Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFlHo6MgED0kG-PUBTN3pEjIzN0.roa
File: hFlHo6MgED0kG-PUBTN3pEjIzN0.roa (raw, json)
Hash identifier: /e24ywqAR0OlrSsrBC3XW97DwMof77zrgdejouY3KFg=
Subject key identifier: 84:59:47:A3:A3:20:10:3D:24:1B:E3:D4:05:33:77:A4:48:C8:CC:DD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFlHo6MgED0kG-PUBTN3pEjIzN0.roa
Signing time: Tue 22 Aug 2023 05:31:51 +0000
ROA not before: Tue 22 Aug 2023 05:31:51 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.109.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Aug 22 05:31:51 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=845947A3A320103D241BE3D4053377A448C8CCDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:93:c3:3c:9b:88:b3:01:ef:65:2a:1b:9a:
85:2b:72:cd:8c:db:9c:2a:a5:ed:72:88:69:a4:03:
60:22:48:18:f3:a5:c6:bc:b4:60:28:fe:c9:de:f7:
28:79:0e:58:e3:a7:34:9a:89:6c:6d:ff:93:e0:d8:
d9:34:b2:cf:14:4e:2f:0e:cd:53:f7:ae:89:34:a3:
2e:f0:31:17:e4:24:d3:ab:64:eb:cf:da:33:37:05:
e9:c2:c3:4e:c9:71:42:e6:86:38:c7:25:01:b4:85:
d9:fc:db:b1:ad:f8:3c:47:39:3b:b9:47:45:01:1a:
24:30:08:8f:15:e4:3b:b2:fe:16:44:58:eb:49:52:
c4:a4:9a:ee:3c:df:af:57:23:74:d4:48:cf:a5:9b:
eb:e5:a8:4d:a0:b2:f6:24:ce:7d:12:b2:e5:89:90:
c1:84:f1:0e:19:a6:6e:4c:ef:76:6c:13:11:67:99:
0e:e0:12:74:2b:3f:7d:22:b0:fa:ca:bc:eb:62:67:
eb:2e:90:2e:b3:75:9d:3e:3e:48:b4:77:79:7d:03:
54:1c:04:8e:a6:e1:f1:68:33:62:2e:67:ee:1b:9a:
ee:02:e0:19:79:5c:71:8d:58:3f:46:9d:67:57:31:
32:22:50:0d:50:b7:d0:5b:d0:e2:c3:7f:a7:92:aa:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:47:A3:A3:20:10:3D:24:1B:E3:D4:05:33:77:A4:48:C8:CC:DD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hFlHo6MgED0kG-PUBTN3pEjIzN0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.109.64.0/22
Signature Algorithm: sha256WithRSAEncryption
01:9e:99:28:f3:0b:b9:6e:e4:fb:6d:18:9b:ba:c4:be:20:ed:
11:75:c0:72:86:de:59:1e:5e:f6:07:a3:14:32:4e:8d:bb:7c:
18:42:f5:96:95:6e:62:d8:75:24:f1:bb:0e:de:e3:f7:b5:cd:
a1:37:fc:cc:8f:b7:21:3c:f7:83:00:5b:b1:4a:a6:26:ff:34:
ea:20:3a:d2:87:fa:62:78:8b:bd:6f:c8:f2:1e:a4:3f:3d:be:
1f:8b:4e:b2:2d:19:d5:05:20:5c:a0:cc:c3:57:98:96:ea:5c:
6a:a5:44:ae:b5:48:33:c0:9a:dc:01:3d:89:2b:bc:6a:52:16:
4e:7d:0b:8a:18:63:28:a0:17:20:be:b5:62:1f:04:ad:0b:a2:
55:8e:6a:35:18:fa:86:b6:82:00:e2:35:a7:31:76:d8:79:95:
87:01:fc:f7:b7:01:77:97:c2:6d:a3:68:07:3e:ab:9a:99:70:
25:82:2c:d0:3a:33:e7:60:45:a1:91:9a:f8:60:2c:28:ee:f0:
11:6d:ee:97:8e:23:f0:ba:dd:f0:59:0f:f6:78:ea:3f:fb:06:
5a:9b:3f:60:f5:4c:12:08:69:d5:f5:a6:d6:ff:be:de:65:47:
3d:09:a6:14:f7:fe:ba:46:6c:79:f7:9a:df:ce:85:f6:1a:2f:
11:27:e5:85
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA4MjIw
NTMxNTFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDg0NTk0N0EzQTMyMDEw
M0QyNDFCRTNENDA1MzM3N0E0NDhDOENDREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9oZPDPJuIswHvZSobmoUrcs2M25wqpe1yiGmkA2AiSBjzpca8
tGAo/sne9yh5DljjpzSaiWxt/5Pg2Nk0ss8UTi8OzVP3rok0oy7wMRfkJNOrZOvP
2jM3BenCw07JcULmhjjHJQG0hdn827Gt+DxHOTu5R0UBGiQwCI8V5Duy/hZEWOtJ
UsSkmu48369XI3TUSM+lm+vlqE2gsvYkzn0SsuWJkMGE8Q4Zpm5M73ZsExFnmQ7g
EnQrP30isPrKvOtiZ+sukC6zdZ0+Pki0d3l9A1QcBI6m4fFoM2IuZ+4bmu4C4Bl5
XHGNWD9GnWdXMTIiUA1Qt9Bb0OLDf6eSqiVLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUhFlHo6MgED0kG+PUBTN3pEjIzN0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2hGbEhvNk1nRUQwa0ctUFVCVE4zcEVqSXpOMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxbUAwDQYJKoZIhvcNAQELBQADggEBAAGemSjzC7lu5PttGJu6xL4g7RF1
wHKG3lkeXvYHoxQyTo27fBhC9ZaVbmLYdSTxuw7e4/e1zaE3/MyPtyE894MAW7FK
pib/NOogOtKH+mJ4i71vyPIepD89vh+LTrItGdUFIFygzMNXmJbqXGqlRK61SDPA
mtwBPYkrvGpSFk59C4oYYyigFyC+tWIfBK0LolWOajUY+oa2ggDiNacxdth5lYcB
/Pe3AXeXwm2jaAc+q5qZcCWCLNA6M+dgRaGRmvhgLCju8BFt7peOI/C63fBZD/Z4
6j/7BlqbP2D1TBIIadX1ptb/vt5lRz0JphT3/rpGbHn3mt/OhfYaLxEn5YU=
-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org