Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OOL05ZboJxRA_IY27eVIyOrouhc.roa
File: OOL05ZboJxRA_IY27eVIyOrouhc.roa (raw, json)
Hash identifier: uFrHVu+UTv2m72diJamIE2MKkNktvAvfKd2O5dUQ+tM=
Subject key identifier: 38:E2:F4:E5:96:E8:27:14:40:FC:86:36:ED:E5:48:C8:EA:E8:BA:17
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: AE
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OOL05ZboJxRA_IY27eVIyOrouhc.roa
Signing time: Wed 04 Dec 2024 19:35:01 +0000
ROA not before: Wed 04 Dec 2024 19:35:01 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.152/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 04 Apr 2025 17:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:35:01 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=38E2F4E596E8271440FC8636EDE548C8EAE8BA17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:45:f4:ba:8d:95:17:0b:15:be:13:4f:90:
8a:d2:b8:01:63:f3:8b:5e:f2:60:8d:8d:9a:fe:8e:
63:76:0c:51:a0:a2:9f:96:9b:b9:7c:50:6e:56:44:
b4:46:95:4e:af:56:e2:b5:c4:d6:65:43:b0:2a:d5:
0e:85:b5:81:89:ac:b1:92:16:58:bb:28:6b:44:0b:
7f:81:66:ce:51:da:c3:b3:92:7e:a7:7c:be:b7:cc:
06:b8:a3:62:15:ba:4c:66:fc:b1:da:7c:36:5f:d2:
f3:83:44:43:d5:9d:de:89:e4:ee:c9:33:69:86:ed:
d0:78:12:6b:a9:08:25:30:6e:5d:46:4e:43:a4:fd:
ce:09:3e:e6:1c:4f:0c:78:30:d9:ef:d4:21:78:7d:
de:17:03:4f:c0:30:49:0b:d2:03:fc:c8:99:03:69:
d8:63:11:d1:fb:21:8c:1a:ec:3a:57:6b:d2:6d:97:
88:0e:9b:94:04:bb:bd:5f:b7:55:6b:1a:7a:b4:69:
49:42:4b:18:8c:a8:a6:aa:fd:1c:06:54:96:da:0b:
2f:fe:2b:0f:0b:be:46:95:85:b6:94:2a:68:2a:32:
95:68:4b:37:58:f3:81:5b:ce:6d:5d:06:85:f1:29:
22:9b:ea:2a:14:37:ff:58:7a:c6:c5:4f:e5:6b:91:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:F4:E5:96:E8:27:14:40:FC:86:36:ED:E5:48:C8:EA:E8:BA:17
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/OOL05ZboJxRA_IY27eVIyOrouhc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.152/29
Signature Algorithm: sha256WithRSAEncryption
96:50:ad:4a:1f:ba:96:70:72:3b:98:af:8a:13:6d:00:f2:60:
42:c3:4d:f0:d8:19:c1:d0:9d:fb:b9:71:78:36:58:3d:e4:72:
48:b2:2f:f9:3f:02:d0:71:59:e2:5c:cf:0e:4e:03:f3:11:8f:
a7:a9:ef:94:68:fc:0b:a7:d0:5c:51:d9:56:d9:56:df:fe:fd:
17:de:98:bc:2c:e4:9f:db:32:e8:34:10:47:9f:1d:f9:ca:02:
cf:e5:44:95:2e:01:3b:b2:e5:bc:1a:55:50:fb:54:92:d9:ca:
bd:14:e5:ce:79:f7:69:1a:79:a1:49:be:05:62:a2:54:7d:76:
bc:9a:68:8b:d1:c5:7f:45:08:7c:d7:6c:ac:8b:d9:05:43:49:
8f:df:56:a9:7f:6f:f8:50:38:88:9e:80:6f:0c:6a:56:4c:be:
07:ef:8d:45:13:05:4e:0d:c2:b8:b8:29:db:95:80:4f:62:7e:
b2:ba:80:db:c8:44:33:1d:54:b7:8a:72:42:62:8a:2b:7b:b5:
37:db:1f:5e:3f:5a:5f:5b:06:07:11:a2:ee:f1:75:1e:e2:af:
4a:cc:a2:03:f6:27:86:db:09:7d:1a:f3:3a:68:a6:ca:21:04:
14:ac:f9:f7:97:90:95:81:6c:d7:b1:cd:7b:d0:30:a2:a8:b3:
8f:05:5d:b8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx
OTM1MDFaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM4RTJGNEU1OTZFODI3
MTQ0MEZDODYzNkVERTU0OEM4RUFFOEJBMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsaUX0uo2VFwsVvhNPkIrSuAFj84te8mCNjZr+jmN2DFGgop+W
m7l8UG5WRLRGlU6vVuK1xNZlQ7Aq1Q6FtYGJrLGSFli7KGtEC3+BZs5R2sOzkn6n
fL63zAa4o2IVukxm/LHafDZf0vODREPVnd6J5O7JM2mG7dB4EmupCCUwbl1GTkOk
/c4JPuYcTwx4MNnv1CF4fd4XA0/AMEkL0gP8yJkDadhjEdH7IYwa7DpXa9Jtl4gO
m5QEu71ft1VrGnq0aUlCSxiMqKaq/RwGVJbaCy/+Kw8LvkaVhbaUKmgqMpVoSzdY
84Fbzm1dBoXxKSKb6ioUN/9YesbFT+VrkUZ5AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUOOL05ZboJxRA/IY27eVIyOrouhcwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9PT0wwNVpib0p4UkFfSVkyN2VWSXlPcm91aGMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUDPdWsmDANBgkqhkiG9w0BAQsFAAOCAQEAllCtSh+6lnByO5ivihNt
APJgQsNN8NgZwdCd+7lxeDZYPeRySLIv+T8C0HFZ4lzPDk4D8xGPp6nvlGj8C6fQ
XFHZVtlW3/79F96YvCzkn9sy6DQQR58d+coCz+VElS4BO7LlvBpVUPtUktnKvRTl
znn3aRp5oUm+BWKiVH12vJpoi9HFf0UIfNdsrIvZBUNJj99WqX9v+FA4iJ6Abwxq
Vky+B++NRRMFTg3CuLgp25WAT2J+srqA28hEMx1Ut4pyQmKKK3u1N9sfXj9aX1sG
BxGi7vF1HuKvSsyiA/YnhtsJfRrzOmimyiEEFKz595eQlYFs17HNe9AwoqizjwVd
uA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:43:22 2025 by rpki-client