Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rRIg4EgkOqbgYMNyxNN6SZsDpCY.roa
File: rRIg4EgkOqbgYMNyxNN6SZsDpCY.roa (raw, json)
Hash identifier: xM8zW0/ijjCK6Wwyf9GdjId5y3hbnf5A6aX958ZE62Y=
Subject key identifier: AD:12:20:E0:48:24:3A:A6:E0:60:C3:72:C4:D3:7A:49:9B:03:A4:26
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 076E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rRIg4EgkOqbgYMNyxNN6SZsDpCY.roa
Signing time: Tue 30 Apr 2024 02:01:44 +0000
ROA not before: Tue 30 Apr 2024 02:01:44 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 01 Apr 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:01:44 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=AD1220E048243AA6E060C372C4D37A499B03A426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:3c:d0:aa:b5:0c:c3:02:e2:ce:57:b3:06:
5f:66:d9:fa:87:a3:5f:79:58:56:bd:83:c5:40:fc:
1c:41:bb:5a:aa:65:11:24:43:91:10:cb:36:6d:88:
4b:72:cf:fe:af:b9:76:6f:c1:7a:bb:2f:fb:39:e8:
f1:e1:59:06:9c:fd:24:60:02:8a:20:d7:cb:e1:52:
57:30:e6:d0:2e:81:6f:9a:6a:35:f7:e1:c2:bc:d0:
d0:17:1d:56:9b:9e:86:48:c4:97:33:65:bc:3e:30:
4d:69:9b:69:2e:97:83:91:d5:5d:59:f0:d8:9a:96:
c5:24:23:c7:da:bd:52:40:ef:5e:ac:ab:bf:3a:3c:
b9:88:6e:af:b7:1f:a0:6d:4e:ec:5b:0d:2f:5e:ba:
15:c4:1d:30:f5:5e:24:ee:06:10:21:94:23:37:48:
bc:1a:81:ae:a9:25:23:ba:3f:98:61:77:33:50:0a:
20:04:03:23:2c:be:09:7a:f2:01:04:26:25:c0:a6:
17:30:46:77:33:02:a9:9b:14:9c:d4:c5:7b:2f:fd:
17:54:f3:6a:52:fe:8d:3f:8d:7a:03:6e:8b:85:53:
70:98:e0:be:5c:ad:51:1d:20:61:df:92:5e:44:64:
f9:cc:dd:5b:95:e3:cb:5e:bb:cc:3d:f7:23:d6:14:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:20:E0:48:24:3A:A6:E0:60:C3:72:C4:D3:7A:49:9B:03:A4:26
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rRIg4EgkOqbgYMNyxNN6SZsDpCY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.232.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:f5:0f:b5:82:72:4c:5c:5e:81:84:54:a2:cb:e8:c4:50:c3:
2e:7a:f2:41:b7:35:63:99:5c:0a:4a:9e:10:27:f3:1d:87:89:
bd:02:04:65:39:b7:4e:b5:be:2e:f5:a5:98:e3:7c:62:3f:8d:
48:57:f4:a0:1c:f1:b1:9e:40:72:68:f5:a7:a5:db:e7:e1:70:
e3:97:8f:27:95:f1:b1:b3:a5:98:b9:fa:16:4a:d8:8c:10:4c:
44:8c:5b:3a:21:c1:b1:59:7f:44:6e:ca:10:9a:09:5a:4c:f1:
aa:8c:5c:00:b9:f1:8b:77:c1:80:89:10:9a:37:5f:ce:92:8a:
ee:3f:2a:fe:34:7f:71:de:50:e8:e0:75:9d:36:a4:13:2b:4e:
ce:92:00:1f:a2:36:cc:88:bb:64:e9:14:f1:a9:74:82:f5:3c:
79:f9:d0:a6:ed:3f:95:3f:57:ed:45:58:7a:ce:73:08:78:ad:
14:56:18:13:b0:12:1b:52:37:46:1b:86:84:1a:b6:4b:fc:a0:
62:da:6c:20:66:e5:ec:d1:3b:33:20:e2:12:8b:49:00:40:7d:
c0:c4:8f:16:e5:65:3c:c0:b1:5b:33:a3:a5:71:c4:12:25:34:
31:6c:3b:36:be:ee:5b:03:f4:01:8f:f8:67:d2:c0:c5:d9:0b:
bb:2b:95:4c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjAxNDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFEMTIyMEUwNDgyNDNB
QTZFMDYwQzM3MkM0RDM3QTQ5OUIwM0E0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzGjzQqrUMwwLizlezBl9m2fqHo195WFa9g8VA/BxBu1qqZREk
Q5EQyzZtiEtyz/6vuXZvwXq7L/s56PHhWQac/SRgAoog18vhUlcw5tAugW+aajX3
4cK80NAXHVabnoZIxJczZbw+ME1pm2kul4OR1V1Z8NialsUkI8favVJA716sq786
PLmIbq+3H6BtTuxbDS9euhXEHTD1XiTuBhAhlCM3SLwaga6pJSO6P5hhdzNQCiAE
AyMsvgl68gEEJiXAphcwRnczAqmbFJzUxXsv/RdU82pS/o0/jXoDbouFU3CY4L5c
rVEdIGHfkl5EZPnM3VuV48teu8w99yPWFLiDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrRIg4EgkOqbgYMNyxNN6SZsDpCYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3JSSWc0RWdrT3FiZ1lNTnl4Tk42U1pzRHBDWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAExaugwDQYJKoZIhvcNAQELBQADggEBAML1D7WCckxcXoGEVKLL6MRQwy56
8kG3NWOZXApKnhAn8x2Hib0CBGU5t061vi71pZjjfGI/jUhX9KAc8bGeQHJo9ael
2+fhcOOXjyeV8bGzpZi5+hZK2IwQTESMWzohwbFZf0RuyhCaCVpM8aqMXAC58Yt3
wYCJEJo3X86Siu4/Kv40f3HeUOjgdZ02pBMrTs6SAB+iNsyIu2TpFPGpdIL1PHn5
0KbtP5U/V+1FWHrOcwh4rRRWGBOwEhtSN0YbhoQatkv8oGLabCBm5ezROzMg4hKL
SQBAfcDEjxblZTzAsVszo6VxxBIlNDFsOza+7lsD9AGP+GfSwMXZC7srlUw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:12 2025 by rpki-client