Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w46e4aurRosNwWD-0zuMxbmDg9w.roa
File: w46e4aurRosNwWD-0zuMxbmDg9w.roa (raw, json)
Hash identifier: iYt9BBte22bEDoH92Fk/dsCJJuGADuNAC3DWo9VVOjc=
Subject key identifier: C3:8E:9E:E1:AB:AB:46:8B:0D:C1:60:FE:D3:3B:8C:C5:B9:83:83:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w46e4aurRosNwWD-0zuMxbmDg9w.roa
Signing time: Wed 29 Mar 2023 16:05:51 +0000
ROA not before: Wed 29 Mar 2023 16:05:51 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:05:51 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=C38E9EE1ABAB468B0DC160FED33B8CC5B98383DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:96:be:78:bd:ed:30:f7:07:97:a6:49:fb:
37:16:c2:11:4d:76:d8:17:7f:e1:6d:31:af:e5:9d:
67:c2:20:38:f5:85:b1:31:8a:a7:87:6b:e9:be:19:
e6:d5:a5:2b:cb:b8:d5:3c:25:97:86:cc:56:2d:45:
29:17:6f:b2:b5:85:b3:50:d7:96:a9:50:f0:79:21:
96:22:7b:ce:97:ac:a8:c0:4b:d3:f6:f7:1f:31:69:
fa:80:4d:6e:fa:ab:a2:e1:ba:db:47:e8:07:2c:d1:
fd:cc:fa:d6:fd:11:db:52:15:f1:97:6d:d7:81:88:
5f:22:05:2a:89:36:cb:37:ea:70:66:da:0f:03:9c:
0d:dc:f2:20:29:af:5b:ae:69:92:a8:fd:f9:14:ae:
f9:29:ea:b3:11:02:c6:85:71:d8:80:e0:a9:61:39:
cb:90:09:1c:b2:aa:5e:a8:21:3c:41:50:af:2c:06:
f4:61:2e:47:70:f5:48:06:c0:c0:39:fb:ca:ab:c6:
9e:87:a7:34:31:a4:bd:3e:c1:7b:f9:e7:44:69:1a:
61:94:60:e3:c2:86:fe:1b:dd:d3:bc:6c:4b:35:8a:
56:8e:31:b5:35:c8:ae:33:41:53:6f:04:f3:14:26:
8a:36:d9:5d:5f:db:8b:71:d4:da:74:3f:79:d7:9e:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:9E:E1:AB:AB:46:8B:0D:C1:60:FE:D3:3B:8C:C5:B9:83:83:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w46e4aurRosNwWD-0zuMxbmDg9w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7d:8d:5a:c1:12:da:72:b6:60:8f:41:97:1a:49:4a:05:db:
2a:b1:53:a5:78:8b:06:35:56:0f:ee:e3:c9:dd:91:fc:f1:04:
95:de:da:ef:74:3d:46:e3:ac:e1:79:df:85:fa:28:21:9d:2e:
27:f7:18:22:42:fd:59:54:4e:84:ee:ab:4f:44:e7:20:9f:78:
ed:e7:10:50:9f:69:44:6b:77:cf:17:94:d3:bc:09:c3:9f:4b:
57:01:16:03:b6:5b:d4:74:fa:c8:d5:0d:a6:72:29:af:4c:67:
de:27:bd:a7:93:86:f6:fe:1a:23:6d:32:ac:a8:21:ae:6d:40:
87:fd:36:37:cc:9f:36:ce:70:be:04:f8:1d:33:68:53:1c:c4:
67:4c:b2:a5:5e:fd:5c:6a:05:d0:e2:86:42:5b:f3:2a:eb:eb:
e8:03:bb:af:c7:80:00:3e:b1:3b:31:4e:af:70:31:77:59:8c:
08:6f:04:56:5f:24:91:c7:c6:85:6a:df:8b:75:4d:bb:91:0c:
e8:90:64:b1:3b:48:5e:3d:f8:8c:8b:36:35:0b:35:c4:0a:b9:
29:1f:ed:10:1e:fb:09:93:f8:3e:7c:4d:f1:21:5e:64:b5:bd:
39:0e:e3:55:a1:36:fc:82:9c:b1:7e:65:f2:80:56:c0:d5:d4:
b5:cb:65:b4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1NTFaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMzOEU5RUUxQUJBQjQ2
OEIwREMxNjBGRUQzM0I4Q0M1Qjk4MzgzREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeQZa+eL3tMPcHl6ZJ+zcWwhFNdtgXf+FtMa/lnWfCIDj1hbEx
iqeHa+m+GebVpSvLuNU8JZeGzFYtRSkXb7K1hbNQ15apUPB5IZYie86XrKjAS9P2
9x8xafqATW76q6LhuttH6Acs0f3M+tb9EdtSFfGXbdeBiF8iBSqJNss36nBm2g8D
nA3c8iApr1uuaZKo/fkUrvkp6rMRAsaFcdiA4KlhOcuQCRyyql6oITxBUK8sBvRh
Lkdw9UgGwMA5+8qrxp6HpzQxpL0+wXv550RpGmGUYOPChv4b3dO8bEs1ilaOMbU1
yK4zQVNvBPMUJoo22V1f24tx1Np0P3nXntylAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUw46e4aurRosNwWD+0zuMxbmDg9wwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3c0NmU0YXVyUm9zTndXRC0wenVNeGJtRGc5dy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYPQwDQYJKoZIhvcNAQELBQADggEBAB19jVrBEtpytmCPQZcaSUoF2yqx
U6V4iwY1Vg/u48ndkfzxBJXe2u90PUbjrOF534X6KCGdLif3GCJC/VlUToTuq09E
5yCfeO3nEFCfaURrd88XlNO8CcOfS1cBFgO2W9R0+sjVDaZyKa9MZ94nvaeThvb+
GiNtMqyoIa5tQIf9NjfMnzbOcL4E+B0zaFMcxGdMsqVe/VxqBdDihkJb8yrr6+gD
u6/HgAA+sTsxTq9wMXdZjAhvBFZfJJHHxoVq34t1TbuRDOiQZLE7SF49+IyLNjUL
NcQKuSkf7RAe+wmT+D58TfEhXmS1vTkO41WhNvyCnLF+ZfKAVsDV1LXLZbQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org