Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lxXZathEGIFSlq58R1zmS8052WU.roa
File: lxXZathEGIFSlq58R1zmS8052WU.roa (raw, json)
Hash identifier: 2+ulBY5wsL1F+PfbnwtkL3eeMQ9YluWI7en3FmWEURs=
Subject key identifier: 97:15:D9:6A:D8:44:18:81:52:96:AE:7C:47:5C:E6:4B:CD:39:D9:65
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: A4
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lxXZathEGIFSlq58R1zmS8052WU.roa
Signing time: Wed 04 Dec 2024 19:31:02 +0000
ROA not before: Wed 04 Dec 2024 19:31:02 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.64/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 04 Apr 2025 17:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:31:02 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=9715D96AD84418815296AE7C475CE64BCD39D965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:cd:3c:db:39:4b:1e:61:da:d3:56:21:d0:
fa:59:32:75:49:eb:83:44:ed:58:4c:44:dc:e6:30:
dd:e0:31:4e:17:af:69:2e:4e:1c:bb:2e:ae:04:5d:
b9:0c:71:08:c2:a5:a8:e6:34:5e:d2:93:28:ff:0c:
23:99:74:f1:de:e5:99:17:ab:02:c1:65:c1:cd:7f:
e9:3d:c4:3f:5c:b6:9b:8e:47:ff:53:b8:8a:e4:80:
89:55:84:b4:01:d1:49:bb:a6:5a:74:e3:cf:15:4b:
a2:a1:cb:e3:0e:b1:d9:8b:17:d6:b0:bc:11:3a:cb:
37:77:4a:23:a8:80:6c:41:f6:aa:9c:b9:2a:b5:59:
c9:02:84:13:0e:c1:4e:c1:67:4b:9d:5f:bc:fb:f3:
c5:74:90:ac:e5:93:60:60:f8:c0:a1:17:ea:9d:2a:
cc:a5:8e:d0:c6:7b:eb:35:55:ce:0a:12:9b:10:6b:
4e:c5:2d:c4:8a:bf:b5:64:c8:55:ae:71:8b:88:9e:
b3:db:5a:8f:6f:04:19:8f:8e:e6:ca:c1:7e:ed:0f:
16:74:ea:c9:c9:a3:51:cb:5b:c4:56:88:9a:68:05:
9f:e6:de:c1:2d:b9:dc:04:90:90:04:24:92:bf:7d:
3a:1a:06:93:f2:ad:99:39:39:69:d8:53:b5:b4:a4:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:D9:6A:D8:44:18:81:52:96:AE:7C:47:5C:E6:4B:CD:39:D9:65
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/lxXZathEGIFSlq58R1zmS8052WU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.64/29
Signature Algorithm: sha256WithRSAEncryption
13:3a:ad:a3:bf:91:45:2a:47:78:51:39:db:1c:1f:4a:b4:16:
14:ea:20:9d:21:ea:74:db:c0:ab:ac:01:0e:74:60:9a:b7:54:
1e:7e:82:a9:84:27:ca:86:5a:ed:5c:2c:da:7b:d6:2c:86:c1:
7a:f9:91:ae:38:de:c8:70:0d:32:86:92:46:b1:fa:81:58:f0:
9f:ef:99:58:af:98:67:9d:ef:ff:bf:8d:20:d0:8d:5a:c1:58:
d9:3f:86:ca:c6:27:20:ac:ba:f2:10:bc:0a:1f:00:cc:95:43:
d3:e8:47:04:13:71:94:be:b9:bb:ad:83:82:07:94:52:2a:b5:
22:4d:fa:9e:92:92:8b:6e:3b:1c:ae:61:02:18:18:3d:0c:d5:
27:03:c3:9c:6e:8c:55:8d:39:0d:87:07:41:71:db:22:20:a7:
59:52:8c:00:a6:35:26:c1:b1:10:0f:0f:ac:b8:64:77:36:4f:
02:8c:4a:67:b2:2d:3c:c2:e9:29:90:db:4e:eb:9a:4d:c6:53:
c2:f7:9e:b4:5f:62:78:e4:96:0e:c7:e2:12:c2:8d:9c:7e:8e:
42:c7:8e:61:95:73:64:1b:a9:06:0b:d9:13:41:29:1e:f9:13:
49:ec:03:3a:3e:b5:f7:9b:6e:fd:cb:e9:79:8d:73:24:7f:26:
66:64:5c:2c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNDEyMDQx
OTMxMDJaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk3MTVEOTZBRDg0NDE4
ODE1Mjk2QUU3QzQ3NUNFNjRCQ0QzOUQ5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUhc082zlLHmHa01Yh0PpZMnVJ64NE7VhMRNzmMN3gMU4Xr2ku
Thy7Lq4EXbkMcQjCpajmNF7Skyj/DCOZdPHe5ZkXqwLBZcHNf+k9xD9ctpuOR/9T
uIrkgIlVhLQB0Um7plp0488VS6Khy+MOsdmLF9awvBE6yzd3SiOogGxB9qqcuSq1
WckChBMOwU7BZ0udX7z788V0kKzlk2Bg+MChF+qdKsyljtDGe+s1Vc4KEpsQa07F
LcSKv7VkyFWucYuInrPbWo9vBBmPjubKwX7tDxZ06snJo1HLW8RWiJpoBZ/m3sEt
udwEkJAEJJK/fToaBpPyrZk5OWnYU7W0pBhDAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUlxXZathEGIFSlq58R1zmS8052WUwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDEyOC9seFhaYXRoRUdJRlNscTU4UjF6bVM4MDUyV1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUDPdWsQDANBgkqhkiG9w0BAQsFAAOCAQEAEzqto7+RRSpHeFE52xwf
SrQWFOognSHqdNvAq6wBDnRgmrdUHn6CqYQnyoZa7Vws2nvWLIbBevmRrjjeyHAN
MoaSRrH6gVjwn++ZWK+YZ53v/7+NINCNWsFY2T+GysYnIKy68hC8Ch8AzJVD0+hH
BBNxlL65u62DggeUUiq1Ik36npKSi247HK5hAhgYPQzVJwPDnG6MVY05DYcHQXHb
IiCnWVKMAKY1JsGxEA8PrLhkdzZPAoxKZ7ItPMLpKZDbTuuaTcZTwveetF9ieOSW
DsfiEsKNnH6OQseOYZVzZBupBgvZE0EpHvkTSewDOj6195tu/cvpeY1zJH8mZmRc
LA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:36:00 2025 by rpki-client