Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IfivqZruH1eSyhX8bFLrcDFvc5Q.roa
File: IfivqZruH1eSyhX8bFLrcDFvc5Q.roa (raw, json)
Hash identifier: AV1FFIoFAnTFNivdzlZ6VTChuTGpUlD70muRbAvgd7A=
Subject key identifier: 21:F8:AF:A9:9A:EE:1F:57:92:CA:15:FC:6C:52:EB:70:31:6F:73:94
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 77
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IfivqZruH1eSyhX8bFLrcDFvc5Q.roa
Signing time: Mon 27 Mar 2023 16:11:59 +0000
ROA not before: Mon 27 Mar 2023 16:11:59 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.100.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:11:59 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=21F8AFA99AEE1F5792CA15FC6C52EB70316F7394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:01:7a:04:7b:8e:41:41:cf:fc:0e:6e:65:
c9:2c:50:72:c3:97:65:82:a1:79:80:b4:f7:91:05:
2d:19:3b:53:8e:a6:de:ef:44:6a:23:a4:85:3d:99:
f3:25:51:76:a4:60:d4:b2:73:15:cd:f1:dd:cd:46:
66:b6:71:ea:ab:fa:1b:36:73:58:cc:83:43:18:f6:
fc:1f:f7:4b:77:d9:e7:7f:95:7f:c9:30:d3:c3:d4:
7c:27:56:eb:8d:42:6a:96:29:4f:78:b9:19:8a:8c:
86:3f:8c:6e:09:97:f0:d1:c2:c8:47:2b:d2:26:60:
39:5a:ea:6a:fa:af:78:0a:25:86:71:27:b6:56:93:
03:73:96:7c:f2:bc:ef:b8:97:a9:9d:be:7a:fe:54:
ea:98:25:b9:1d:5d:c8:b9:fc:17:1a:fa:48:eb:1f:
7d:d3:ab:09:c0:b8:ba:55:eb:e7:12:bd:8c:15:5e:
71:dc:e0:b2:e5:f6:4d:65:e4:02:ec:fc:6c:0a:40:
18:5a:ec:95:29:19:95:8b:82:26:db:9b:c5:ed:b7:
d2:1d:19:17:5d:13:7d:51:b9:79:d5:bc:87:c1:c3:
c2:80:5e:29:82:b0:6d:99:40:7e:9c:2c:a6:8e:4d:
e7:ae:63:40:c0:91:0d:40:66:35:3d:2b:e5:36:48:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F8:AF:A9:9A:EE:1F:57:92:CA:15:FC:6C:52:EB:70:31:6F:73:94
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IfivqZruH1eSyhX8bFLrcDFvc5Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.100.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:77:39:ab:8e:31:01:d0:56:6e:08:78:ef:0c:0a:3b:0a:cf:
ba:19:7d:57:0c:62:76:85:f1:1f:50:73:c5:76:4a:7b:94:2f:
fd:28:9b:d8:e6:a3:65:85:7d:86:ac:58:f0:23:3c:c3:61:0e:
29:c5:11:d0:bc:2a:b0:77:a4:a2:9f:c3:9d:34:ad:9d:cb:66:
88:d6:bf:44:a1:19:fc:25:4c:3a:10:ec:10:51:18:37:aa:92:
92:52:ca:91:6b:91:72:77:e2:d9:71:f4:fb:b3:e7:b8:8f:26:
10:03:b1:bf:21:26:7a:3f:13:26:6a:6f:16:0a:66:08:11:a7:
37:19:dc:29:c6:79:ef:24:20:af:c2:36:b3:c6:e0:c6:db:20:
a6:18:10:53:81:85:d6:3d:ea:55:b1:16:61:4e:99:98:60:10:
01:b3:2e:ac:89:d1:3d:09:5d:c5:9c:88:c6:92:bf:76:2d:21:
19:ef:da:0a:c3:af:a3:1d:be:d1:c2:dc:bb:18:d0:d4:c5:29:
19:7e:af:7a:7e:85:f3:ab:ef:b6:dd:d1:25:7e:27:bb:df:0d:
8a:6c:08:24:7a:17:05:d7:e7:5c:ac:e0:b0:85:a3:96:92:cf:
5f:73:c8:49:b2:e0:16:78:c4:69:94:78:30:90:03:2a:d4:51:
a9:6a:aa:6d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MTE1OVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMjFGOEFGQTk5QUVFMUY1
NzkyQ0ExNUZDNkM1MkVCNzAzMTZGNzM5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN8/AXoEe45BQc/8Dm5lySxQcsOXZYKheYC095EFLRk7U46m3u9E
aiOkhT2Z8yVRdqRg1LJzFc3x3c1GZrZx6qv6GzZzWMyDQxj2/B/3S3fZ53+Vf8kw
08PUfCdW641CapYpT3i5GYqMhj+MbgmX8NHCyEcr0iZgOVrqavqveAolhnEntlaT
A3OWfPK877iXqZ2+ev5U6pgluR1dyLn8Fxr6SOsffdOrCcC4ulXr5xK9jBVecdzg
suX2TWXkAuz8bApAGFrslSkZlYuCJtubxe230h0ZF10TfVG5edW8h8HDwoBeKYKw
bZlAfpwspo5N565jQMCRDUBmNT0r5TZIPOECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQh+K+pmu4fV5LKFfxsUutwMW9zlDAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvSWZpdnFacnVIMWVTeWhYOGJGTHJjREZ2YzVRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATFhZDANBgkqhkiG9w0BAQsFAAOCAQEACnc5q44xAdBWbgh47wwKOwrPuhl9
VwxidoXxH1BzxXZKe5Qv/Sib2OajZYV9hqxY8CM8w2EOKcUR0LwqsHekop/DnTSt
nctmiNa/RKEZ/CVMOhDsEFEYN6qSklLKkWuRcnfi2XH0+7PnuI8mEAOxvyEmej8T
JmpvFgpmCBGnNxncKcZ57yQgr8I2s8bgxtsgphgQU4GF1j3qVbEWYU6ZmGAQAbMu
rInRPQldxZyIxpK/di0hGe/aCsOvox2+0cLcuxjQ1MUpGX6ven6F86vvtt3RJX4n
u98NimwIJHoXBdfnXKzgsIWjlpLPX3PISbLgFnjEaZR4MJADKtRRqWqqbQ==
-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:58 2024 by rpki-client on console-fra.rpki-client.org