Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/pptLgrWfXnSrCGml1j-iFZnf80A.roa
File: pptLgrWfXnSrCGml1j-iFZnf80A.roa (raw, json)
Hash identifier: YtRrjpExqTPWMZLGGSP5hCK+SbuynfHK/58UguiQywI=
Subject key identifier: A6:9B:4B:82:B5:9F:5E:74:AB:08:69:A5:D6:3F:A2:15:99:DF:F3:40
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pptLgrWfXnSrCGml1j-iFZnf80A.roa
Signing time: Tue 21 Mar 2023 16:03:07 +0000
ROA not before: Tue 21 Mar 2023 16:03:07 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 21 16:03:07 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A69B4B82B59F5E74AB0869A5D63FA21599DFF340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:8a:64:97:6f:dd:5a:88:ab:1e:d9:1e:ba:
95:87:fd:e3:17:ad:36:7d:d8:fb:3a:f7:5f:b3:92:
44:48:d9:5a:1b:69:1b:bb:34:45:1f:17:42:46:f6:
31:ec:f7:7c:bf:0c:2c:43:fa:fd:2d:54:9d:59:e8:
e0:e6:6a:f9:55:98:db:e8:77:96:77:95:c1:ee:87:
5a:b0:82:fc:a5:c7:80:68:ff:ce:cf:30:b9:a3:19:
cd:d8:eb:24:a7:9f:4d:c9:91:cf:24:02:08:1f:73:
b5:b0:89:86:72:c7:7a:e4:02:e3:9d:53:61:80:a5:
d4:af:29:98:e6:31:b6:a2:35:d5:2e:3c:a0:ed:93:
cd:99:3f:8f:eb:80:f3:4b:79:d3:ec:aa:f9:42:d5:
e1:d6:45:0b:f0:cc:05:90:74:40:92:3a:8b:04:8b:
6c:f3:e1:e9:89:eb:55:2c:f0:78:7e:3d:8c:49:58:
d6:ce:ee:22:46:96:5c:77:23:2f:79:c4:de:2e:00:
83:50:ff:55:b7:af:21:68:48:35:6c:d9:af:00:e4:
82:88:de:36:bb:a0:74:3b:66:c8:af:d1:82:36:3b:
ba:f8:ea:e6:1b:e3:90:a9:79:f0:fd:12:f2:5a:69:
a7:d0:31:d0:af:92:1f:40:32:3f:65:f5:b0:b8:a9:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:4B:82:B5:9F:5E:74:AB:08:69:A5:D6:3F:A2:15:99:DF:F3:40
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/pptLgrWfXnSrCGml1j-iFZnf80A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8d:08:6b:12:c5:54:f7:ce:86:52:aa:0b:25:ec:01:9a:17:
d1:5e:fa:cb:e9:a5:9c:c4:50:36:48:a5:75:cc:ec:15:27:d9:
a8:a4:47:58:d9:dd:af:1f:b8:e7:60:cd:b5:ae:70:0a:41:0e:
bb:fb:5f:9f:1c:cd:7d:07:e9:2b:34:56:a1:ea:1c:07:3f:d0:
57:a1:82:9d:46:67:0e:ab:91:7b:85:2a:0a:16:14:c9:8b:80:
a1:5e:22:a3:3c:53:58:43:a0:20:27:ca:3f:0f:1f:22:40:c9:
95:00:4a:ca:fd:8e:d6:11:f4:44:28:a8:14:4c:a9:e9:21:ac:
1c:65:8c:c7:3d:e7:09:e0:a3:d8:71:f1:37:2e:42:a7:e0:78:
5f:7f:7a:e5:dc:53:36:ab:10:c6:a1:af:6d:e2:23:ba:35:9c:
1c:a4:0d:0c:37:22:0c:7c:24:3a:de:90:49:25:4f:5b:e7:75:
cd:11:2e:56:31:d7:ad:ae:16:3a:f1:a2:16:c9:aa:47:39:9d:
ac:9a:15:54:d7:ab:92:42:b8:17:90:29:a5:bc:ba:d5:48:52:
bf:d4:8b:82:01:8e:d7:12:40:e2:04:ce:df:1b:f1:7f:cd:2f:
9f:e5:71:61:ab:94:92:ad:a7:3e:78:7b:ec:ea:8d:ff:af:aa:
f1:7b:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org