Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n1Sk413L1Qj2-QiTZKTZ1GdgqhI.roa
File: n1Sk413L1Qj2-QiTZKTZ1GdgqhI.roa (raw, json)
Hash identifier: e22MBy4fYcKm849bKQxfibVTJRxBMtwIIrL0Z4MoQuE=
Subject key identifier: 9F:54:A4:E3:5D:CB:D5:08:F6:F9:08:93:64:A4:D9:D4:67:60:AA:12
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02CF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n1Sk413L1Qj2-QiTZKTZ1GdgqhI.roa
Signing time: Tue 30 May 2023 17:18:22 +0000
ROA not before: Tue 30 May 2023 17:18:22 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:18:22 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=9F54A4E35DCBD508F6F9089364A4D9D46760AA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:44:a5:ca:33:fc:2e:18:84:51:06:06:a3:
d8:3e:dc:cc:2f:1f:02:59:e9:7a:ca:a9:46:43:79:
b9:eb:18:c3:a7:33:ac:a5:16:0d:4c:c2:4e:48:ce:
fe:03:d7:99:73:65:c0:12:e4:ff:50:ee:39:2c:86:
6a:81:26:20:87:ba:14:5f:f3:a4:e4:d3:3d:e7:fa:
c8:3e:98:88:1a:6b:dc:51:e5:f9:c6:68:16:ae:d3:
e7:6e:c8:74:b3:8b:e5:71:fd:ee:e1:21:74:03:1e:
e8:ec:4c:c4:ec:f9:4f:b0:e7:5e:a3:8f:86:a5:d2:
c9:f1:10:09:a8:97:44:8e:28:05:c7:60:43:b6:74:
4b:2b:17:f9:85:bd:49:da:da:76:fb:46:7d:7f:1a:
51:9e:e2:6e:56:49:80:4d:a3:1a:e4:71:08:47:cc:
a5:39:e4:84:41:5e:77:e0:6e:ff:7c:a2:1b:12:bb:
84:af:30:d8:15:ea:a3:6e:d2:2b:7a:20:28:ee:a6:
cc:1e:5f:b5:7a:a5:d5:5d:08:67:f5:fd:3c:d1:8d:
bd:78:81:02:93:33:38:24:b0:a6:3b:d1:95:76:bc:
2c:c1:0d:0b:7c:bc:96:ff:fe:db:d4:15:ce:c5:b5:
c4:f6:36:a1:46:1b:c5:f3:ed:6e:19:87:da:e3:a6:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:A4:E3:5D:CB:D5:08:F6:F9:08:93:64:A4:D9:D4:67:60:AA:12
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n1Sk413L1Qj2-QiTZKTZ1GdgqhI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:cf:c6:6c:6b:74:8a:bc:77:b2:39:49:d3:dc:8d:21:1a:24:
75:51:18:c4:83:4a:53:49:5d:d2:83:a0:bb:b1:8f:93:77:e4:
92:1c:8e:12:68:4d:12:a7:a9:e9:30:a7:5f:87:b2:db:80:42:
b5:06:e6:40:b4:95:b4:05:44:15:37:f1:f0:ed:5f:c1:91:a3:
af:42:97:c4:e4:12:1a:f7:56:85:79:98:0e:64:1d:30:cf:78:
e9:4d:e1:96:db:85:95:ef:76:e1:6d:9a:6b:76:14:f8:a9:4c:
85:13:12:ae:07:24:46:6e:76:c8:d6:fb:43:19:f9:44:73:37:
fa:32:ec:0a:c7:52:b6:d9:59:cd:ec:41:35:b9:c3:19:1f:e1:
e8:0d:16:b9:73:03:16:45:08:07:4a:5c:ec:06:f9:ad:02:fc:
ae:fb:c5:3d:ba:7a:8c:5e:c9:4a:57:78:be:9e:3e:45:4b:18:
73:51:44:6c:e6:2c:f2:7e:d5:e3:90:88:4f:9b:ed:05:72:6d:
03:cf:7e:f2:d2:e1:49:cd:87:8c:e9:91:cb:b3:e6:e8:cb:9d:
81:de:52:19:d7:c5:06:76:c0:0e:7c:e4:c3:21:a4:27:7d:d7:
c4:dc:ec:fe:cf:91:2f:72:bf:e9:95:43:b3:bb:f0:db:24:ae:
57:a6:81:3e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NzE4MjJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDlGNTRBNEUzNURDQkQ1
MDhGNkY5MDg5MzY0QTREOUQ0Njc2MEFBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRdESlyjP8LhiEUQYGo9g+3MwvHwJZ6XrKqUZDebnrGMOnM6yl
Fg1Mwk5Izv4D15lzZcAS5P9Q7jkshmqBJiCHuhRf86Tk0z3n+sg+mIgaa9xR5fnG
aBau0+duyHSzi+Vx/e7hIXQDHujsTMTs+U+w516jj4al0snxEAmol0SOKAXHYEO2
dEsrF/mFvUna2nb7Rn1/GlGe4m5WSYBNoxrkcQhHzKU55IRBXnfgbv98ohsSu4Sv
MNgV6qNu0it6ICjupsweX7V6pdVdCGf1/TzRjb14gQKTMzgksKY70ZV2vCzBDQt8
vJb//tvUFc7FtcT2NqFGG8Xz7W4Zh9rjpqrTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUn1Sk413L1Qj2+QiTZKTZ1GdgqhIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L24xU2s0MTNMMVFqMi1RaVRaS1RaMUdkZ3FoSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQxavAwDQYJKoZIhvcNAQELBQADggEBAArPxmxrdIq8d7I5SdPcjSEaJHVR
GMSDSlNJXdKDoLuxj5N35JIcjhJoTRKnqekwp1+HstuAQrUG5kC0lbQFRBU38fDt
X8GRo69Cl8TkEhr3VoV5mA5kHTDPeOlN4ZbbhZXvduFtmmt2FPipTIUTEq4HJEZu
dsjW+0MZ+URzN/oy7ArHUrbZWc3sQTW5wxkf4egNFrlzAxZFCAdKXOwG+a0C/K77
xT26eoxeyUpXeL6ePkVLGHNRRGzmLPJ+1eOQiE+b7QVybQPPfvLS4UnNh4zpkcuz
5ujLnYHeUhnXxQZ2wA585MMhpCd918Tc7P7PkS9yv+mVQ7O78NskrlemgT4=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org