Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa
File: tPksw-VeykuYNOWoqOfoncxi8jQ.roa (raw, json)
Hash identifier: NwNcUlUBVLyUjGgtHgHZ9sT/8QsElkfYU+RHDOb9aFY=
Subject key identifier: B4:F9:2C:C3:E5:5E:CA:4B:98:34:E5:A8:A8:E7:E8:9D:CC:62:F2:34
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 061C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa
Signing time: Thu 29 Feb 2024 01:38:34 +0000
ROA not before: Thu 29 Feb 2024 01:38:34 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 18 Sep 2024 03:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:38:34 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=B4F92CC3E55ECA4B9834E5A8A8E7E89DCC62F234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:e9:fd:7b:70:02:99:7a:4b:8a:29:b4:75:
63:71:49:bc:23:1e:1e:50:27:08:cc:d0:a1:d9:a6:
85:df:f0:24:d7:9b:94:a8:ef:56:bd:bf:3b:a8:61:
47:49:fd:1c:3c:5c:b4:52:9e:b3:fc:0e:aa:5b:07:
65:49:d6:51:9a:cb:68:51:25:4c:21:d8:36:99:d3:
42:52:29:8d:9b:64:e7:63:f9:51:53:57:32:2e:c8:
b0:7d:bb:02:33:c5:70:af:77:c5:ff:1c:45:98:e2:
63:6c:8d:0b:61:8d:b1:ca:98:4d:dc:ff:b2:db:7e:
9f:dc:3b:37:91:02:07:b8:fc:db:db:7f:c9:fe:be:
ce:f5:b5:c4:aa:b2:1e:ec:27:0a:b9:8f:d1:6b:c7:
e5:2d:b7:fb:98:74:07:27:a2:8c:06:72:d5:d0:79:
2a:5c:e8:31:c9:17:d3:9f:b4:49:19:08:ae:a6:b1:
e0:32:6b:81:07:55:44:c0:24:e0:52:32:4b:86:13:
d2:2e:25:a0:0b:8c:56:33:b4:0a:b9:06:72:41:45:
a2:5c:ad:73:eb:83:02:78:fd:84:1f:cf:68:37:90:
c2:46:1a:e7:80:f9:a3:c5:b7:b2:13:c9:52:7a:2c:
09:6c:34:d6:07:0b:8b:c8:75:53:db:7a:97:a7:df:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:2C:C3:E5:5E:CA:4B:98:34:E5:A8:A8:E7:E8:9D:CC:62:F2:34
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tPksw-VeykuYNOWoqOfoncxi8jQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:31:d4:98:94:c3:67:26:69:23:d9:a0:10:44:2f:f3:ee:84:
bc:27:41:aa:20:7c:bb:2a:81:9c:1e:8b:38:73:9d:5e:ed:d8:
d6:86:2c:b4:4a:3e:fb:88:75:3a:8c:42:d8:33:47:28:d5:c3:
1f:d7:3f:6d:5f:36:51:79:70:fb:d6:79:f0:94:2e:7e:b9:2f:
b9:dd:b5:eb:43:8d:ca:0f:21:12:94:c2:ae:42:e2:4a:82:45:
de:ea:d1:e4:00:08:36:fc:c6:65:24:91:d1:2b:3f:bc:32:8f:
34:83:f3:15:39:90:51:d3:a1:64:95:25:41:77:1d:9c:c5:d0:
c2:f6:a3:85:f3:77:7e:55:05:49:57:29:7a:56:3a:57:68:2e:
45:6e:5e:9d:55:1f:6e:86:10:9c:d9:e3:e7:9c:ea:b0:6e:34:
50:21:36:b5:74:2b:9b:29:a9:42:27:9a:58:10:41:f6:00:ca:
a6:60:b1:43:69:50:98:7d:ad:4b:38:63:d2:d0:f5:51:12:6a:
f9:a7:88:53:a1:d2:80:f1:f7:be:af:71:eb:0a:6a:0f:43:98:
2a:13:fe:fd:52:73:b3:41:11:51:4e:fc:24:52:10:2c:24:a8:
2f:5e:25:f2:25:90:0f:52:a0:4c:62:2f:d3:a8:03:2a:be:be:
37:a6:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:56 2025 by rpki-client