Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa
File: veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa (raw, json)
Hash identifier: VKTl3KSQvluGlecgAlFmfXupF4AyVQYi8Wg8FDbAEUQ=
Subject key identifier: BD:E5:1E:DF:F6:40:D5:86:22:44:50:40:52:4F:25:E9:AF:4B:DA:BA
Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial: 4C
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa
Signing time: Tue 30 Apr 2024 01:28:46 +0000
ROA not before: Tue 30 Apr 2024 01:28:46 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 59125
IP address blocks: 1.21.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Validity
Not Before: Apr 30 01:28:46 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=BDE51EDFF640D58622445040524F25E9AF4BDABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:87:b7:95:ac:71:e0:6e:0c:a7:6a:bd:3c:
b6:2e:63:c0:8f:eb:c2:61:2d:a8:fb:da:2c:0e:bf:
21:81:9f:42:1a:e7:75:34:47:55:81:b9:91:9d:7b:
35:c5:ef:d2:6f:b8:c2:22:04:f3:ea:a7:98:f8:92:
ed:0c:7f:5f:98:55:5a:72:c4:6a:80:86:3d:1f:4d:
bf:05:41:9d:3e:d8:f6:a5:6c:9f:3d:5e:ab:9a:bc:
08:b6:77:c1:4c:bf:46:c0:eb:b9:0a:3e:3c:b6:6a:
ed:78:f6:db:77:73:ce:3f:9a:91:c5:d6:dd:05:02:
74:04:eb:54:1e:6a:95:ad:65:7f:d4:01:5a:59:d5:
12:c4:27:97:12:67:7a:b0:7b:95:f3:75:83:dd:ac:
9a:f0:cb:61:d5:16:94:ef:e2:ee:b3:7b:f0:6a:06:
10:84:4a:77:90:7c:83:97:25:3c:6b:da:d9:65:5e:
a5:61:63:02:88:b8:8b:83:a7:0b:0a:92:fd:c9:30:
79:fa:80:65:c7:7c:11:91:ca:65:0e:36:6c:df:b5:
c5:5f:7a:d9:6d:12:0c:42:fa:e1:d1:cc:60:aa:c3:
54:ef:7e:b5:34:c6:75:b4:c3:69:19:47:62:b2:7d:
4f:29:a3:cf:64:2a:57:bb:23:be:bf:6d:63:07:63:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:1E:DF:F6:40:D5:86:22:44:50:40:52:4F:25:E9:AF:4B:DA:BA
X509v3 Authority Key Identifier:
keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/veUe3_ZA1YYiRFBAUk8l6a9L2ro.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.21.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:96:c8:f0:75:99:8e:2c:dc:9e:4c:f4:38:75:77:0e:15:24:
d4:12:b1:5d:fc:ca:67:66:b2:43:14:0f:3a:a7:b4:7d:05:f9:
60:42:2c:68:00:0a:97:be:c3:42:d0:1d:81:8b:eb:e4:d8:b4:
90:00:33:9f:79:59:7d:6f:92:93:5f:21:d2:30:82:fe:01:3b:
b5:dc:4c:14:0f:67:d6:6c:86:2a:38:44:91:42:01:d6:9a:91:
cb:0a:41:87:47:21:30:45:0d:22:5b:50:81:c9:9e:0b:4c:86:
4b:c5:ac:5b:fa:2f:c7:48:84:12:6d:91:db:26:08:24:29:13:
4b:91:7d:fd:22:e7:ca:ef:5a:23:60:a8:b6:43:b1:f5:07:e8:
7f:6e:6a:e9:f9:35:a4:b0:b3:1b:7d:cb:14:fa:48:cc:88:94:
d7:65:72:c8:c3:d4:3c:5d:af:79:15:6c:fc:17:02:35:14:4a:
5b:ce:56:c6:27:62:c0:5d:c7:df:64:1a:a6:c4:78:c6:c4:cd:
ab:31:99:a9:fa:3f:08:e8:c1:e7:75:f5:3c:f3:36:12:ce:30:
b1:0e:43:c4:7a:a1:22:96:24:23:55:eb:34:d4:51:11:d0:07:
35:64:55:8b:f6:c6:aa:c7:a8:b5:9d:b0:69:3c:85:6c:0d:8d:
81:95:3e:16
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw
QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI0MDQzMDAx
Mjg0NloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQkRFNTFFREZGNjQwRDU4
NjIyNDQ1MDQwNTI0RjI1RTlBRjRCREFCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANN/h7eVrHHgbgynar08ti5jwI/rwmEtqPvaLA6/IYGfQhrndTRH
VYG5kZ17NcXv0m+4wiIE8+qnmPiS7Qx/X5hVWnLEaoCGPR9NvwVBnT7Y9qVsnz1e
q5q8CLZ3wUy/RsDruQo+PLZq7Xj223dzzj+akcXW3QUCdATrVB5qla1lf9QBWlnV
EsQnlxJnerB7lfN1g92smvDLYdUWlO/i7rN78GoGEIRKd5B8g5clPGva2WVepWFj
Aoi4i4OnCwqS/ckwefqAZcd8EZHKZQ42bN+1xV962W0SDEL64dHMYKrDVO9+tTTG
dbTDaRlHYrJ9Tymjz2QqV7sjvr9tYwdj7fMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS95R7f9kDVhiJEUEBSTyXpr0vaujAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg
qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96
YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzAvdmVVZTNfWkExWVlpUkZCQVVrOGw2YTlMMnJvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBAEVYDANBgkqhkiG9w0BAQsFAAOCAQEACpbI8HWZjizcnkz0OHV3DhUk1BKx
XfzKZ2ayQxQPOqe0fQX5YEIsaAAKl77DQtAdgYvr5Ni0kAAzn3lZfW+Sk18h0jCC
/gE7tdxMFA9n1myGKjhEkUIB1pqRywpBh0chMEUNIltQgcmeC0yGS8WsW/ovx0iE
Em2R2yYIJCkTS5F9/SLnyu9aI2CotkOx9Qfof25q6fk1pLCzG33LFPpIzIiU12Vy
yMPUPF2veRVs/BcCNRRKW85WxidiwF3H32QapsR4xsTNqzGZqfo/COjB53X1PPM2
Es4wsQ5DxHqhIpYkI1XrNNRREdAHNWRVi/bGqseotZ2waTyFbA2NgZU+Fg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:46 2025 by rpki-client