Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ge_WTced_Q9xXB2DDHDOpHMUXh0.roa
File: Ge_WTced_Q9xXB2DDHDOpHMUXh0.roa (raw, json)
Hash identifier: ajSUYbZhVLxGYkQK6iz/465Yng75m8M36ZNZ+uE3REU=
Subject key identifier: 19:EF:D6:4D:C7:9D:FD:0F:71:5C:1D:83:0C:70:CE:A4:73:14:5E:1D
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0398
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ge_WTced_Q9xXB2DDHDOpHMUXh0.roa
Signing time: Sat 31 Aug 2024 01:34:39 +0000
ROA not before: Sat 31 Aug 2024 01:34:39 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 2516
IP address blocks: 121.111.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Aug 31 01:34:39 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=19EFD64DC79DFD0F715C1D830C70CEA473145E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:a9:f3:dd:3a:ec:14:9a:8a:32:56:f7:f0:
a3:75:1d:8c:ac:2d:51:09:c9:6c:f1:1f:80:5b:11:
6b:b0:d2:f6:be:96:bd:e5:6f:42:84:b3:1a:93:38:
f6:0a:df:4d:2f:f3:e9:9e:c6:15:4d:69:55:b8:52:
70:fc:7e:fe:fd:02:4a:e9:bf:f7:3d:d2:4f:b8:be:
16:3a:ec:b8:35:f6:02:6c:9a:21:e6:55:c7:6a:6c:
82:fa:72:44:d8:0a:5e:1d:18:4b:54:fc:3f:8c:ad:
f7:7b:c9:40:64:3e:e4:8f:39:1f:d2:18:38:63:17:
14:73:49:ab:71:6d:91:ca:29:05:33:47:9d:33:f2:
61:e6:95:09:33:a1:14:ca:d5:12:09:cb:da:ca:bd:
32:4c:95:e9:e3:24:20:d6:72:06:81:ba:67:34:c9:
0c:24:a0:e0:bc:3c:50:0c:2b:41:71:98:7c:da:61:
b9:fc:53:1b:ec:73:ad:a2:6e:bd:a1:ee:f2:48:0e:
fa:b2:56:63:8a:b5:0a:e1:3e:1b:ff:a3:48:7f:67:
12:06:59:0b:51:ea:5b:8b:50:f3:92:cf:86:77:10:
40:9b:34:02:a6:fb:36:ee:13:02:db:b0:51:6d:21:
78:25:49:15:13:75:d0:5d:09:b7:13:f9:71:1d:e3:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:D6:4D:C7:9D:FD:0F:71:5C:1D:83:0C:70:CE:A4:73:14:5E:1D
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ge_WTced_Q9xXB2DDHDOpHMUXh0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.111.224.0/19
Signature Algorithm: sha256WithRSAEncryption
90:4d:1a:b0:2f:45:82:3a:bc:55:6e:d4:d2:ac:63:2b:fb:d0:
b9:bc:6e:b0:50:8a:aa:74:33:57:5e:4c:4a:12:87:ea:0f:26:
a1:77:ba:2b:ee:aa:39:0a:0e:a2:05:e0:7a:8c:a0:b8:85:6c:
4e:27:21:50:3d:17:fe:55:ab:ee:05:2f:ef:3a:09:e9:86:4b:
91:b6:6a:6e:e3:9c:14:07:6e:8e:85:c3:f4:3f:e8:1a:65:89:
5b:a0:19:35:76:24:e5:88:e5:db:85:08:6e:3f:c3:e8:0c:8b:
77:d0:a5:48:f8:10:5e:eb:4c:93:df:ae:84:8f:bb:91:ec:f5:
3e:98:07:63:32:67:6f:d6:d9:ef:61:9b:c8:8c:97:f3:1e:40:
b2:2a:af:4e:a9:54:df:2e:26:21:c5:c9:66:6d:eb:ce:63:06:
86:5c:62:9c:89:89:6c:87:7a:0d:f6:6d:dc:0d:97:fd:d5:b0:
95:29:f4:83:99:70:79:d9:49:f4:37:e7:36:d8:f4:21:ea:e9:
62:76:bb:af:78:30:b2:3f:0b:a3:b4:7e:f0:7d:94:db:cd:40:
3c:ff:8a:44:ea:28:ae:ab:e3:ec:1f:4c:30:dd:20:0c:5d:08:
0e:3b:b7:84:e0:9d:1a:b8:7d:9f:a5:57:e4:4b:68:fc:6d:25:
61:b4:f8:46
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDA4MzEw
MTM0MzlaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5RUZENjREQzc5REZE
MEY3MTVDMUQ4MzBDNzBDRUE0NzMxNDVFMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlI6nz3TrsFJqKMlb38KN1HYysLVEJyWzxH4BbEWuw0va+lr3l
b0KEsxqTOPYK300v8+mexhVNaVW4UnD8fv79Akrpv/c90k+4vhY67Lg19gJsmiHm
VcdqbIL6ckTYCl4dGEtU/D+Mrfd7yUBkPuSPOR/SGDhjFxRzSatxbZHKKQUzR50z
8mHmlQkzoRTK1RIJy9rKvTJMlenjJCDWcgaBumc0yQwkoOC8PFAMK0FxmHzaYbn8
Uxvsc62ibr2h7vJIDvqyVmOKtQrhPhv/o0h/ZxIGWQtR6luLUPOSz4Z3EECbNAKm
+zbuEwLbsFFtIXglSRUTddBdCbcT+XEd462tAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGe/WTced/Q9xXB2DDHDOpHMUXh0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0dlX1dUY2VkX1E5eFhCMkRESERPcEhNVVhoMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAV5b+AwDQYJKoZIhvcNAQELBQADggEBAJBNGrAvRYI6vFVu1NKsYyv70Lm8
brBQiqp0M1deTEoSh+oPJqF3uivuqjkKDqIF4HqMoLiFbE4nIVA9F/5Vq+4FL+86
CemGS5G2am7jnBQHbo6Fw/Q/6BpliVugGTV2JOWI5duFCG4/w+gMi3fQpUj4EF7r
TJPfroSPu5Hs9T6YB2MyZ2/W2e9hm8iMl/MeQLIqr06pVN8uJiHFyWZt685jBoZc
YpyJiWyHeg32bdwNl/3VsJUp9IOZcHnZSfQ35zbY9CHq6WJ2u694MLI/C6O0fvB9
lNvNQDz/ikTqKK6r4+wfTDDdIAxdCA47t4TgnRq4fZ+lV+RLaPxtJWG0+EY=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:50:36 2025 by rpki-client