Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa
File: p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa (raw, json)
Hash identifier: Thi6+HxQcJmX69AsnANkjclhraKLQWp/ZJdlrF/RbkE=
Subject key identifier: A7:72:B7:B7:C0:F0:2F:9B:9C:DD:CD:CA:C9:75:45:05:D4:CF:87:BA
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01B7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa
Signing time: Mon 01 May 2023 01:32:07 +0000
ROA not before: Mon 01 May 2023 01:32:07 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 124.214.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:32:07 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=A772B7B7C0F02F9B9CDDCDCAC9754505D4CF87BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:72:01:aa:4b:0f:26:6c:36:6d:8f:48:de:
a6:84:dd:ea:ee:73:59:95:c7:6a:59:c6:0d:6d:1e:
53:f7:e1:1c:f6:8f:86:87:44:e6:0b:a2:e7:90:25:
10:1b:81:22:b4:c7:da:7a:b2:ca:a3:56:89:5b:b4:
08:82:08:09:26:8d:c8:94:a4:b4:19:5a:06:e9:e5:
2e:99:26:ce:ef:0f:bf:da:e7:09:c4:d5:7b:84:12:
39:19:30:46:90:40:cb:c9:31:51:3c:d0:a4:50:be:
49:03:be:9f:ad:27:ad:ae:a0:54:fb:94:fb:8b:c9:
1f:b0:d5:13:44:4c:4e:85:97:f6:f7:b2:5e:9e:06:
92:09:e8:94:77:99:45:0b:cb:6b:db:07:cf:e5:34:
99:44:d4:a0:47:a9:28:61:38:33:3f:8c:cf:0c:08:
29:f2:0f:81:df:20:13:0e:9c:03:ae:45:54:16:2f:
5b:57:0c:23:99:b3:eb:de:d8:db:11:71:e9:b9:4b:
bc:da:a2:e5:a6:28:3b:5b:31:24:80:cb:17:56:42:
fe:11:e9:f0:8d:76:c1:81:6d:e0:b3:82:9d:55:ee:
e0:d5:80:fc:ae:93:54:35:91:ec:ee:76:9a:36:af:
9a:aa:4b:7e:a2:bd:be:c9:6f:20:3a:ba:98:51:07:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:B7:B7:C0:F0:2F:9B:9C:DD:CD:CA:C9:75:45:05:D4:CF:87:BA
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.214.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:ba:a8:b5:28:ed:80:c9:f6:00:e0:76:f2:17:d1:4b:72:c3:
eb:31:1a:a8:9f:d1:90:83:13:8f:1d:61:f7:41:0e:ff:72:b7:
61:10:0c:66:0f:4a:3d:5a:4e:c7:3a:ed:22:60:2c:fe:b1:18:
cf:21:5d:85:05:f3:36:c3:61:8b:01:62:c4:59:b9:94:96:eb:
82:ab:1d:0f:36:b0:b6:28:a0:a8:da:f5:b2:98:14:1d:96:d2:
02:d5:5f:68:94:8f:47:5a:61:95:b8:06:19:b9:72:80:9a:55:
33:6b:32:8b:91:96:d0:56:fe:c7:01:fc:5b:4d:eb:9d:d4:83:
a9:7b:d3:18:55:d9:cf:84:1f:db:8b:ba:89:44:12:be:c7:9b:
f4:6f:33:37:5b:9e:c1:ff:bc:e7:83:a4:ce:d6:86:8d:aa:e2:
7b:fc:55:12:21:e3:68:5c:7f:8b:1a:23:9e:db:5e:ac:dc:27:
65:85:fa:20:71:e8:56:b4:fe:c9:70:7f:a1:e8:9e:23:0c:40:
bf:a4:8d:1a:b4:92:7f:4a:ef:57:63:19:20:87:77:66:67:a5:
6e:33:95:f8:e1:cb:09:d6:a7:eb:05:28:e6:6c:d6:e9:02:7c:
77:57:f1:a3:65:d0:1d:e1:dd:a4:7f:5b:d2:16:c0:b7:a3:67:
3b:e7:f8:4b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMyMDdaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE3NzJCN0I3QzBGMDJG
OUI5Q0REQ0RDQUM5NzU0NTA1RDRDRjg3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnuXIBqksPJmw2bY9I3qaE3eruc1mVx2pZxg1tHlP34Rz2j4aH
ROYLoueQJRAbgSK0x9p6ssqjVolbtAiCCAkmjciUpLQZWgbp5S6ZJs7vD7/a5wnE
1XuEEjkZMEaQQMvJMVE80KRQvkkDvp+tJ62uoFT7lPuLyR+w1RNETE6Fl/b3sl6e
BpIJ6JR3mUULy2vbB8/lNJlE1KBHqShhODM/jM8MCCnyD4HfIBMOnAOuRVQWL1tX
DCOZs+ve2NsRcem5S7zaouWmKDtbMSSAyxdWQv4R6fCNdsGBbeCzgp1V7uDVgPyu
k1Q1kezudpo2r5qqS36ivb7JbyA6uphRB4tZAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUp3K3t8DwL5uc3c3KyXVFBdTPh7owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3AzSzN0OER3TDV1YzNjM0t5WFZGQmRUUGg3by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB81jANBgkqhkiG9w0BAQsFAAOCAQEAb7qotSjtgMn2AOB28hfRS3LD6zEa
qJ/RkIMTjx1h90EO/3K3YRAMZg9KPVpOxzrtImAs/rEYzyFdhQXzNsNhiwFixFm5
lJbrgqsdDzawtiigqNr1spgUHZbSAtVfaJSPR1phlbgGGblygJpVM2syi5GW0Fb+
xwH8W03rndSDqXvTGFXZz4Qf24u6iUQSvseb9G8zN1uewf+854OkztaGjarie/xV
EiHjaFx/ixojntterNwnZYX6IHHoVrT+yXB/oeieIwxAv6SNGrSSf0rvV2MZIId3
ZmelbjOV+OHLCdan6wUo5mzW6QJ8d1fxo2XQHeHdpH9b0hbAt6NnO+f4Sw==
-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:34 2024 by rpki-client on console-fra.rpki-client.org