Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hs0jM-SCfUZ8av2bzllPBbNOvJw.roa
File: Hs0jM-SCfUZ8av2bzllPBbNOvJw.roa (raw, json)
Hash identifier: 2yDJSpgx7HTSAA1n68xxRZTnhBWlH9dXmqx2AL5tNoY=
Subject key identifier: 1E:CD:23:33:E4:82:7D:46:7C:6A:FD:9B:CE:59:4F:05:B3:4E:BC:9C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0777
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hs0jM-SCfUZ8av2bzllPBbNOvJw.roa
Signing time: Tue 30 Apr 2024 02:04:36 +0000
ROA not before: Tue 30 Apr 2024 02:04:36 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:04:36 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=1ECD2333E4827D467C6AFD9BCE594F05B34EBC9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:47:39:40:46:3c:d8:0b:c4:67:5f:5e:70:
c2:08:b7:c0:a2:d7:c2:09:45:ac:d9:f3:e8:f6:e2:
c6:f1:bb:5b:e9:88:44:15:d3:b8:78:ce:22:b6:0a:
c1:13:d0:a6:41:5e:77:1e:ee:00:10:36:a2:ad:ed:
40:38:c6:7f:0b:56:6f:a7:e9:ce:a9:17:c5:eb:10:
6f:ee:b6:f7:5f:14:87:6c:0b:63:6e:7b:fd:7b:81:
19:0f:54:d8:5c:e0:74:63:63:5b:d0:21:8f:2d:f9:
61:dd:d7:3f:14:10:ad:f4:f9:f0:58:5d:24:e3:50:
d4:b9:3d:a4:11:e9:b4:96:01:11:b6:dc:e2:cf:eb:
48:a0:fc:56:c2:92:c0:e7:95:31:96:33:d8:35:e0:
df:05:66:b6:eb:b1:c6:c4:f1:9a:7b:ab:59:b1:a7:
82:6c:a0:70:6e:99:75:c4:ab:bd:35:0a:fe:e0:bf:
47:84:df:80:50:23:e2:cc:3e:5e:81:11:b4:6d:ab:
cc:70:06:b2:96:05:53:3a:43:ab:3b:4b:d9:cd:34:
1d:2f:af:5b:30:ed:cb:36:c1:1c:5a:04:4d:31:26:
e1:29:55:b9:6a:21:d4:3e:fb:57:32:2d:29:bc:2f:
02:3b:8c:06:68:e4:15:d5:50:38:07:b4:87:f9:9b:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:23:33:E4:82:7D:46:7C:6A:FD:9B:CE:59:4F:05:B3:4E:BC:9C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hs0jM-SCfUZ8av2bzllPBbNOvJw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:da:11:75:04:a7:3a:0b:b0:3d:da:02:0b:52:ca:86:5e:70:
01:13:c0:6c:67:7c:e5:8a:cb:a5:73:cd:4c:c0:be:0d:5d:10:
09:82:55:7e:65:21:00:46:d3:a2:84:cf:c7:fd:91:b9:d3:6e:
ce:a4:2a:10:b1:ef:86:ce:c4:14:dc:1b:21:e0:aa:4a:b3:df:
dd:a0:57:66:c1:12:8b:17:90:b9:15:20:28:40:3c:f2:f7:93:
47:d5:f0:b5:fa:2b:f4:9d:6c:dd:27:5f:28:9d:fa:ab:4e:a4:
62:e3:87:15:3e:85:28:8c:13:a8:86:c3:d6:40:82:01:06:06:
72:54:b7:6b:99:96:dd:ed:31:c7:73:9d:bd:ac:83:0c:1e:6b:
53:64:83:ec:da:d2:42:2b:c4:76:91:38:e2:42:18:00:28:ff:
cc:e3:af:ab:fb:83:44:c1:67:0d:6a:78:17:57:1a:91:47:ba:
b6:ba:14:08:7a:5a:81:d1:f4:12:23:39:f3:1a:f7:8f:29:8b:
d4:55:de:90:a5:79:d9:6a:dd:8a:00:2e:b0:2b:3c:7c:51:22:
79:1b:41:fc:6b:2f:cc:22:43:a1:c2:37:81:f6:f2:b4:79:56:
69:ce:c8:b9:66:f8:cc:ee:98:4a:73:05:3b:c2:5f:9d:2c:8c:
29:fd:89:9a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjA0MzZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFQ0QyMzMzRTQ4MjdE
NDY3QzZBRkQ5QkNFNTk0RjA1QjM0RUJDOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoFEc5QEY82AvEZ19ecMIIt8Ci18IJRazZ8+j24sbxu1vpiEQV
07h4ziK2CsET0KZBXnce7gAQNqKt7UA4xn8LVm+n6c6pF8XrEG/utvdfFIdsC2Nu
e/17gRkPVNhc4HRjY1vQIY8t+WHd1z8UEK30+fBYXSTjUNS5PaQR6bSWARG23OLP
60ig/FbCksDnlTGWM9g14N8FZrbrscbE8Zp7q1mxp4JsoHBumXXEq701Cv7gv0eE
34BQI+LMPl6BEbRtq8xwBrKWBVM6Q6s7S9nNNB0vr1sw7cs2wRxaBE0xJuEpVblq
IdQ++1cyLSm8LwI7jAZo5BXVUDgHtIf5m2kpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUHs0jM+SCfUZ8av2bzllPBbNOvJwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0hzMGpNLVNDZlVaOGF2MmJ6bGxQQmJOT3ZKdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBTiAwDQYJKoZIhvcNAQELBQADggEBAKHaEXUEpzoLsD3aAgtSyoZecAET
wGxnfOWKy6VzzUzAvg1dEAmCVX5lIQBG06KEz8f9kbnTbs6kKhCx74bOxBTcGyHg
qkqz392gV2bBEosXkLkVIChAPPL3k0fV8LX6K/SdbN0nXyid+qtOpGLjhxU+hSiM
E6iGw9ZAggEGBnJUt2uZlt3tMcdznb2sgwwea1Nkg+za0kIrxHaROOJCGAAo/8zj
r6v7g0TBZw1qeBdXGpFHura6FAh6WoHR9BIjOfMa948pi9RV3pCledlq3YoALrAr
PHxRInkbQfxrL8wiQ6HCN4H28rR5VmnOyLlm+MzumEpzBTvCX50sjCn9iZo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:51 2025 by rpki-client