Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YyVxaKFJC2whLKO8oWGIBOx46Dg.roa
File: YyVxaKFJC2whLKO8oWGIBOx46Dg.roa (raw, json)
Hash identifier: rJ3EwLC844KeuNtB9m50J93/Ii1yJ1YnE0PgeBzxBeo=
Subject key identifier: 63:25:71:68:A1:49:0B:6C:21:2C:A3:BC:A1:61:88:04:EC:78:E8:38
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06D4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YyVxaKFJC2whLKO8oWGIBOx46Dg.roa
Signing time: Tue 30 Apr 2024 01:49:32 +0000
ROA not before: Tue 30 Apr 2024 01:49:32 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:49:32 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=63257168A1490B6C212CA3BCA1618804EC78E838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:93:17:b4:59:a8:bf:17:40:09:58:b6:b4:
52:8c:50:25:48:3e:c3:5d:4f:52:33:55:28:2d:99:
08:9d:94:41:36:d2:5f:08:43:ec:87:3a:20:b1:8f:
96:2e:25:d7:45:26:0c:05:b3:8f:07:cc:8c:93:f8:
bc:6a:6a:06:1c:c8:52:2f:30:f1:ed:26:95:54:70:
8a:3f:0c:78:39:88:0b:f7:96:1c:a0:04:3a:6e:23:
f0:b8:93:c6:9e:64:e9:77:89:a6:3a:34:22:b3:03:
84:20:5c:73:93:9b:52:2f:9c:e5:ee:c7:d7:43:d9:
8d:0c:6e:50:f5:f1:a1:d5:66:73:68:10:88:29:47:
62:ad:34:d6:5f:8f:67:c5:14:2b:1c:16:49:c1:01:
be:69:e6:3b:db:be:a2:3a:fb:d1:2e:67:39:17:be:
77:35:60:6b:53:ba:04:c3:86:31:12:25:69:09:f4:
54:fa:9f:e4:0a:e9:fe:e8:9b:49:78:f4:ae:88:93:
60:5e:b6:86:9c:c1:f7:50:49:40:b7:db:b6:d5:ed:
42:6c:7c:27:d8:95:6e:58:10:7b:76:d7:d7:63:6f:
bd:b2:cf:d8:37:ef:1f:09:70:0f:ef:c5:8a:dc:fe:
15:c1:42:f8:a8:c7:8b:2e:db:bc:3b:c0:7f:4b:39:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:71:68:A1:49:0B:6C:21:2C:A3:BC:A1:61:88:04:EC:78:E8:38
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YyVxaKFJC2whLKO8oWGIBOx46Dg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:78:83:36:c3:cb:f6:70:80:8f:25:27:22:6b:53:0b:5b:21:
64:c0:90:99:ec:e3:1e:7c:83:07:17:89:bc:b1:41:7c:d7:c7:
78:a7:45:84:b6:b9:6b:31:24:c4:57:ca:99:fb:ba:4a:67:f2:
b2:0e:e0:ab:e3:58:7c:f9:c5:e8:30:6f:06:d0:96:fa:13:fd:
79:3e:f8:26:92:07:bd:c2:a5:a0:9b:df:bb:1d:78:c4:23:75:
e5:ab:e4:2d:49:b6:ec:e4:82:90:ba:83:01:a4:af:a1:7a:08:
87:b0:61:83:ba:91:c0:18:d7:bb:45:15:b7:b3:27:d1:d9:5e:
18:4b:b9:da:f1:ec:5f:6e:01:44:ca:c4:e1:cb:8b:b1:a6:9c:
81:ae:20:82:7f:67:53:aa:ac:ae:49:0d:b5:e8:62:02:e6:6b:
35:f8:aa:bf:5f:37:63:13:5c:69:e8:ca:53:86:5b:f5:58:0d:
60:3b:d0:ef:a3:f5:13:ad:26:07:f5:c4:89:22:b7:4a:3d:a4:
13:44:ca:92:ab:7a:f2:72:dd:a0:a8:35:51:2a:1b:c3:26:9d:
6b:84:db:f7:15:3f:2b:d4:b5:50:7e:b7:c3:ef:45:8c:a1:ab:
25:79:dd:be:d9:1a:2a:7b:fc:59:18:22:b9:90:ef:fd:60:df:
e4:b3:36:77
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTQ5MzJaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzMjU3MTY4QTE0OTBC
NkMyMTJDQTNCQ0ExNjE4ODA0RUM3OEU4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7qZMXtFmovxdACVi2tFKMUCVIPsNdT1IzVSgtmQidlEE20l8I
Q+yHOiCxj5YuJddFJgwFs48HzIyT+LxqagYcyFIvMPHtJpVUcIo/DHg5iAv3lhyg
BDpuI/C4k8aeZOl3iaY6NCKzA4QgXHOTm1IvnOXux9dD2Y0MblD18aHVZnNoEIgp
R2KtNNZfj2fFFCscFknBAb5p5jvbvqI6+9EuZzkXvnc1YGtTugTDhjESJWkJ9FT6
n+QK6f7om0l49K6Ik2BetoacwfdQSUC327bV7UJsfCfYlW5YEHt219djb72yz9g3
7x8JcA/vxYrc/hXBQviox4su27w7wH9LOUvZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUYyVxaKFJC2whLKO8oWGIBOx46DgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1l5VnhhS0ZKQzJ3aExLTzhvV0dJQk94NDZEZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQBQ/AwDQYJKoZIhvcNAQELBQADggEBAKl4gzbDy/ZwgI8lJyJrUwtbIWTA
kJns4x58gwcXibyxQXzXx3inRYS2uWsxJMRXypn7ukpn8rIO4KvjWHz5xegwbwbQ
lvoT/Xk++CaSB73CpaCb37sdeMQjdeWr5C1JtuzkgpC6gwGkr6F6CIewYYO6kcAY
17tFFbezJ9HZXhhLudrx7F9uAUTKxOHLi7GmnIGuIIJ/Z1OqrK5JDbXoYgLmazX4
qr9fN2MTXGnoylOGW/VYDWA70O+j9ROtJgf1xIkit0o9pBNEypKrevJy3aCoNVEq
G8MmnWuE2/cVPyvUtVB+t8PvRYyhqyV53b7ZGip7/FkYIrmQ7/1g3+SzNnc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:42 2025 by rpki-client