Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa
File: hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa (raw, json)
Hash identifier: eNkx+ElGkJ+M3FOyKhDztc0Uu3R4yDt+lXgvmmc7Bcc=
Subject key identifier: 84:F4:64:A5:2D:86:55:37:6A:B6:6A:C9:75:12:F8:09:BD:12:57:F5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08F5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa
Signing time: Tue 30 Apr 2024 02:26:35 +0000
ROA not before: Tue 30 Apr 2024 02:26:35 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:26:35 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=84F464A52D8655376AB66AC97512F809BD1257F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:fa:10:7b:75:ef:8f:2f:71:f6:60:8f:b1:
04:27:8e:61:6b:92:b5:28:38:1a:5a:2c:1b:3e:e8:
6f:4d:92:44:86:0f:9d:d7:84:e0:f2:a8:0d:f2:db:
c9:8f:d7:56:4b:a0:b9:3e:28:bb:fb:0d:47:de:bb:
85:fa:1b:25:79:7a:26:ca:7b:9b:62:c4:b1:a1:b0:
1e:15:60:06:f5:db:ac:4b:ed:a5:96:0a:16:f7:60:
d6:33:c9:a8:23:a2:10:9d:f3:2d:c7:0c:e5:e6:0a:
f2:3e:74:70:c2:e1:d0:6a:96:c5:a2:14:24:c4:3b:
34:c9:98:fd:71:1d:8d:64:a3:54:d8:cd:49:60:96:
1c:eb:60:6f:0b:4f:9e:bd:14:46:9f:e9:fb:07:9f:
38:e1:45:81:3e:5b:ea:ef:1d:5b:66:02:5d:f5:8b:
b4:12:d9:78:cd:6a:ee:97:80:65:07:33:ff:7b:0b:
8a:86:a9:63:50:c1:b6:0d:1f:d1:01:dd:96:01:1f:
2c:5c:fc:2a:f1:f0:0a:79:61:94:da:3a:3a:e2:43:
c7:40:71:7e:ea:2b:7b:f2:41:d6:c6:a9:f8:a8:67:
9f:9d:9e:5f:9a:16:35:71:e7:77:82:47:dc:a8:39:
97:70:9f:cc:c8:8e:c5:e6:b2:4a:13:9b:d9:e8:95:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:64:A5:2D:86:55:37:6A:B6:6A:C9:75:12:F8:09:BD:12:57:F5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hPRkpS2GVTdqtmrJdRL4Cb0SV_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e6:f5:cd:73:c4:69:f1:30:eb:c7:b9:78:96:6e:9f:fd:8d:
9e:c8:68:90:7e:98:24:d8:04:bd:95:3d:08:b8:ae:02:be:83:
da:c4:45:1d:e8:37:78:a5:c7:4b:ec:ed:cb:49:02:37:11:79:
da:41:52:78:5e:7b:b3:01:45:06:d9:97:36:b1:c8:35:76:ec:
6f:14:f5:21:f6:d2:5d:11:1b:5c:63:e4:18:6f:e2:90:1c:2b:
cb:8e:2e:b2:34:ab:67:64:cf:48:d0:b8:74:69:0c:53:3a:bc:
eb:c6:c4:bf:e4:fe:18:ac:71:aa:72:15:ca:a8:a7:21:fd:4f:
93:ac:58:83:48:de:6d:16:d4:61:f3:ce:53:d8:7c:57:a9:c7:
16:d2:6a:34:56:f6:d4:77:bd:bc:46:9e:92:51:01:1a:ad:24:
68:a1:52:7c:1c:20:8e:22:db:70:2f:09:50:6a:b0:dd:9a:7d:
72:e4:05:5d:8e:5a:da:37:40:13:04:ec:da:d3:1c:8d:30:db:
a0:9a:ac:b3:26:77:bb:b5:49:92:95:62:1a:90:87:24:09:d7:
da:ee:c5:ba:5a:4d:e2:3e:79:5b:7d:97:61:5d:57:b1:14:29:
93:ad:2f:ce:ff:72:ed:af:fd:88:b6:b6:33:dd:6c:0d:3a:9a:
92:26:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 05:42:37 2025 by rpki-client on console.sobornost.net