Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa
File: vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa (raw, json)
Hash identifier: JM2As4/8PugUZwQkOdKjxI25pZC5BVn8mzWQQKXxmD8=
Subject key identifier: BD:84:81:0E:64:D2:DF:78:21:7F:42:4B:B8:C8:16:43:22:B6:65:CF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0756
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa
Signing time: Tue 30 Apr 2024 02:01:33 +0000
ROA not before: Tue 30 Apr 2024 02:01:33 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:01:33 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=BD84810E64D2DF78217F424BB8C8164322B665CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:a3:01:99:76:ac:f8:f9:ab:a2:ca:a2:67:
16:32:74:0e:ab:79:41:ac:20:e1:a1:dd:e6:61:39:
b9:20:77:76:f3:e5:4d:f9:a0:b4:e8:81:49:11:7e:
55:e4:ea:57:eb:66:aa:52:10:05:ba:54:54:11:1e:
9c:f7:6d:44:d4:30:c0:01:53:9a:53:fa:9b:8e:bf:
28:0a:11:49:61:44:97:85:15:82:c9:ee:86:20:86:
5f:11:81:3d:09:db:18:48:38:a6:a3:b5:c3:00:97:
ee:02:fe:b5:56:2f:56:2f:09:2a:57:45:90:b5:05:
1c:2f:3f:4e:c9:20:93:c6:68:c5:6a:ac:b4:a8:ef:
29:87:16:26:06:c1:1b:84:19:1a:16:9a:2b:48:6d:
89:72:7a:a9:ae:14:1b:22:82:ad:7d:02:97:d9:6a:
30:82:a2:22:54:c3:42:7e:63:82:5d:86:fa:8e:bf:
88:1c:5f:3f:19:c1:86:72:e7:be:e3:63:de:b2:be:
16:ef:2b:9f:bd:2d:ea:98:33:a5:96:4f:99:d4:82:
fa:53:da:b3:8c:63:51:fa:1f:db:6e:13:82:f1:da:
46:b4:9c:7c:55:eb:1c:78:49:6b:77:2a:74:6b:c4:
cf:89:14:04:65:67:3c:bc:45:27:0f:0b:18:cb:25:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:81:0E:64:D2:DF:78:21:7F:42:4B:B8:C8:16:43:22:B6:65:CF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vYSBDmTS33ghf0JLuMgWQyK2Zc8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:cb:7c:dd:14:b0:e7:a5:64:d1:98:8c:3c:86:68:b6:eb:c1:
5e:cc:56:08:a1:a5:80:18:5d:79:ec:d6:d7:75:95:81:84:5c:
7e:1e:0c:31:fc:ef:5c:4e:46:75:b6:ad:c8:97:ef:67:6f:4b:
2e:2a:fd:c1:09:17:1b:8b:63:f2:ec:45:05:7f:60:3c:26:fb:
52:d7:4e:d6:58:ce:73:74:3d:11:16:ac:15:ba:e4:41:46:f2:
ef:98:19:17:77:85:ec:ce:c2:79:35:5c:90:6c:37:07:df:b1:
63:88:af:9b:32:a5:4b:13:97:64:85:8c:98:44:da:f9:85:52:
57:b1:e7:9b:db:ac:d7:16:99:d9:bd:73:17:7e:57:70:58:d6:
b1:b2:14:1c:70:2f:91:44:f4:53:af:50:c2:7a:42:ea:cf:e7:
c6:7c:02:21:9c:20:f4:74:71:31:93:85:eb:75:52:df:f5:54:
4f:ad:f1:2a:35:c7:02:ad:53:81:4a:4a:b4:4d:cc:77:79:a0:
89:6a:8c:5e:df:12:e7:c8:be:c5:13:80:89:83:47:8e:7d:af:
bb:b5:f7:06:15:f6:83:e5:79:89:d2:61:c2:93:9b:9f:e6:d6:
e2:5d:09:4f:b7:20:cd:55:6e:a7:e9:f8:d9:59:4c:37:c7:8b:
34:06:f3:8b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MjAxMzNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJEODQ4MTBFNjREMkRG
NzgyMTdGNDI0QkI4QzgxNjQzMjJCNjY1Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx6KMBmXas+PmrosqiZxYydA6reUGsIOGh3eZhObkgd3bz5U35
oLTogUkRflXk6lfrZqpSEAW6VFQRHpz3bUTUMMABU5pT+puOvygKEUlhRJeFFYLJ
7oYghl8RgT0J2xhIOKajtcMAl+4C/rVWL1YvCSpXRZC1BRwvP07JIJPGaMVqrLSo
7ymHFiYGwRuEGRoWmitIbYlyeqmuFBsigq19ApfZajCCoiJUw0J+Y4JdhvqOv4gc
Xz8ZwYZy577jY96yvhbvK5+9LeqYM6WWT5nUgvpT2rOMY1H6H9tuE4Lx2ka0nHxV
6xx4SWt3KnRrxM+JFARlZzy8RScPCxjLJVZdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvYSBDmTS33ghf0JLuMgWQyK2Zc8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3ZZU0JEbVRTMzNnaGYwSkx1TWdXUXlLMlpjOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxasQwDQYJKoZIhvcNAQELBQADggEBAMXLfN0UsOelZNGYjDyGaLbrwV7M
VgihpYAYXXns1td1lYGEXH4eDDH871xORnW2rciX72dvSy4q/cEJFxuLY/LsRQV/
YDwm+1LXTtZYznN0PREWrBW65EFG8u+YGRd3hezOwnk1XJBsNwffsWOIr5sypUsT
l2SFjJhE2vmFUlex55vbrNcWmdm9cxd+V3BY1rGyFBxwL5FE9FOvUMJ6QurP58Z8
AiGcIPR0cTGThet1Ut/1VE+t8So1xwKtU4FKSrRNzHd5oIlqjF7fEufIvsUTgImD
R459r7u19wYV9oPleYnSYcKTm5/m1uJdCU+3IM1Vbqfp+NlZTDfHizQG84s=
-----END CERTIFICATE-----
Generated at Mon Apr 14 22:22:22 2025 by rpki-client