Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zLWXXXEqxPE-iWVIyqd0Ss9DXuA.roa
File: zLWXXXEqxPE-iWVIyqd0Ss9DXuA.roa (raw, json)
Hash identifier: s+nUWaSMRYKA/ruIR19flRGPpZj0Nydd8AzLC1ArpWc=
Subject key identifier: CC:B5:97:5D:71:2A:C4:F1:3E:89:65:48:CA:A7:74:4A:CF:43:5E:E0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: EF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zLWXXXEqxPE-iWVIyqd0Ss9DXuA.roa
Signing time: Wed 24 May 2023 16:03:10 +0000
ROA not before: Wed 24 May 2023 16:03:10 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:03:10 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=CCB5975D712AC4F13E896548CAA7744ACF435EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:cb:3d:eb:60:be:5b:56:b2:a6:60:77:62:
8a:cc:7f:83:a0:19:2f:a6:d1:35:ad:db:39:cc:8e:
e6:7e:f7:b5:df:53:b0:af:94:08:37:51:38:b8:dd:
af:37:76:6c:43:99:ad:fe:60:69:bc:de:56:d6:0d:
b8:71:2c:6f:34:9a:5f:b4:98:e6:ca:c9:c9:58:e8:
b5:36:e0:9d:e5:1e:a8:5b:9d:56:ad:ad:cc:69:86:
65:09:a3:08:06:52:cb:8c:9d:4f:c2:09:1f:e2:47:
cf:62:50:3e:a4:e1:01:94:4f:cc:39:b2:b0:b3:5d:
90:6b:52:b6:bf:67:10:4d:58:f9:b6:e3:3d:62:aa:
fe:24:9c:ae:c7:fe:6f:04:11:4c:80:1a:df:1a:3f:
88:1d:be:91:80:51:52:ee:4c:10:ef:0e:f9:cd:59:
da:9c:0c:64:81:1d:66:d8:da:5d:56:5b:16:df:3d:
29:c2:25:f6:fa:9d:39:42:71:cf:1e:04:fd:8d:35:
e5:1b:b4:f9:3d:e0:83:4b:39:13:a4:60:dc:b0:29:
0b:a1:b7:82:de:24:d0:fb:ef:7a:58:49:48:91:e2:
cb:02:11:2b:ed:c4:92:6d:a9:26:fa:0c:53:45:29:
8c:1a:60:41:e6:c9:d1:f2:6b:7d:a2:25:27:6f:0d:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:97:5D:71:2A:C4:F1:3E:89:65:48:CA:A7:74:4A:CF:43:5E:E0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zLWXXXEqxPE-iWVIyqd0Ss9DXuA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.45.0/24
Signature Algorithm: sha256WithRSAEncryption
11:12:3e:21:0b:6a:bd:3d:48:55:59:5d:2a:2a:88:63:4d:94:
d4:a2:d6:dd:d4:4c:62:05:69:31:1e:e7:1a:7a:b0:c9:4c:d9:
86:7b:94:23:53:32:1a:01:2f:a3:a2:5e:db:aa:ff:e1:ae:03:
5d:ef:8e:dc:95:2f:d5:ee:48:b3:61:92:f3:13:d1:1e:01:44:
a6:8b:bd:2e:98:47:9a:44:d3:db:de:e1:00:37:f1:63:23:de:
82:5e:c0:66:2e:ef:17:d1:e5:7d:ac:a4:b8:f8:7a:db:11:d7:
da:0f:55:70:ad:7c:56:11:c4:c1:23:92:74:4b:a9:9a:4e:75:
86:96:d4:7f:ff:74:d0:70:fc:c0:a3:26:a8:6e:e1:0b:22:45:
9d:b2:9e:b9:51:b5:8e:18:9e:57:47:f4:2b:c4:14:2b:63:60:
a3:22:cd:2b:8a:da:e7:78:c3:b7:48:b2:f5:f6:9f:9b:9b:ba:
4a:43:57:33:7c:f2:6a:19:8e:2e:77:c3:34:25:b7:9d:cd:1d:
a0:5f:89:f3:6b:47:72:79:42:d9:19:ab:36:f8:d2:67:90:90:
cd:3e:59:ef:c7:be:bb:64:54:16:2e:9a:b0:40:72:22:d8:57:
fa:44:d9:32:98:95:9a:1b:20:70:01:66:15:14:2b:23:5d:e1:
c4:b9:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org