Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa
File: j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa (raw, json)
Hash identifier: eVcGyNve9v3K3lXEk/iTisFVwQh7z98V7ZpsT5NpaeM=
Subject key identifier: 8F:87:EB:13:E0:95:09:85:B0:59:A5:15:DD:FC:D5:25:C3:18:2A:64
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08DD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa
Signing time: Tue 30 Apr 2024 02:24:46 +0000
ROA not before: Tue 30 Apr 2024 02:24:46 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 220.159.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:46 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8F87EB13E0950985B059A515DDFCD525C3182A64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:86:3d:84:ac:73:2c:6a:7b:55:8c:ea:d6:
f0:e0:dc:b8:4a:af:a8:6f:72:8d:75:10:85:75:01:
3d:df:d4:e1:c4:b3:18:bd:78:c5:20:95:2e:b2:da:
ea:86:57:f8:28:c4:c6:97:f0:a7:7b:95:4f:fc:fe:
98:f9:25:00:a2:15:0e:0c:69:52:83:a7:04:56:ea:
38:09:ac:cf:92:4f:68:67:b9:73:7f:de:69:fe:aa:
aa:fc:57:81:59:01:24:5b:ca:2b:ef:97:78:cb:1f:
23:62:fb:69:e0:19:96:4f:fd:a9:82:d5:d9:08:55:
d7:98:1f:2e:00:e1:15:3c:d0:7c:bb:16:10:6c:10:
11:35:07:9a:f5:e5:90:07:74:0c:bd:b2:ff:1d:fc:
59:31:55:98:f4:47:dc:a8:9b:12:9f:a0:39:ae:d5:
90:64:c4:22:fd:b2:02:d0:b9:be:99:8f:4f:a3:5e:
18:99:15:f7:33:ee:10:69:d9:10:7a:53:94:cf:22:
e2:a9:0c:f4:24:3d:69:69:18:b2:2e:58:e9:f2:81:
56:03:1f:74:54:90:de:3e:74:d7:85:c7:81:f8:84:
a7:44:9f:4f:7e:56:08:07:bb:f6:05:1c:be:8b:96:
f6:6b:c7:b4:78:09:72:67:4a:1e:eb:11:46:f5:28:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:EB:13:E0:95:09:85:B0:59:A5:15:DD:FC:D5:25:C3:18:2A:64
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/j4frE-CVCYWwWaUV3fzVJcMYKmQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.250.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:97:6b:12:e8:b5:c9:c9:f8:8a:29:40:52:4f:d6:5b:3a:62:
56:4c:c7:0e:8a:4a:f6:3f:59:f7:aa:5e:c8:3e:f4:f1:4e:41:
62:54:77:b6:1a:4f:8e:38:5c:37:56:4b:b4:16:19:13:4c:f2:
b8:16:40:ad:66:cd:fa:24:44:f9:f6:09:8e:07:30:3a:9d:4a:
e5:a0:d7:f6:52:d3:38:59:54:92:44:6c:92:0d:21:68:94:cb:
2b:ab:b0:49:9d:10:6f:ed:ba:fd:82:17:61:4b:d5:4c:42:af:
e3:56:85:7e:5c:01:f0:66:c9:ac:a1:95:58:b7:31:70:f7:31:
e5:41:1e:c9:9d:77:da:65:1d:a8:4d:d5:92:35:cb:92:8c:4c:
d0:17:9c:fc:03:aa:d7:f4:41:4e:de:cb:a2:60:7c:0a:1c:4d:
51:ca:ce:2b:b0:cc:d7:50:22:5c:6d:52:92:94:8b:06:2e:3a:
aa:48:b5:9c:98:4c:dd:ea:87:9e:cf:c7:af:5e:50:cc:24:3e:
a7:73:9f:d7:c4:a4:9e:70:33:35:a6:61:4b:cd:10:11:03:b6:
1e:7d:ae:f1:7d:e9:22:07:57:16:d9:a2:39:ec:09:99:98:c3:
5e:b8:14:34:8c:cd:c1:c9:3a:6a:e8:33:0d:09:0b:11:e5:3f:
52:b2:7a:0c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjI0NDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGODdFQjEzRTA5NTA5
ODVCMDU5QTUxNURERkNENTI1QzMxODJBNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE64Y9hKxzLGp7VYzq1vDg3LhKr6hvco11EIV1AT3f1OHEsxi9
eMUglS6y2uqGV/goxMaX8Kd7lU/8/pj5JQCiFQ4MaVKDpwRW6jgJrM+ST2hnuXN/
3mn+qqr8V4FZASRbyivvl3jLHyNi+2ngGZZP/amC1dkIVdeYHy4A4RU80Hy7FhBs
EBE1B5r15ZAHdAy9sv8d/FkxVZj0R9yomxKfoDmu1ZBkxCL9sgLQub6Zj0+jXhiZ
Ffcz7hBp2RB6U5TPIuKpDPQkPWlpGLIuWOnygVYDH3RUkN4+dNeFx4H4hKdEn09+
VggHu/YFHL6LlvZrx7R4CXJnSh7rEUb1KJalAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUj4frE+CVCYWwWaUV3fzVJcMYKmQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2o0ZnJFLUNWQ1lXd1dhVVYzZnpWSmNNWUttUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHcn/owDQYJKoZIhvcNAQELBQADggEBAE2XaxLotcnJ+IopQFJP1ls6YlZM
xw6KSvY/WfeqXsg+9PFOQWJUd7YaT444XDdWS7QWGRNM8rgWQK1mzfokRPn2CY4H
MDqdSuWg1/ZS0zhZVJJEbJINIWiUyyursEmdEG/tuv2CF2FL1UxCr+NWhX5cAfBm
yayhlVi3MXD3MeVBHsmdd9plHahN1ZI1y5KMTNAXnPwDqtf0QU7ey6JgfAocTVHK
ziuwzNdQIlxtUpKUiwYuOqpItZyYTN3qh57Px69eUMwkPqdzn9fEpJ5wMzWmYUvN
EBEDth59rvF96SIHVxbZojnsCZmYw164FDSMzcHJOmroMw0JCxHlP1Kyegw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:57 2025 by rpki-client