Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qvpHhUZM3kUxRHAXI4DLnTfxVu8.roa
File: qvpHhUZM3kUxRHAXI4DLnTfxVu8.roa (raw, json)
Hash identifier: xSmxxv8rJoPghtjQ7HNuGOMwkstEC/hHYmcqNCakkPo=
Subject key identifier: AA:FA:47:85:46:4C:DE:45:31:44:70:17:23:80:CB:9D:37:F1:56:EF
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 43
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qvpHhUZM3kUxRHAXI4DLnTfxVu8.roa
Signing time: Thu 01 Feb 2024 01:30:04 +0000
ROA not before: Thu 01 Feb 2024 01:30:04 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 4694
IP address blocks: 61.121.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Feb 1 01:30:04 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=AAFA4785464CDE45314470172380CB9D37F156EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:aa:e6:92:ea:9f:4f:d0:15:63:bb:92:69:
ec:13:eb:ff:8a:3d:fb:5a:09:c0:fd:b6:2b:88:c8:
5c:13:ce:87:0c:2b:ac:ae:81:13:14:a2:6b:b4:6e:
35:e9:94:d0:3f:a7:d5:41:26:7d:22:4d:41:5e:e4:
c8:a0:91:38:b6:61:a9:3f:97:f1:5f:b0:62:56:e1:
f0:f5:ca:67:27:f9:ee:28:a8:f4:7d:6b:a5:c7:d9:
07:c6:cf:58:9c:a2:81:92:43:ae:08:ac:7c:f0:64:
1b:85:1b:11:11:50:67:97:c1:3d:29:93:11:59:38:
37:ad:f9:2c:79:ab:87:a0:39:31:be:f4:88:6b:56:
b9:5e:7f:a8:5d:73:f5:a1:d0:4d:62:30:b7:a8:e6:
f9:c4:05:7c:02:40:9c:20:c6:43:da:43:ff:10:48:
39:50:5e:72:fe:5a:56:fe:0d:c7:09:9f:40:e1:bc:
7b:99:71:b9:2e:ec:fc:00:59:f6:43:18:59:28:08:
2a:52:14:14:a7:4f:b7:25:7c:6f:51:28:8c:d3:8e:
45:8a:da:3f:ee:f9:87:ee:1d:a7:f2:cb:4f:11:7b:
1c:76:69:69:97:d8:ec:d7:a2:b9:2e:60:7b:0b:16:
ff:45:b5:ac:77:09:ec:c4:0f:be:3b:9f:02:f8:f0:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:47:85:46:4C:DE:45:31:44:70:17:23:80:CB:9D:37:F1:56:EF
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qvpHhUZM3kUxRHAXI4DLnTfxVu8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.121.240.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4c:86:c3:bb:32:3e:80:72:2b:26:a0:22:c3:d6:82:e3:90:
da:61:0c:2d:f6:79:65:dd:91:c7:08:49:f6:b0:86:2e:7c:67:
7c:a1:27:79:40:7f:e3:e2:ce:3c:7b:e8:da:8d:ab:eb:62:31:
3e:25:6a:4e:26:bb:3f:8a:c6:ef:ff:5b:ca:49:3c:e8:09:6f:
11:8e:ee:3b:b8:9b:9f:ff:fa:79:5d:a3:86:87:d2:d6:b4:b3:
76:b5:66:61:91:08:d5:b8:a1:da:44:37:60:17:b5:e6:6b:db:
b3:75:00:ca:01:c8:86:df:30:ce:5f:0a:b0:0b:7d:eb:1a:dc:
ee:ba:b5:5d:c5:de:cf:79:64:39:b7:8b:49:b3:99:a2:7d:02:
ac:5f:6c:52:25:f4:0c:a1:29:1f:e6:80:b1:b5:3e:5d:3a:36:
24:d8:cb:12:ca:03:71:0f:ff:4e:df:26:b1:06:9e:91:52:77:
aa:1b:d5:b4:ed:4f:fe:f5:20:78:98:96:32:9e:7b:bc:39:1f:
0f:29:d9:eb:c3:ba:ba:dc:54:9e:d6:a2:65:f4:d8:ef:17:4f:
86:12:8d:ff:b4:1b:6e:fa:75:89:e3:aa:6e:4a:34:fc:b6:0e:
5c:d5:d2:52:0d:10:c3:fe:5c:36:04:f5:8f:23:e8:39:cd:24:
0f:a9:e7:d9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI0MDIwMTAx
MzAwNFoXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoQUFGQTQ3ODU0NjRDREU0
NTMxNDQ3MDE3MjM4MENCOUQzN0YxNTZFRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL1/quaS6p9P0BVju5Jp7BPr/4o9+1oJwP22K4jIXBPOhwwrrK6B
ExSia7RuNemU0D+n1UEmfSJNQV7kyKCROLZhqT+X8V+wYlbh8PXKZyf57iio9H1r
pcfZB8bPWJyigZJDrgisfPBkG4UbERFQZ5fBPSmTEVk4N635LHmrh6A5Mb70iGtW
uV5/qF1z9aHQTWIwt6jm+cQFfAJAnCDGQ9pD/xBIOVBecv5aVv4NxwmfQOG8e5lx
uS7s/ABZ9kMYWSgIKlIUFKdPtyV8b1EojNOORYraP+75h+4dp/LLTxF7HHZpaZfY
7NeiuS5gewsW/0W1rHcJ7MQPvjufAvjwdhECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSq+keFRkzeRTFEcBcjgMudN/FW7zAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL3F2cEhoVVpNM2tVeFJIQVhJNERMblRmeFZ1OC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAA9efAwDQYJKoZIhvcNAQELBQADggEBAEVMhsO7Mj6AcismoCLD1oLj
kNphDC32eWXdkccISfawhi58Z3yhJ3lAf+Pizjx76NqNq+tiMT4lak4muz+Kxu//
W8pJPOgJbxGO7ju4m5//+nldo4aH0ta0s3a1ZmGRCNW4odpEN2AXteZr27N1AMoB
yIbfMM5fCrALfesa3O66tV3F3s95ZDm3i0mzmaJ9AqxfbFIl9AyhKR/mgLG1Pl06
NiTYyxLKA3EP/07fJrEGnpFSd6ob1bTtT/71IHiYljKee7w5Hw8p2evDurrcVJ7W
omX02O8XT4YSjf+0G276dYnjqm5KNPy2DlzV0lINEMP+XDYE9Y8j6DnNJA+p59k=
-----END CERTIFICATE-----
Generated at Fri Oct 25 03:08:45 2024 by rpki-client on console-fra.rpki-client.org