Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBR3OU-z5YztlHSpjtSbzfWXv_w.roa
File: KBR3OU-z5YztlHSpjtSbzfWXv_w.roa (raw, json)
Hash identifier: UD7AR1jiW/HF7ySoFKc/CBeGZjd3JHAad02AIIXcJ68=
Subject key identifier: 28:14:77:39:4F:B3:E5:8C:ED:94:74:A9:8E:D4:9B:CD:F5:97:BF:FC
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0359
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBR3OU-z5YztlHSpjtSbzfWXv_w.roa
Signing time: Tue 30 Apr 2024 01:56:53 +0000
ROA not before: Tue 30 Apr 2024 01:56:53 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:d600::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:56:53 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=281477394FB3E58CED9474A98ED49BCDF597BFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:33:ad:7a:a8:ef:7d:1f:d6:fd:e4:ef:bd:d2:
95:ba:00:d8:64:08:4d:05:41:87:ab:55:21:8c:c4:
0c:91:f9:ff:2b:f6:71:20:83:b7:72:df:8c:3b:37:
86:ca:9d:09:83:f3:58:37:2e:07:70:af:64:4e:dd:
4b:53:e3:d0:f7:34:de:18:71:5c:93:b3:1a:68:40:
23:72:cf:fd:42:7e:5d:22:36:51:e2:ce:ca:95:e6:
d7:7b:41:14:36:22:50:ec:d9:f1:f7:23:6e:bd:f6:
5b:89:ed:2b:8b:b9:ce:96:10:6a:9d:9e:9d:97:c5:
f3:99:b2:83:c7:65:70:35:23:8b:f1:26:4c:63:ca:
3a:3d:00:a4:09:e4:ee:92:51:45:eb:99:cc:5b:36:
96:89:02:52:e6:6c:52:c5:5e:78:5e:dc:16:09:31:
09:ba:17:d0:9b:9f:7f:2a:f4:00:47:25:99:a8:bd:
34:79:c9:fa:0b:3b:cd:96:92:50:b4:2b:4e:12:29:
f6:ed:b1:d6:fa:8e:91:b3:c5:c6:aa:54:0b:ae:b7:
52:32:5e:7d:a4:b0:c4:30:78:f7:a5:6e:70:27:4a:
25:38:6d:8b:6f:41:da:5e:0e:23:9d:ad:a9:32:68:
1e:9c:d3:64:05:ef:60:0f:fa:22:42:9e:53:a8:80:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:77:39:4F:B3:E5:8C:ED:94:74:A9:8E:D4:9B:CD:F5:97:BF:FC
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBR3OU-z5YztlHSpjtSbzfWXv_w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:d600::/40
Signature Algorithm: sha256WithRSAEncryption
22:06:fd:03:c6:a2:5d:d1:8e:6c:df:20:73:c6:75:d9:48:71:
c5:9a:c7:5d:b1:cc:80:ba:cb:ab:ad:11:ea:f5:4a:62:0d:ff:
fd:93:89:a5:e2:14:4d:b7:5f:6b:2e:23:a9:8f:ba:62:03:fc:
0a:fa:f9:ec:70:e9:f8:dd:73:28:e8:80:dc:34:2d:ae:a7:4e:
d2:36:57:b9:6c:fa:c6:10:5b:07:85:43:e5:09:2c:05:95:aa:
37:9b:b5:32:9e:7e:06:f3:6b:a4:03:b1:5a:ac:e6:4e:86:f3:
d9:d1:b7:13:45:ee:fc:f7:29:6e:8f:f1:b7:ac:d4:bc:41:b1:
86:0c:42:c9:7d:c8:7c:ee:38:7e:fb:6a:86:38:48:36:a2:4d:
fb:f7:33:81:29:dd:ff:f4:3f:e0:ca:40:5f:fe:df:4c:d1:7f:
94:10:70:ff:85:76:05:32:99:b1:00:ee:a6:1a:26:54:52:f3:
b6:4d:9f:5b:af:f2:29:b0:34:a9:c2:44:c8:a0:d5:75:74:e3:
65:23:f0:5a:a9:b9:c5:79:b8:17:59:a9:ae:02:1d:ce:43:59:
97:73:3a:87:6c:24:14:63:e9:23:79:3c:f4:27:67:ef:7b:e7:
60:09:3c:07:e6:86:b2:94:db:a9:c0:cb:58:87:64:5c:f0:79:
2b:af:79:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTU2NTNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4MTQ3NzM5NEZCM0U1
OENFRDk0NzRBOThFRDQ5QkNERjU5N0JGRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmM616qO99H9b95O+90pW6ANhkCE0FQYerVSGMxAyR+f8r9nEg
g7dy34w7N4bKnQmD81g3Lgdwr2RO3UtT49D3NN4YcVyTsxpoQCNyz/1Cfl0iNlHi
zsqV5td7QRQ2IlDs2fH3I2699luJ7SuLuc6WEGqdnp2XxfOZsoPHZXA1I4vxJkxj
yjo9AKQJ5O6SUUXrmcxbNpaJAlLmbFLFXnhe3BYJMQm6F9Cbn38q9ABHJZmovTR5
yfoLO82WklC0K04SKfbtsdb6jpGzxcaqVAuut1IyXn2ksMQwePelbnAnSiU4bYtv
QdpeDiOdrakyaB6c02QF72AP+iJCnlOogE/pAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUKBR3OU+z5YztlHSpjtSbzfWXv/wwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9LQlIzT1UtejVZenRsSFNwanRTYnpmV1h2X3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa9YwDQYJKoZIhvcNAQELBQADggEBACIG/QPGol3RjmzfIHPG
ddlIccWax12xzIC6y6utEer1SmIN//2TiaXiFE23X2suI6mPumID/Ar6+exw6fjd
cyjogNw0La6nTtI2V7ls+sYQWweFQ+UJLAWVqjebtTKefgbza6QDsVqs5k6G89nR
txNF7vz3KW6P8bes1LxBsYYMQsl9yHzuOH77aoY4SDaiTfv3M4Ep3f/0P+DKQF/+
30zRf5QQcP+FdgUymbEA7qYaJlRS87ZNn1uv8imwNKnCRMig1XV042Uj8FqpucV5
uBdZqa4CHc5DWZdzOodsJBRj6SN5PPQnZ+9752AJPAfmhrKU26nAy1iHZFzweSuv
ebw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:47:37 2025 by rpki-client