![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/v7hpxDXJI4TUKKtEbO8vuiIYfbw.roa
File: v7hpxDXJI4TUKKtEbO8vuiIYfbw.roa (raw, json)
Hash identifier: MlIuKMPNsfBrcKugd38C7YQ+iufm+ZAHaUCiNE3vR4o=
Subject key identifier: BF:B8:69:C4:35:C9:23:84:D4:28:AB:44:6C:EF:2F:BA:22:18:7D:BC
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 58
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/v7hpxDXJI4TUKKtEbO8vuiIYfbw.roa
Signing time: Sat 31 Aug 2024 01:30:52 +0000
ROA not before: Sat 31 Aug 2024 01:30:52 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 17941
IP address blocks: 203.191.224.0/19 maxlen: 20
Validation: Failed, certificate revoked on Tue 01 Oct 2024 06:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Aug 31 01:30:52 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=BFB869C435C92384D428AB446CEF2FBA22187DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:63:b8:9d:ae:8e:98:d6:cf:1b:22:5b:fb:97:
bd:a8:ba:62:af:df:8b:50:5d:d8:4a:69:81:5c:df:
a8:5e:28:c6:62:4d:3f:16:db:ef:d2:d8:51:9b:b3:
84:af:15:2c:64:b5:49:8c:2f:bd:15:a4:0c:34:80:
ac:e2:09:05:33:73:ff:bb:9a:ba:a8:6f:4a:48:9c:
72:8e:11:df:80:28:54:03:96:4a:6a:fa:9f:db:7e:
3f:ef:0e:f7:4f:8f:b9:50:e1:8f:29:50:8b:28:ca:
4c:80:c1:0f:35:84:94:17:55:41:dc:ba:24:15:e7:
09:12:79:ec:f0:0b:52:75:fd:61:d1:a9:86:2f:4f:
2b:84:aa:b1:45:05:fd:10:15:b8:c1:c6:e5:1d:8c:
4c:74:08:9d:71:14:14:0f:07:df:9a:cc:f8:c8:b7:
ac:41:35:8d:ea:2a:93:55:17:af:b1:55:e7:ef:68:
90:e5:b2:63:b4:6a:60:32:a5:1e:1f:44:df:a2:ea:
9a:e6:a2:d8:78:ad:6a:6b:bd:72:b1:5d:b1:90:e9:
90:63:e8:de:3d:74:17:ed:ac:0a:1b:14:f6:82:f5:
02:fc:b7:26:5c:fb:09:f3:c9:24:5f:9c:3f:43:fc:
7e:3e:8c:f7:c0:97:e0:ac:79:7e:cf:50:bb:28:f0:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:69:C4:35:C9:23:84:D4:28:AB:44:6C:EF:2F:BA:22:18:7D:BC
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/v7hpxDXJI4TUKKtEbO8vuiIYfbw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
48:b5:ff:83:7a:ac:a2:8b:9d:7d:a0:74:02:93:86:bd:36:70:
c4:e5:25:01:11:ed:fe:df:a8:5d:a5:a5:f8:b8:ed:9c:b7:8e:
ef:00:e7:11:8a:8d:88:2c:ad:92:ac:54:d6:d3:54:2a:bd:0f:
cf:28:fd:0f:8b:a7:b1:59:a6:48:fd:c6:30:ee:e8:31:1c:f3:
2f:a8:f5:65:52:07:1f:2a:78:7d:af:b5:33:66:fc:04:f8:8f:
31:62:88:cc:f8:ae:17:3d:23:96:24:38:5b:ab:f4:81:89:08:
fb:8e:66:16:81:d1:f1:96:92:55:11:1e:42:97:af:84:c6:f4:
83:70:fd:4a:ca:52:b8:83:68:0e:bc:eb:b5:1a:e5:80:3f:01:
49:f7:b6:14:8e:50:1d:d1:f9:6a:0a:79:cb:78:59:28:c4:cd:
1e:2c:d9:d1:fb:12:c5:56:bb:e2:68:40:81:45:d2:94:74:82:
b7:9f:a2:34:ae:43:ad:4b:28:bf:e5:f4:be:b8:0a:ed:1d:0a:
87:aa:e3:de:e6:7d:89:9a:c8:2b:fb:13:a3:5a:fc:0f:17:d9:
79:98:81:04:e8:0e:c5:0a:1e:19:5f:97:86:73:b1:72:13:a7:
0d:fc:17:b7:6a:6e:b1:24:cb:d3:93:93:bd:8f:40:32:34:f1:
e7:0a:29:63
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDgzMTAx
MzA1MloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQkZCODY5QzQzNUM5MjM4
NEQ0MjhBQjQ0NkNFRjJGQkEyMjE4N0RCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPRjuJ2ujpjWzxsiW/uXvai6Yq/fi1Bd2EppgVzfqF4oxmJNPxbb
79LYUZuzhK8VLGS1SYwvvRWkDDSArOIJBTNz/7uauqhvSkicco4R34AoVAOWSmr6
n9t+P+8O90+PuVDhjylQiyjKTIDBDzWElBdVQdy6JBXnCRJ57PALUnX9YdGphi9P
K4SqsUUF/RAVuMHG5R2MTHQInXEUFA8H35rM+Mi3rEE1jeoqk1UXr7FV5+9okOWy
Y7RqYDKlHh9E36Lqmuai2Hitamu9crFdsZDpkGPo3j10F+2sChsU9oL1Avy3Jlz7
CfPJJF+cP0P8fj6M98CX4Kx5fs9Quyjw/ZsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS/uGnENckjhNQoq0Rs7y+6Ihh9vDAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyL3Y3aHB4RFhKSTRUVUtLdEViTzh2dWlJWWZidy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXLv+AwDQYJKoZIhvcNAQELBQADggEBAEi1/4N6rKKLnX2gdAKThr02
cMTlJQER7f7fqF2lpfi47Zy3ju8A5xGKjYgsrZKsVNbTVCq9D88o/Q+Lp7FZpkj9
xjDu6DEc8y+o9WVSBx8qeH2vtTNm/AT4jzFiiMz4rhc9I5YkOFur9IGJCPuOZhaB
0fGWklURHkKXr4TG9INw/UrKUriDaA6867Ua5YA/AUn3thSOUB3R+WoKect4WSjE
zR4s2dH7EsVWu+JoQIFF0pR0grefojSuQ61LKL/l9L64Cu0dCoeq497mfYmayCv7
E6Na/A8X2XmYgQToDsUKHhlfl4ZzsXITpw38F7dqbrEky9OTk72PQDI08ecKKWM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:06 2025 by rpki-client