Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/gMX8p8veb87U4WzHbKoAuziCaMc.roa
File: gMX8p8veb87U4WzHbKoAuziCaMc.roa (raw, json)
Hash identifier: 0vLTjpMCuq8dwUW8X3QO81CsH+JplfHYXP/Ys9v96DU=
Subject key identifier: 80:C5:FC:A7:CB:DE:6F:CE:D4:E1:6C:C7:6C:AA:00:BB:38:82:68:C7
Certificate issuer: /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Certificate serial: 03
Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/gMX8p8veb87U4WzHbKoAuziCaMc.roa
Signing time: Wed 04 Oct 2023 03:08:41 +0000
ROA not before: Wed 04 Oct 2023 03:08:41 +0000
ROA not after: Wed 02 Oct 2024 05:56:19 +0000
asID: 4685
IP address blocks: 2405:6580::/29 maxlen: 30
Validation: Failed, certificate revoked on Wed 18 Sep 2024 05:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Validity
Not Before: Oct 4 03:08:41 2023 GMT
Not After : Oct 2 05:56:19 2024 GMT
Subject: CN=80C5FCA7CBDE6FCED4E16CC76CAA00BB388268C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:28:06:85:b4:60:39:79:20:be:4a:82:17:
63:35:c7:30:ed:74:d2:fe:6a:64:1c:28:01:2a:49:
85:f8:2d:1e:c1:3d:36:5f:1d:41:29:a1:79:54:05:
1e:34:6a:1e:cc:7e:53:c4:27:bc:1b:05:40:6b:c0:
04:3c:96:51:ca:80:68:64:c5:62:9a:85:e2:59:75:
04:e9:85:60:01:6a:36:03:90:17:0b:2b:07:b3:21:
d8:a9:0c:05:6f:4b:e2:72:3c:2a:69:45:02:dc:cb:
d3:d2:81:b0:fa:ec:75:aa:71:cf:32:25:f5:9c:54:
90:94:73:f1:49:60:00:fe:5c:61:cf:2f:d8:4c:10:
9e:0c:48:d0:20:93:3b:c9:9e:b0:2b:fe:63:94:62:
2d:d6:b2:f6:e7:0c:c1:d3:13:f0:e8:08:bc:d2:ba:
33:da:9d:d3:39:a7:df:f1:93:86:0a:ce:de:51:96:
1e:05:7c:cf:3c:d6:65:4d:9b:c5:28:f9:98:d6:c9:
21:ba:7a:17:c2:af:18:71:c2:59:90:e4:fd:2c:03:
71:75:ed:58:34:6d:c6:70:47:4d:bf:de:cc:c3:d2:
6f:3d:02:30:b1:94:f9:52:7c:2e:c2:38:35:68:e5:
fa:72:5d:c7:2f:60:fd:a6:6c:10:b3:61:27:7f:4d:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:FC:A7:CB:DE:6F:CE:D4:E1:6C:C7:6C:AA:00:BB:38:82:68:C7
X509v3 Authority Key Identifier:
keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/gMX8p8veb87U4WzHbKoAuziCaMc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:6580::/29
Signature Algorithm: sha256WithRSAEncryption
be:b0:e4:7a:fa:73:43:7a:fd:58:d9:0c:ef:63:eb:f9:f9:84:
09:d6:d1:ef:03:00:9a:d2:d6:26:20:db:bf:17:bd:d8:ce:29:
02:21:57:89:a3:50:c7:d0:03:cf:f9:8e:86:aa:99:d5:47:5c:
75:71:83:86:17:6d:cd:13:98:19:ec:af:24:2d:b0:f1:5e:eb:
83:12:fe:f1:16:f2:3b:c1:95:ee:d5:5d:4d:b8:ce:d4:a4:33:
01:de:f7:17:2d:1a:06:ef:ce:d8:d5:99:7b:e4:2e:d5:39:58:
3e:13:4d:e4:cd:5e:0c:fa:fa:67:da:7b:c7:68:61:e6:2d:18:
37:0c:bb:50:b8:48:63:70:31:5c:93:86:42:63:fe:f4:1f:45:
0f:4c:58:ef:02:ed:23:80:22:62:03:5f:ff:f7:5a:ff:6f:f1:
4b:54:86:0f:7b:66:a9:e1:f0:e4:d4:ad:18:bc:79:65:f2:60:
3f:39:98:34:b8:84:00:25:88:b3:d9:c4:66:b4:0c:d5:66:0d:
63:c5:96:f4:1a:a3:9e:66:fd:46:b0:f3:6e:f6:dc:90:7f:37:
06:0a:7c:80:93:07:eb:1c:52:52:08:7a:89:a8:9d:de:1e:b0:
f5:bd:e5:34:05:b6:cc:16:34:30:45:86:fd:f3:0c:77:22:e7:
11:5a:31:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTgx
NkY1REVGMDIzQTlDQjRBNDBCQkQzQ0M2M0ZGREY5MTAzRUEzMB4XDTIzMTAwNDAz
MDg0MVoXDTI0MTAwMjA1NTYxOVowMzExMC8GA1UEAxMoODBDNUZDQTdDQkRFNkZD
RUQ0RTE2Q0M3NkNBQTAwQkIzODgyNjhDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANVgKAaFtGA5eSC+SoIXYzXHMO100v5qZBwoASpJhfgtHsE9Nl8d
QSmheVQFHjRqHsx+U8QnvBsFQGvABDyWUcqAaGTFYpqF4ll1BOmFYAFqNgOQFwsr
B7Mh2KkMBW9L4nI8KmlFAtzL09KBsPrsdapxzzIl9ZxUkJRz8UlgAP5cYc8v2EwQ
ngxI0CCTO8mesCv+Y5RiLday9ucMwdMT8OgIvNK6M9qd0zmn3/GThgrO3lGWHgV8
zzzWZU2bxSj5mNbJIbp6F8KvGHHCWZDk/SwDcXXtWDRtxnBHTb/ezMPSbz0CMLGU
+VJ8LsI4NWjl+nJdxy9g/aZsELNhJ39NR8UCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSAxfyny95vztThbMdsqgC7OIJoxzAfBgNVHSMEGDAWgBRegW9d7wI6nLSkC708
xj/9+RA+ozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjUvWG9GdlhlOENPcHkwcEF1OVBNWV9fZmtRUHFNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWG9GdlhlOENPcHkwcEF1OVBNWV9f
ZmtRUHFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY1L2dNWDhwOHZlYjg3VTRXekhiS29BdXppQ2FNYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQMkBWWAMA0GCSqGSIb3DQEBCwUAA4IBAQC+sOR6+nNDev1Y2QzvY+v5
+YQJ1tHvAwCa0tYmINu/F73YzikCIVeJo1DH0APP+Y6GqpnVR1x1cYOGF23NE5gZ
7K8kLbDxXuuDEv7xFvI7wZXu1V1NuM7UpDMB3vcXLRoG787Y1Zl75C7VOVg+E03k
zV4M+vpn2nvHaGHmLRg3DLtQuEhjcDFck4ZCY/70H0UPTFjvAu0jgCJiA1//91r/
b/FLVIYPe2ap4fDk1K0YvHll8mA/OZg0uIQAJYiz2cRmtAzVZg1jxZb0GqOeZv1G
sPNu9tyQfzcGCnyAkwfrHFJSCHqJqJ3eHrD1veU0BbbMFjQwRYb98wx3IucRWjFw
-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:10 2024 by rpki-client on console-fra.rpki-client.org