Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/D7-hgd0749hqZeARfcRgeGp-f2w.roa
File: D7-hgd0749hqZeARfcRgeGp-f2w.roa (raw, json)
Hash identifier: qHL6F9PAeSYVYlmb6KHFH0IQJrxdGTzyj9BxghGWiBE=
Subject key identifier: 0F:BF:A1:81:DD:3B:E3:D8:6A:65:E0:11:7D:C4:60:78:6A:7E:7F:6C
Certificate issuer: /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial: 02
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/D7-hgd0749hqZeARfcRgeGp-f2w.roa
Signing time: Fri 12 Apr 2024 05:43:38 +0000
ROA not before: Fri 12 Apr 2024 05:43:38 +0000
ROA not after: Sat 12 Apr 2025 05:36:12 +0000
asID: 23775
IP address blocks: 180.235.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 29 Mar 2025 05:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Validity
Not Before: Apr 12 05:43:38 2024 GMT
Not After : Apr 12 05:36:12 2025 GMT
Subject: CN=0FBFA181DD3BE3D86A65E0117DC460786A7E7F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:e9:ca:17:2d:e1:8d:1a:4b:fa:36:c9:00:
01:9e:15:0b:f1:28:8e:ea:e4:6d:43:7d:cf:84:38:
22:df:af:4f:61:56:ee:72:a9:22:a0:f4:23:10:d0:
60:44:91:f0:24:78:8e:e7:27:20:2e:44:15:38:f4:
5b:bf:62:f1:14:43:6f:08:8e:21:f6:16:de:1d:a7:
a3:75:08:dd:e9:7f:31:f9:50:10:88:41:e7:43:99:
c4:4a:53:fd:2e:73:9c:04:2e:75:79:bc:41:f8:12:
98:95:8e:9e:fa:75:c9:a2:f7:9f:59:0f:4a:90:31:
47:e3:b7:18:cb:37:c6:bd:e8:00:ac:eb:06:6e:fc:
4c:f3:7c:13:32:c9:40:dc:b3:65:c6:73:ef:b7:07:
b2:48:49:d0:fe:0e:81:9a:5b:c4:f6:1f:d6:8f:12:
d9:cc:75:d6:ca:35:13:8d:82:31:29:6b:27:09:79:
d7:32:99:7d:a5:dd:e6:5e:81:b8:7d:ee:68:7b:b6:
f2:ea:c9:94:86:1c:00:ed:e8:6f:c0:e1:1b:a8:da:
5f:3d:85:a8:3d:ea:1b:73:65:fc:76:ec:cb:73:a5:
4e:81:f8:16:27:35:66:73:bc:e5:02:c5:c0:c8:40:
3b:b6:39:c3:d3:89:dd:e3:ad:d4:87:00:af:f8:cc:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:A1:81:DD:3B:E3:D8:6A:65:E0:11:7D:C4:60:78:6A:7E:7F:6C
X509v3 Authority Key Identifier:
keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/D7-hgd0749hqZeARfcRgeGp-f2w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.235.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f9:73:9e:aa:ca:0d:7d:69:3c:7f:c3:67:e5:96:48:8b:d9:
ae:4c:3e:48:b4:9c:5d:80:5e:81:57:6d:07:fa:40:d0:c0:5f:
a2:94:ae:3e:00:de:f6:78:92:af:4e:bb:7f:92:c3:64:10:92:
ef:98:e5:e1:be:8a:cc:f0:65:27:ff:a4:f9:0e:9a:67:78:c8:
66:55:88:d3:c9:df:92:9c:64:f1:28:51:bb:00:5e:39:85:84:
ef:86:a2:23:d8:32:ad:6b:00:90:16:e2:2e:2f:62:17:9e:bb:
4d:a4:27:57:80:50:cb:a0:0b:01:b1:3e:66:22:ac:a4:c9:e2:
27:ea:58:ca:c1:cb:ad:17:dd:00:d8:41:d6:2e:fb:bc:a7:7f:
62:1c:d3:33:83:bb:71:f8:fd:4c:13:0e:b6:e5:fe:86:34:24:
9e:62:ec:f8:9b:d3:b7:b1:c4:a4:dd:7c:db:cd:5f:08:38:f8:
ee:55:03:00:0e:8c:8e:c6:77:28:6a:b9:4e:34:3f:2f:f6:0c:
98:53:81:9b:02:58:4c:24:fb:16:4d:d3:3d:2d:9d:2c:15:42:
69:3d:89:b5:81:90:cf:db:9b:37:e0:c4:93:b5:81:b8:d1:74:
c1:61:7b:f2:04:60:63:7f:ce:49:75:97:96:a3:3c:13:32:01:
08:7d:52:4e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NUYz
NUE4MkEyMzZCQ0VEODE5MDg4RDREOTA4ODdFMEI5NjVDN0NGMB4XDTI0MDQxMjA1
NDMzOFoXDTI1MDQxMjA1MzYxMlowMzExMC8GA1UEAxMoMEZCRkExODFERDNCRTNE
ODZBNjVFMDExN0RDNDYwNzg2QTdFN0Y2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJoa6coXLeGNGkv6NskAAZ4VC/EojurkbUN9z4Q4It+vT2FW7nKp
IqD0IxDQYESR8CR4jucnIC5EFTj0W79i8RRDbwiOIfYW3h2no3UI3el/MflQEIhB
50OZxEpT/S5znAQudXm8QfgSmJWOnvp1yaL3n1kPSpAxR+O3GMs3xr3oAKzrBm78
TPN8EzLJQNyzZcZz77cHskhJ0P4OgZpbxPYf1o8S2cx11so1E42CMSlrJwl51zKZ
faXd5l6BuH3uaHu28urJlIYcAO3ob8DhG6jaXz2FqD3qG3Nl/Hbsy3OlToH4Fic1
ZnO85QLFwMhAO7Y5w9OJ3eOt1IcAr/jMLN8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQPv6GB3Tvj2Gpl4BF9xGB4an5/bDAfBgNVHSMEGDAWgBRV81qCoja87YGQiNTZ
CIfguWXHzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQ4L1ZmTmFncUkydk8yQmtJalUyUWlINExsbHg4OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZmTmFncUkydk8yQmtJalUyUWlINExs
bHg4OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDgvRDctaGdkMDc0OWhxWmVBUmZjUmdlR3AtZjJ3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTrjDANBgkqhkiG9w0BAQsFAAOCAQEAqPlznqrKDX1pPH/DZ+WWSIvZrkw+
SLScXYBegVdtB/pA0MBfopSuPgDe9niSr067f5LDZBCS75jl4b6KzPBlJ/+k+Q6a
Z3jIZlWI08nfkpxk8ShRuwBeOYWE74aiI9gyrWsAkBbiLi9iF567TaQnV4BQy6AL
AbE+ZiKspMniJ+pYysHLrRfdANhB1i77vKd/YhzTM4O7cfj9TBMOtuX+hjQknmLs
+JvTt7HEpN18281fCDj47lUDAA6MjsZ3KGq5TjQ/L/YMmFOBmwJYTCT7Fk3TPS2d
LBVCaT2JtYGQz9ubN+DEk7WBuNF0wWF78gRgY3/OSXWXlqM8EzIBCH1STg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:27 2025 by rpki-client