Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa
File: Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa (raw, json)
Hash identifier: a9TMwWqPtfopFAVbZS9dKWjHSFv558h8twuIy2/WOoA=
Subject key identifier: 49:DF:69:37:F9:4F:C8:37:26:A8:E0:4F:4B:67:C9:7D:1B:B9:9B:72
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0379
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa
Signing time: Tue 30 Apr 2024 02:00:00 +0000
ROA not before: Tue 30 Apr 2024 02:00:00 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:9200::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 02:00:00 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=49DF6937F94FC83726A8E04F4B67C97D1BB99B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:15:85:07:ce:f1:07:98:da:b5:ff:59:94:
c2:57:4e:2b:8f:2f:46:cc:92:ad:7e:a5:8a:d1:2a:
b4:11:f9:a4:27:e4:eb:50:96:66:82:3c:a5:78:14:
15:19:99:bc:78:86:f9:bb:5f:bf:e6:22:06:6f:4d:
41:cc:e3:fe:83:e0:77:d0:87:43:f6:16:c2:a8:17:
26:98:b0:93:42:2f:9b:05:c5:9b:9f:f8:36:d0:db:
07:bc:1e:a3:4e:fa:64:d3:0f:d9:45:f2:1d:ec:64:
ab:83:50:6f:92:1c:a6:6a:f5:7e:19:ec:67:92:96:
1b:bc:1e:a7:1e:ae:eb:4e:c4:fc:31:37:15:73:cb:
13:53:27:c4:a8:19:bd:5c:11:42:83:eb:5e:c5:87:
28:f3:02:36:a8:1a:3a:e0:0a:b1:fb:54:99:f6:5d:
d1:0f:9b:86:75:73:33:d3:d1:0d:c3:82:39:3d:1d:
68:cc:60:de:41:d8:e5:30:5b:4d:3a:d1:7b:2f:78:
77:8e:0b:eb:f9:ee:df:15:76:a0:6b:e0:d4:04:5c:
cc:bd:41:40:ca:fc:ea:c3:32:20:90:d8:a9:cf:5e:
fa:c1:4f:f0:5c:70:97:da:4d:9d:0c:b8:18:f3:76:
78:ec:52:67:66:8b:2b:63:62:bd:da:f9:84:e8:e1:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:69:37:F9:4F:C8:37:26:A8:E0:4F:4B:67:C9:7D:1B:B9:9B:72
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:9200::/40
Signature Algorithm: sha256WithRSAEncryption
24:fe:5c:73:b1:ac:39:62:a9:16:cf:ab:18:97:aa:9c:ec:1f:
62:ca:d1:aa:70:80:c5:1f:16:fd:93:bd:23:34:8e:69:9d:16:
b3:33:8e:3e:da:46:1d:99:74:3d:3e:92:26:ce:7d:7e:0b:54:
da:05:06:41:0c:44:5a:b9:82:1b:ba:cf:0c:46:73:2e:06:86:
e1:c3:c6:02:13:c9:73:4d:7a:8a:d7:c9:c0:c5:ff:97:c8:c1:
cc:c0:13:58:d7:34:35:2c:49:12:5b:c9:be:31:b7:6a:34:a8:
f8:2a:94:fc:7e:75:17:f4:bf:2a:4f:be:4c:fe:81:75:d2:95:
a2:31:d8:2e:fb:91:47:63:b8:22:e2:3b:20:c4:60:54:aa:9b:
94:ca:36:24:5b:af:b6:af:12:e2:a8:34:3c:19:00:1b:63:b6:
38:d3:53:16:a0:20:f9:95:59:0f:2a:da:5b:42:48:bb:e8:6a:
bd:61:e9:ec:58:8a:da:2c:9d:9c:9c:8a:0f:99:e8:6f:d0:7a:
00:f2:da:75:7b:ec:26:81:f2:c8:05:0a:f1:b4:19:ee:dd:5b:
10:03:af:88:43:24:a3:be:72:b0:e6:b4:50:b2:1b:30:6d:61:
8f:d8:fc:7a:f7:b8:01:a4:2e:1d:af:27:9b:37:28:d2:2d:40:
91:f0:da:e6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAwMDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5REY2OTM3Rjk0RkM4
MzcyNkE4RTA0RjRCNjdDOTdEMUJCOTlCNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChUBWFB87xB5jatf9ZlMJXTiuPL0bMkq1+pYrRKrQR+aQn5OtQ
lmaCPKV4FBUZmbx4hvm7X7/mIgZvTUHM4/6D4HfQh0P2FsKoFyaYsJNCL5sFxZuf
+DbQ2we8HqNO+mTTD9lF8h3sZKuDUG+SHKZq9X4Z7GeSlhu8HqcerutOxPwxNxVz
yxNTJ8SoGb1cEUKD617FhyjzAjaoGjrgCrH7VJn2XdEPm4Z1czPT0Q3Dgjk9HWjM
YN5B2OUwW0060XsveHeOC+v57t8VdqBr4NQEXMy9QUDK/OrDMiCQ2KnPXvrBT/Bc
cJfaTZ0MuBjzdnjsUmdmiytjYr3a+YTo4cfzAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUSd9pN/lPyDcmqOBPS2fJfRu5m3IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9TZDlwTl9sUHlEY21xT0JQUzJmSmZSdTVtM0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa5IwDQYJKoZIhvcNAQELBQADggEBACT+XHOxrDliqRbPqxiX
qpzsH2LK0apwgMUfFv2TvSM0jmmdFrMzjj7aRh2ZdD0+kibOfX4LVNoFBkEMRFq5
ghu6zwxGcy4GhuHDxgITyXNNeorXycDF/5fIwczAE1jXNDUsSRJbyb4xt2o0qPgq
lPx+dRf0vypPvkz+gXXSlaIx2C77kUdjuCLiOyDEYFSqm5TKNiRbr7avEuKoNDwZ
ABtjtjjTUxagIPmVWQ8q2ltCSLvoar1h6exYitosnZycig+Z6G/QegDy2nV77CaB
8sgFCvG0Ge7dWxADr4hDJKO+crDmtFCyGzBtYY/Y/Hr3uAGkLh2vJ5s3KNItQJHw
2uY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:05 2025 by rpki-client