Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa
File: TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa (raw, json)
Hash identifier: PEZkpKHMivrT6zjZhu0yd74WIEU00tvlBstSrhg20Kg=
Subject key identifier: 4C:DE:70:B1:06:0E:D6:C4:24:5D:8B:E5:1A:E1:F1:F8:35:75:05:2A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0905
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa
Signing time: Tue 30 Apr 2024 02:28:38 +0000
ROA not before: Tue 30 Apr 2024 02:28:38 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:28:38 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=4CDE70B1060ED6C4245D8BE51AE1F1F83575052A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:56:31:a7:7e:b5:bb:84:10:00:4d:ab:10:
ff:68:1f:da:15:cc:e3:8d:b3:f0:a9:cb:ea:ed:bd:
8d:9e:96:16:ea:01:da:45:bc:ba:8a:93:a3:34:e1:
38:0f:42:1b:f4:1f:70:d5:18:3c:78:94:83:bd:f0:
d4:f1:cf:95:bf:4e:a4:b9:f1:e1:a6:42:24:05:c6:
c4:58:d1:26:c1:c8:84:29:d2:c6:02:0f:d1:59:ed:
53:c6:1d:f5:d1:9e:e2:ee:85:a9:72:1f:11:cc:7c:
c4:32:02:ca:47:11:fa:8b:b6:1b:3f:d1:7b:30:7a:
8b:f9:7c:57:6f:b1:96:84:5c:85:48:98:06:0d:af:
b2:a1:ba:a5:67:6e:da:a0:f2:d0:80:40:77:75:9e:
54:48:f4:71:8d:88:73:c8:ca:54:4c:b6:d6:c5:f3:
68:11:4f:0d:5f:b3:24:9a:eb:06:4a:c5:fb:7b:66:
3e:e1:59:9f:d1:d9:ca:c3:4e:72:ed:53:bf:29:09:
b2:81:5d:1f:be:d9:08:88:48:f0:b2:29:f2:e8:00:
90:6d:8e:54:02:92:3d:c9:f8:96:fc:ca:0c:31:3b:
5c:5a:53:4c:93:76:63:58:60:6a:31:63:72:8d:e0:
59:af:f7:75:c5:6d:9f:51:66:9e:ea:d4:86:10:94:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:70:B1:06:0E:D6:C4:24:5D:8B:E5:1A:E1:F1:F8:35:75:05:2A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TN5wsQYO1sQkXYvlGuHx-DV1BSo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.16.0/20
Signature Algorithm: sha256WithRSAEncryption
e6:fd:db:6b:80:ba:a2:8a:4a:2f:72:4f:bf:bf:64:70:0d:0f:
82:a5:3e:b7:e9:d0:32:69:69:bb:df:b5:db:00:f3:0e:9e:10:
81:40:82:e0:9a:32:1c:41:53:e1:98:71:0b:26:c7:ed:c3:9a:
07:c9:a7:c9:d3:2d:47:b8:9a:8e:e2:e7:27:4c:1d:ef:8e:e0:
dc:dc:9c:b3:cd:42:e3:fe:10:ed:b6:ef:c2:85:8f:43:3c:90:
09:0a:2b:5b:cf:bd:da:7f:f9:5e:a0:0a:67:4f:89:87:89:37:
07:ed:3b:a1:83:08:23:d7:4b:57:79:ac:c0:e8:e0:ef:0c:32:
d8:da:fa:6d:55:69:72:b8:a2:41:01:9c:7e:cc:32:40:f7:2f:
69:c3:8d:3f:84:e9:33:6a:80:40:70:df:de:c7:6a:4a:e5:73:
d3:83:12:49:06:68:ea:b8:7e:27:0e:39:de:e8:3b:00:fc:d5:
6e:4f:66:54:c0:0d:68:16:c2:e9:de:f0:08:c1:70:88:a9:47:
7e:4a:e0:27:36:a9:8e:22:f5:09:fa:39:72:bf:e2:5e:b5:a0:
a3:c6:1f:91:c6:2b:6d:80:57:0e:66:eb:26:70:cd:9e:7e:cd:
cf:96:76:5e:b8:eb:66:7c:79:2f:a5:9d:63:f4:88:3d:a7:15:
2b:b2:bf:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjI4MzhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDREU3MEIxMDYwRUQ2
QzQyNDVEOEJFNTFBRTFGMUY4MzU3NTA1MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM/1Yxp361u4QQAE2rEP9oH9oVzOONs/Cpy+rtvY2elhbqAdpF
vLqKk6M04TgPQhv0H3DVGDx4lIO98NTxz5W/TqS58eGmQiQFxsRY0SbByIQp0sYC
D9FZ7VPGHfXRnuLuhalyHxHMfMQyAspHEfqLths/0Xsweov5fFdvsZaEXIVImAYN
r7KhuqVnbtqg8tCAQHd1nlRI9HGNiHPIylRMttbF82gRTw1fsySa6wZKxft7Zj7h
WZ/R2crDTnLtU78pCbKBXR++2QiISPCyKfLoAJBtjlQCkj3J+Jb8ygwxO1xaU0yT
dmNYYGoxY3KN4Fmv93XFbZ9RZp7q1IYQlCdvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTN5wsQYO1sQkXYvlGuHx+DV1BSowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RONXdzUVlPMXNRa1hZdmxHdUh4LURWMUJTby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQBSBAwDQYJKoZIhvcNAQELBQADggEBAOb922uAuqKKSi9yT7+/ZHAND4Kl
Prfp0DJpabvftdsA8w6eEIFAguCaMhxBU+GYcQsmx+3DmgfJp8nTLUe4mo7i5ydM
He+O4NzcnLPNQuP+EO2278KFj0M8kAkKK1vPvdp/+V6gCmdPiYeJNwftO6GDCCPX
S1d5rMDo4O8MMtja+m1VaXK4okEBnH7MMkD3L2nDjT+E6TNqgEBw397Hakrlc9OD
EkkGaOq4ficOOd7oOwD81W5PZlTADWgWwune8AjBcIipR35K4Cc2qY4i9Qn6OXK/
4l61oKPGH5HGK22AVw5m6yZwzZ5+zc+Wdl6462Z8eS+lnWP0iD2nFSuyv3w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:44 2025 by rpki-client