Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bQHB8sphIZWS8axGz_da6cuuxcs.roa
File: bQHB8sphIZWS8axGz_da6cuuxcs.roa (raw, json)
Hash identifier: cLY2wm/2Gb1DkmaLVdc3Q9R38RvwNl2tvGYGsHUqhO0=
Subject key identifier: 6D:01:C1:F2:CA:61:21:95:92:F1:AC:46:CF:F7:5A:E9:CB:AE:C5:CB
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06D9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bQHB8sphIZWS8axGz_da6cuuxcs.roa
Signing time: Tue 30 Apr 2024 01:49:35 +0000
ROA not before: Tue 30 Apr 2024 01:49:35 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:49:35 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=6D01C1F2CA61219592F1AC46CFF75AE9CBAEC5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:69:6e:5b:98:a7:73:4c:9e:7f:9a:9a:b1:
6b:1a:9b:2f:24:9d:cc:8c:d8:99:11:75:4b:48:1e:
9c:c0:75:ad:da:96:cd:e9:e8:75:1e:bb:a3:1e:6e:
e9:ff:23:bd:a7:14:40:30:51:08:ea:a8:eb:41:73:
8d:6a:35:f9:09:ba:33:84:68:90:2f:df:61:af:f0:
14:5c:83:5a:2e:5d:58:5f:6a:c1:79:85:2e:b7:9f:
d1:03:79:ea:ca:4d:2a:8c:f1:f8:ae:bc:52:30:48:
77:bc:f7:b5:77:c2:f0:a1:80:e2:1e:fb:dc:11:ff:
22:c2:90:3c:de:33:89:88:1a:3c:45:d5:a4:b8:6f:
5b:13:df:e6:04:01:3b:3f:8d:e7:74:47:70:db:2f:
7d:c5:af:c4:7c:42:d1:9a:4d:27:76:38:9f:d8:bd:
60:6d:4e:6d:0e:e7:09:fd:91:3b:d2:ab:9d:e3:99:
c2:ea:86:7f:52:1e:ca:2a:30:e6:06:d4:f7:65:ad:
2e:0d:25:ae:3d:ac:40:24:0e:8e:72:06:50:e2:8c:
c4:5a:9e:77:98:a2:9b:d2:15:33:2b:6f:8c:d0:d2:
3b:14:43:5b:63:c2:d5:ef:1d:45:00:13:f0:10:81:
ae:5e:ec:ad:d6:5f:8d:75:bb:8d:89:e1:1c:cb:9e:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:C1:F2:CA:61:21:95:92:F1:AC:46:CF:F7:5A:E9:CB:AE:C5:CB
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bQHB8sphIZWS8axGz_da6cuuxcs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:83:42:a3:9b:42:dc:12:e7:a5:a9:fd:c4:1d:ef:53:04:74:
2d:06:43:dd:29:8f:72:c0:c5:f3:ae:3b:f9:63:10:f5:31:08:
4a:8d:f6:d9:ab:35:6d:f9:a7:f4:4f:78:18:00:de:11:82:c7:
9b:a8:2d:6c:21:b7:b2:bc:36:98:7a:7b:5a:a8:1c:46:54:9e:
f2:6c:80:d1:57:db:d1:3f:8a:61:56:4a:52:d8:19:3f:a4:87:
ac:a9:06:fe:24:3f:c6:0c:47:a3:aa:07:15:3a:9b:0a:05:13:
e6:2b:07:f7:9a:55:8e:68:9f:25:ad:d6:d8:04:b9:b7:13:f6:
73:0c:95:4a:61:fe:ce:c4:84:c8:de:07:ce:4c:f8:29:c0:25:
55:f4:42:a0:f7:85:42:9e:e7:5f:27:aa:c8:14:15:c6:c8:d8:
c8:25:71:91:52:d1:25:6e:a7:5b:42:2d:44:38:57:be:60:fc:
cd:17:40:d5:93:77:a9:97:34:4c:4e:4e:c7:80:53:e3:79:f0:
37:a6:06:91:c8:fe:6a:80:1d:ca:32:b1:1e:86:1b:ab:71:18:
df:4b:5e:6a:18:5e:ba:fb:82:65:33:4e:42:49:bd:32:3a:9a:
f9:a9:a5:ce:f8:48:98:26:74:62:a1:ab:ac:64:de:bb:ca:59:
84:f4:9b:67
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTQ5MzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZEMDFDMUYyQ0E2MTIx
OTU5MkYxQUM0NkNGRjc1QUU5Q0JBRUM1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3DWluW5inc0yef5qasWsamy8kncyM2JkRdUtIHpzAda3als3p
6HUeu6Mebun/I72nFEAwUQjqqOtBc41qNfkJujOEaJAv32Gv8BRcg1ouXVhfasF5
hS63n9EDeerKTSqM8fiuvFIwSHe897V3wvChgOIe+9wR/yLCkDzeM4mIGjxF1aS4
b1sT3+YEATs/jed0R3DbL33Fr8R8QtGaTSd2OJ/YvWBtTm0O5wn9kTvSq53jmcLq
hn9SHsoqMOYG1PdlrS4NJa49rEAkDo5yBlDijMRanneYopvSFTMrb4zQ0jsUQ1tj
wtXvHUUAE/AQga5e7K3WX411u42J4RzLnnnJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUbQHB8sphIZWS8axGz/da6cuuxcswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2JRSEI4c3BoSVpXUzhheEd6X2RhNmN1dXhjcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaBowDQYJKoZIhvcNAQELBQADggEBAB6DQqObQtwS56Wp/cQd71MEdC0G
Q90pj3LAxfOuO/ljEPUxCEqN9tmrNW35p/RPeBgA3hGCx5uoLWwht7K8Nph6e1qo
HEZUnvJsgNFX29E/imFWSlLYGT+kh6ypBv4kP8YMR6OqBxU6mwoFE+YrB/eaVY5o
nyWt1tgEubcT9nMMlUph/s7EhMjeB85M+CnAJVX0QqD3hUKe518nqsgUFcbI2Mgl
cZFS0SVup1tCLUQ4V75g/M0XQNWTd6mXNExOTseAU+N58DemBpHI/mqAHcoysR6G
G6txGN9LXmoYXrr7gmUzTkJJvTI6mvmppc74SJgmdGKhq6xk3rvKWYT0m2c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:02:15 2025 by rpki-client