Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/avBq5RZHPesmWXrWeawq66GLg_8.roa
File: avBq5RZHPesmWXrWeawq66GLg_8.roa (raw, json)
Hash identifier: 4dRMtX0AeTWi2NFu5uToa2/f77FtGp2V1uhBa1dViYI=
Subject key identifier: 6A:F0:6A:E5:16:47:3D:EB:26:59:7A:D6:79:AC:2A:EB:A1:8B:83:FF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0731
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/avBq5RZHPesmWXrWeawq66GLg_8.roa
Signing time: Tue 30 Apr 2024 01:55:58 +0000
ROA not before: Tue 30 Apr 2024 01:55:58 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841 (0x731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:55:58 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=6AF06AE516473DEB26597AD679AC2AEBA18B83FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:ea:cb:04:05:a8:45:a9:b8:38:3a:d1:be:
d3:c4:df:5c:97:77:b8:44:df:31:40:09:a3:7f:1c:
28:0e:52:82:6c:a7:fc:46:c1:20:21:51:38:b5:2f:
d2:d1:9f:11:c6:ec:b6:ed:b1:6f:f9:31:f8:1b:92:
d3:36:89:a1:4e:4f:17:50:75:b9:62:c0:22:de:ea:
b1:aa:11:62:65:dc:7b:59:6f:80:19:52:78:27:30:
2d:9b:08:40:64:57:37:18:ee:80:42:84:88:57:6c:
42:a8:c0:8c:f1:da:36:a8:55:84:2c:1d:d6:e9:62:
e0:af:35:97:ed:74:54:f8:4f:e7:9d:45:5d:42:20:
ae:84:92:e3:db:62:21:9b:f8:91:d5:36:b5:93:93:
1a:85:be:bd:ad:82:a3:73:c6:88:4b:c6:f3:cc:3e:
23:76:2a:3b:d0:4c:57:e8:1c:fd:5b:38:6a:1f:d2:
05:a3:b5:28:5e:13:22:e4:3c:9a:92:c5:9c:13:51:
5d:7a:ea:9f:0e:d3:80:39:35:a2:2f:57:40:5a:61:
ac:c1:8a:f0:3f:5b:19:f3:ff:f2:34:a3:d0:5e:07:
5e:61:88:85:f7:41:56:62:3c:20:80:61:73:1f:93:
da:1e:ff:69:50:47:88:f0:b5:e1:9c:75:f0:11:c2:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:6A:E5:16:47:3D:EB:26:59:7A:D6:79:AC:2A:EB:A1:8B:83:FF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/avBq5RZHPesmWXrWeawq66GLg_8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:a4:3c:fb:fb:c8:c7:e4:cc:21:ac:70:26:5a:43:fa:11:3f:
f9:c3:36:1f:4b:82:0d:88:0e:e0:48:9d:34:06:b8:fd:48:ce:
6c:19:a8:b2:74:9a:82:bc:f0:31:4a:b1:6b:b8:f5:fe:23:f7:
f9:4d:49:83:7e:fa:d3:27:b0:95:75:a1:74:d5:7a:e4:e6:0f:
4f:46:80:e8:b9:1e:85:3b:7d:90:a4:bd:00:b9:96:45:e5:f8:
a4:26:89:40:6f:8f:33:e7:cc:b8:32:a4:58:f8:60:88:79:bc:
82:f1:49:97:62:e1:0f:c9:b7:d7:e0:47:76:b3:83:f5:b0:58:
32:40:1a:b3:98:96:83:7f:75:c1:a2:7a:10:69:67:21:0f:ca:
ea:b9:25:91:b7:1d:db:df:1f:1e:4f:94:9b:46:47:8c:c2:50:
11:b9:e3:06:bc:f8:9c:a3:30:71:30:eb:fb:8f:a1:19:50:30:
08:98:45:30:c3:c2:e0:95:94:45:50:d2:2d:34:fd:69:9d:92:
ab:0c:11:5c:dc:ea:f2:53:08:f3:e6:b8:12:02:b1:ee:44:8a:
29:34:67:41:ca:2a:d3:71:69:7c:1f:1c:e2:96:51:91:25:16:
0d:9e:4f:10:7b:31:92:53:98:7a:09:a3:e7:a5:9a:11:72:4c:
05:39:80:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTU1NThaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZBRjA2QUU1MTY0NzNE
RUIyNjU5N0FENjc5QUMyQUVCQTE4QjgzRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcPOrLBAWoRam4ODrRvtPE31yXd7hE3zFACaN/HCgOUoJsp/xG
wSAhUTi1L9LRnxHG7LbtsW/5MfgbktM2iaFOTxdQdbliwCLe6rGqEWJl3HtZb4AZ
UngnMC2bCEBkVzcY7oBChIhXbEKowIzx2jaoVYQsHdbpYuCvNZftdFT4T+edRV1C
IK6EkuPbYiGb+JHVNrWTkxqFvr2tgqNzxohLxvPMPiN2KjvQTFfoHP1bOGof0gWj
tSheEyLkPJqSxZwTUV166p8O04A5NaIvV0BaYazBivA/Wxnz//I0o9BeB15hiIX3
QVZiPCCAYXMfk9oe/2lQR4jwteGcdfARwuYjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUavBq5RZHPesmWXrWeawq66GLg/8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2F2QnE1UlpIUGVzbVdYcldlYXdxNjZHTGdfOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaAwwDQYJKoZIhvcNAQELBQADggEBAH6kPPv7yMfkzCGscCZaQ/oRP/nD
Nh9Lgg2IDuBInTQGuP1IzmwZqLJ0moK88DFKsWu49f4j9/lNSYN++tMnsJV1oXTV
euTmD09GgOi5HoU7fZCkvQC5lkXl+KQmiUBvjzPnzLgypFj4YIh5vILxSZdi4Q/J
t9fgR3azg/WwWDJAGrOYloN/dcGiehBpZyEPyuq5JZG3HdvfHx5PlJtGR4zCUBG5
4wa8+JyjMHEw6/uPoRlQMAiYRTDDwuCVlEVQ0i00/WmdkqsMEVzc6vJTCPPmuBIC
se5Eiik0Z0HKKtNxaXwfHOKWUZElFg2eTxB7MZJTmHoJo+elmhFyTAU5gHk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:20 2025 by rpki-client