:cb:
4f:77:bf:3b:2e:95:39:51:51:19:bc:01:61:f0:35:8a:f4:19:
04:52:79:e7:84:4c:eb:2a:c6:2d:07:03:ff:06:a7:40:ca:cf:
d6:0f:3f:b2:de:1c:10:df:e3:98:e3:fc:c2:ca:ac:31:6b:3c:
95:83:97:04:2e:ac:fd:49:ab:1c:a3:70:61:3e:08:64:f5:1b:
53:92:ed:0e:29:bc:9e:b0:72:ad:2d:b6:7a:ef:6d:c1:d0:22:
d3:03:84:07:f9:a4:0c:82:87:59:5f:73:ac:72:5c:70:40:96:
31:0f:17:64:98:56:b4:e1:33:7b:f8:33:fd:1e:6d:02:16:3c:
4d:7e:ad:b2:c4:52:ab:5f:71:f8:e2:62:4a:1e:41:23:ec:e2:
d8:ba:c7:1e:8e:f6:49:df:82:4f:fd:58:a2:9c:1e:a5:f3:17:
e4:40:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:34 2024 by rpki-client on console-fra.rpki-client.org