Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/cLXM4ERwsDghzAzaXKMYNC9omaM.roa
File: cLXM4ERwsDghzAzaXKMYNC9omaM.roa (raw, json)
Hash identifier: LOS3ZQskaJwNNmE8K4bEiQvHmwsI4LQXVS1jr9jg+3U=
Subject key identifier: 70:B5:CC:E0:44:70:B0:38:21:CC:0C:DA:5C:A3:18:34:2F:68:99:A3
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 59
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/cLXM4ERwsDghzAzaXKMYNC9omaM.roa
Signing time: Wed 01 Feb 2023 01:30:01 +0000
ROA not before: Wed 01 Feb 2023 01:30:01 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 9351
IP address blocks: 210.236.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Feb 1 01:30:01 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=70B5CCE04470B03821CC0CDA5CA318342F6899A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:ba:cb:a5:50:4c:74:48:c1:4f:3a:c5:04:
a6:37:7d:1b:e8:10:7a:00:fa:0c:dc:a9:38:d6:ba:
7b:1b:db:5e:52:d5:20:70:2b:69:75:3f:02:43:c8:
b4:f8:c4:90:04:11:92:49:80:e9:aa:e8:e4:e5:87:
5d:e6:3a:43:f0:cd:72:f8:33:98:79:00:0d:61:91:
f0:2d:3c:99:87:4f:06:e0:f5:9e:7d:6b:88:1b:30:
56:fa:88:14:b1:85:10:31:ee:be:ae:6f:8a:81:3b:
d5:7f:96:e5:6b:1f:f4:f1:6c:7e:cc:99:dd:10:d2:
d4:69:38:66:19:f8:6b:03:08:c0:b7:d7:ac:fb:d6:
c5:66:ec:2c:b2:e7:de:fd:6f:ce:b4:1d:67:5c:c0:
d0:d7:36:84:2d:87:11:d5:6d:c4:f3:af:75:cb:2c:
a5:9f:40:8a:5a:8c:d2:b3:0a:b5:ec:fd:d6:b2:21:
bd:29:8d:76:05:1b:02:21:90:21:f7:5a:02:ff:37:
da:df:0c:aa:e7:de:d1:7c:b7:3b:b3:16:18:0e:bc:
0f:7e:d0:89:af:5f:99:b1:d4:3e:64:cd:f0:ac:76:
07:fe:7f:ef:c4:0d:f7:c9:a5:9c:17:a4:59:c4:c7:
f2:f4:eb:09:87:8c:ba:d5:0b:d1:3e:59:54:05:7c:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:CC:E0:44:70:B0:38:21:CC:0C:DA:5C:A3:18:34:2F:68:99:A3
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/cLXM4ERwsDghzAzaXKMYNC9omaM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.236.160.0/19
Signature Algorithm: sha256WithRSAEncryption
34:79:28:9c:bf:9a:a0:f2:0f:00:6f:43:e3:23:b9:2f:a3:b6:
02:14:43:d6:b8:67:9d:5f:da:a5:09:a4:43:94:c4:d8:8b:ca:
79:2d:08:ca:c0:f5:67:55:99:75:1b:16:3e:95:73:03:a6:03:
d8:0f:7a:ec:fb:fe:20:94:53:f6:b5:c9:de:7a:78:e3:3d:98:
70:b0:a4:63:ac:5b:02:ea:25:3c:76:e8:25:5a:dc:d1:04:cd:
3a:67:f5:91:ab:88:cc:79:76:cc:59:69:d9:82:bc:65:a8:b2:
0a:26:e9:ef:4c:aa:6b:20:76:66:67:c9:7b:3e:32:82:71:45:
47:4d:c3:ca:e0:41:b2:80:b4:b2:57:3e:3a:62:0d:43:26:5e:
a5:f8:02:96:52:3f:1a:f7:ec:69:d0:85:e2:d9:3a:e8:cf:29:
69:44:89:ac:7a:b5:5f:1e:38:72:5d:67:e8:db:4a:5f:5b:d8:
6d:f5:85:51:91:16:cb:ad:77:dd:98:cd:9d:85:f4:2b:59:1a:
73:44:77:7a:09:5d:6b:e2:1c:2c:8e:0c:08:12:53:6b:00:e1:
f1:f1:14:f7:71:6e:87:73:c1:95:a6:0b:6a:67:5b:bc:57:5c:
c9:6b:50:58:a5:4b:16:f9:77:95:79:63:b8:02:4d:47:86:1d:
d4:ae:be:d6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MDBF
RjM1OEJDQkUxNEEzNThDQTRFRUU0MUI0RTkwREM5MjNFOUQyMB4XDTIzMDIwMTAx
MzAwMVoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNzBCNUNDRTA0NDcwQjAz
ODIxQ0MwQ0RBNUNBMzE4MzQyRjY4OTlBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7QusulUEx0SMFPOsUEpjd9G+gQegD6DNypONa6exvbXlLVIHAr
aXU/AkPItPjEkAQRkkmA6aro5OWHXeY6Q/DNcvgzmHkADWGR8C08mYdPBuD1nn1r
iBswVvqIFLGFEDHuvq5vioE71X+W5Wsf9PFsfsyZ3RDS1Gk4Zhn4awMIwLfXrPvW
xWbsLLLn3v1vzrQdZ1zA0Nc2hC2HEdVtxPOvdcsspZ9AilqM0rMKtez91rIhvSmN
dgUbAiGQIfdaAv832t8Mqufe0Xy3O7MWGA68D37Qia9fmbHUPmTN8Kx2B/5/78QN
98mlnBekWcTH8vTrCYeMutUL0T5ZVAV8szcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRwtczgRHCwOCHMDNpcoxg0L2iZozAfBgNVHSMEGDAWgBRQDvNYvL4Uo1jKTu5B
tOkNySPp0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L1VBN3pXTHktRktOWXlrN3VRYlRwRGNrajZkSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VBN3pXTHktRktOWXlrN3VRYlRwRGNr
ajZkSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzQvY0xYTTRFUndzRGdoekF6YVhLTVlOQzlvbWFNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdLsoDANBgkqhkiG9w0BAQsFAAOCAQEANHkonL+aoPIPAG9D4yO5L6O2AhRD
1rhnnV/apQmkQ5TE2IvKeS0IysD1Z1WZdRsWPpVzA6YD2A967Pv+IJRT9rXJ3np4
4z2YcLCkY6xbAuolPHboJVrc0QTNOmf1kauIzHl2zFlp2YK8ZaiyCibp70yqayB2
ZmfJez4ygnFFR03DyuBBsoC0slc+OmINQyZepfgCllI/GvfsadCF4tk66M8paUSJ
rHq1Xx44cl1n6NtKX1vYbfWFUZEWy6133ZjNnYX0K1kac0R3eglda+IcLI4MCBJT
awDh8fEU93Fuh3PBlaYLamdbvFdcyWtQWKVLFvl3lXljuAJNR4Yd1K6+1g==
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:22:59 2024 by rpki-client on console-fra.rpki-client.org