Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/di2rzuotiE0z5LMLxpfZi2ReGrE.roa
File: di2rzuotiE0z5LMLxpfZi2ReGrE.roa (raw, json)
Hash identifier: GZWgA1ciio0dOf78E5rd8hcChgIHE8OpSf7JMHfjd+k=
Subject key identifier: 76:2D:AB:CE:EA:2D:88:4D:33:E4:B3:0B:C6:97:D9:8B:64:5E:1A:B1
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 01B3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/di2rzuotiE0z5LMLxpfZi2ReGrE.roa
Signing time: Wed 01 Nov 2023 01:29:16 +0000
ROA not before: Wed 01 Nov 2023 01:29:16 +0000
ROA not after: Mon 14 Oct 2024 01:30:03 +0000
asID: 9371
IP address blocks: 210.224.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 01:29:16 2023 GMT
Not After : Oct 14 01:30:03 2024 GMT
Subject: CN=762DABCEEA2D884D33E4B30BC697D98B645E1AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:d4:a0:07:33:4d:4c:da:72:a3:1f:dc:da:
88:a1:74:a9:81:90:c5:97:c0:58:26:c1:5a:27:86:
10:05:65:ba:46:d9:1f:81:98:b1:24:db:b5:7b:3c:
e7:9b:e9:4d:05:b7:3b:78:f1:00:10:b9:00:16:db:
39:6b:bd:c6:e0:44:ba:6f:2b:63:bd:40:fd:0d:a7:
fb:68:a8:1d:16:f1:87:fc:4e:b5:3e:3d:45:f1:79:
8e:f7:90:89:12:0f:7e:21:f6:d3:50:83:1b:93:58:
63:cc:24:a3:0b:51:87:18:c6:40:51:fe:4e:40:de:
37:fe:8b:00:0f:88:86:6f:31:39:4c:40:fe:08:8e:
2e:24:47:98:cf:32:c9:7e:75:f0:6e:23:49:05:57:
23:07:28:8a:55:b2:ff:84:13:d0:c8:5e:5f:7b:fd:
25:8f:23:26:a5:f2:e9:24:1d:10:3e:fc:90:bb:a4:
48:fd:7e:80:65:95:c0:6d:d1:84:6c:b8:d1:32:bb:
1f:79:29:90:70:57:5c:9b:96:b0:11:be:99:35:40:
91:e8:7d:5d:46:54:7e:f6:3a:10:96:91:c1:66:8b:
88:e9:bb:76:95:31:6c:b2:0e:e8:4d:12:45:c5:ea:
17:1d:78:b3:36:8f:99:f8:fa:ca:27:87:a7:7b:df:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:AB:CE:EA:2D:88:4D:33:E4:B3:0B:C6:97:D9:8B:64:5E:1A:B1
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/di2rzuotiE0z5LMLxpfZi2ReGrE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.224.160.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:8f:b6:25:15:b4:5b:a7:dc:6d:0d:a3:68:ac:b1:56:7b:07:
ed:47:de:cc:eb:e2:9d:2f:14:eb:28:26:25:97:8e:56:e7:16:
6e:e9:41:f9:10:9a:53:9a:38:e2:81:ff:8f:fe:36:62:98:2b:
d6:36:7e:95:8b:87:01:d1:d5:13:00:6e:f1:f6:34:4a:e3:37:
bc:8f:f5:69:be:ef:55:47:50:38:28:df:ce:75:e7:1a:89:4a:
21:ee:eb:ea:12:c1:ba:5d:9d:70:4e:5a:92:92:6c:2a:97:f2:
40:e8:a4:10:57:30:01:14:34:00:54:0a:f0:5c:bb:65:f6:84:
88:a9:7d:48:89:fa:02:c4:17:d3:da:70:fc:c3:20:88:31:95:
81:9a:65:d6:b4:41:19:ef:23:60:56:b5:4f:9f:41:1a:ac:bd:
7e:5c:69:04:d3:33:a2:5f:a4:9e:93:5b:4b:50:be:aa:03:9a:
aa:b0:1a:41:b8:5d:0a:96:fb:19:9f:8d:56:a0:98:50:1b:f9:
1c:7c:df:1d:80:cd:c0:77:33:99:ca:b8:35:bb:53:d0:8c:7d:
aa:3d:b8:28:b5:5b:55:33:09:8f:86:c3:c8:81:a4:01:59:58:
73:92:72:6e:76:6e:65:c6:88:de:30:27:22:4a:81:66:3c:1f:
34:db:e7:b6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTI5MTZaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDc2MkRBQkNFRUEyRDg4
NEQzM0U0QjMwQkM2OTdEOThCNjQ1RTFBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwR9SgBzNNTNpyox/c2oihdKmBkMWXwFgmwVonhhAFZbpG2R+B
mLEk27V7POeb6U0Ftzt48QAQuQAW2zlrvcbgRLpvK2O9QP0Np/toqB0W8Yf8TrU+
PUXxeY73kIkSD34h9tNQgxuTWGPMJKMLUYcYxkBR/k5A3jf+iwAPiIZvMTlMQP4I
ji4kR5jPMsl+dfBuI0kFVyMHKIpVsv+EE9DIXl97/SWPIyal8ukkHRA+/JC7pEj9
foBllcBt0YRsuNEyux95KZBwV1yblrARvpk1QJHofV1GVH72OhCWkcFmi4jpu3aV
MWyyDuhNEkXF6hcdeLM2j5n4+sonh6d732SpAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUdi2rzuotiE0z5LMLxpfZi2ReGrEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9kaTJyenVvdGlFMHo1TE1MeHBmWmkyUmVHckUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE0uCgMA0GCSqGSIb3DQEBCwUAA4IBAQClj7YlFbRbp9xtDaNorLFW
ewftR97M6+KdLxTrKCYll45W5xZu6UH5EJpTmjjigf+P/jZimCvWNn6Vi4cB0dUT
AG7x9jRK4ze8j/Vpvu9VR1A4KN/OdecaiUoh7uvqEsG6XZ1wTlqSkmwql/JA6KQQ
VzABFDQAVArwXLtl9oSIqX1IifoCxBfT2nD8wyCIMZWBmmXWtEEZ7yNgVrVPn0Ea
rL1+XGkE0zOiX6Sek1tLUL6qA5qqsBpBuF0KlvsZn41WoJhQG/kcfN8dgM3AdzOZ
yrg1u1PQjH2qPbgotVtVMwmPhsPIgaQBWVhzknJudm5lxojeMCciSoFmPB802+e2
-----END CERTIFICATE-----
Generated at Mon Sep 30 04:40:47 2024 by rpki-client on console-ams.rpki-client.org