Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/izWePkPltVCiGTZISzGueml1EFc.roa
File: izWePkPltVCiGTZISzGueml1EFc.roa (raw, json)
Hash identifier: 5bxC6vdFiMZXZLemiOxPI5+o7mlOTOc78gXoEVEgY3c=
Subject key identifier: 8B:35:9E:3E:43:E5:B5:50:A2:19:36:48:4B:31:AE:7A:69:75:10:57
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01AB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/izWePkPltVCiGTZISzGueml1EFc.roa
Signing time: Wed 24 May 2023 16:35:21 +0000
ROA not before: Wed 24 May 2023 16:35:21 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 110.163.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:21 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=8B359E3E43E5B550A21936484B31AE7A69751057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ce:ae:f1:69:7a:09:bb:91:ff:7b:53:67:43:
d9:bf:8f:ce:d5:fc:39:9a:fd:80:9f:3b:d2:f4:27:
65:a7:28:1f:dc:0c:61:48:56:41:3b:01:09:20:27:
85:7a:12:14:20:b7:3f:51:fc:74:e7:ae:91:64:56:
44:ad:2e:66:aa:d1:bb:60:15:d5:a6:3b:c5:9d:1c:
d3:19:eb:79:e4:7d:31:d0:71:ee:46:b0:70:7a:40:
81:47:6f:90:f6:6e:e6:66:8f:97:97:8b:c0:87:bd:
1f:dd:3c:12:e4:4b:2b:e7:13:f5:14:82:ec:a8:5f:
11:17:ed:92:d6:88:d6:be:7e:9d:71:b1:af:f9:e3:
c8:dc:4a:fe:fe:ea:3c:40:c9:c3:9d:0b:38:81:01:
7f:5b:1a:fc:c7:7e:65:21:28:9b:7c:79:70:0c:bf:
c8:90:c0:f7:66:65:98:ff:e4:02:3d:69:c4:6c:1b:
c7:fb:53:6f:5e:b9:b9:34:b2:df:ca:2b:39:6f:e3:
78:5e:c4:5b:51:36:7c:dc:ab:1a:96:3f:84:98:eb:
af:59:31:93:bc:6a:b4:8a:df:b8:32:ec:a6:69:7f:
dc:32:49:cc:ee:f8:1d:f3:d4:c2:0b:1b:14:81:5c:
8d:94:c4:d4:78:2c:21:34:46:a6:cf:44:9d:64:70:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:9E:3E:43:E5:B5:50:A2:19:36:48:4B:31:AE:7A:69:75:10:57
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/izWePkPltVCiGTZISzGueml1EFc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.163.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:43:f7:33:77:e9:33:4c:28:84:16:50:5f:64:21:4a:11:89:
6b:55:91:fa:14:a8:9a:3a:a9:dd:cd:cb:8e:76:31:26:44:c6:
48:d8:ff:86:f2:16:6d:82:db:24:31:98:43:9f:94:4d:b3:41:
54:0d:f0:74:39:c6:5f:10:6c:1f:d5:ab:84:61:1e:85:34:f9:
d6:2b:93:13:7d:a8:4b:fb:e5:2f:5e:f1:a8:94:9d:cf:49:b0:
21:f7:19:e2:ef:25:62:e5:f8:60:8b:a1:fc:6a:c8:80:b1:56:
6f:6f:b5:6a:ef:4c:07:b2:5d:7b:59:2d:07:75:48:ca:3a:86:
fd:01:fe:7e:c6:a9:de:01:9d:1a:ed:77:c6:b6:e1:d5:ba:b5:
ef:d4:d6:5d:12:6d:73:64:9f:b3:c0:8e:cf:6f:74:85:fd:bf:
02:f5:a7:20:fb:6a:2c:fe:63:a1:0a:2b:56:dc:01:5f:27:e7:
68:e8:49:3c:69:38:82:aa:19:57:95:86:ed:48:de:de:9c:8b:
99:d3:bc:32:ce:e0:4a:87:65:07:b1:3e:69:99:39:d1:ff:da:
c0:a9:10:fa:5d:d7:94:46:d5:8a:49:ef:41:0a:f5:ab:b1:be:
f7:90:7e:3c:de:e6:c3:23:45:a8:77:17:e3:5b:b1:20:a3:ee:
fe:cd:e8:c6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjM1MjFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhCMzU5RTNFNDNFNUI1
NTBBMjE5MzY0ODRCMzFBRTdBNjk3NTEwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzzq7xaXoJu5H/e1NnQ9m/j87V/Dma/YCfO9L0J2WnKB/cDGFI
VkE7AQkgJ4V6EhQgtz9R/HTnrpFkVkStLmaq0btgFdWmO8WdHNMZ63nkfTHQce5G
sHB6QIFHb5D2buZmj5eXi8CHvR/dPBLkSyvnE/UUguyoXxEX7ZLWiNa+fp1xsa/5
48jcSv7+6jxAycOdCziBAX9bGvzHfmUhKJt8eXAMv8iQwPdmZZj/5AI9acRsG8f7
U29eubk0st/KKzlv43hexFtRNnzcqxqWP4SY669ZMZO8arSK37gy7KZpf9wySczu
+B3z1MILGxSBXI2UxNR4LCE0RqbPRJ1kcMevAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUizWePkPltVCiGTZISzGueml1EFcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2l6V2VQa1BsdFZDaUdUWklTekd1ZW1sMUVGYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuowYwDQYJKoZIhvcNAQELBQADggEBAKZD9zN36TNMKIQWUF9kIUoRiWtV
kfoUqJo6qd3Ny452MSZExkjY/4byFm2C2yQxmEOflE2zQVQN8HQ5xl8QbB/Vq4Rh
HoU0+dYrkxN9qEv75S9e8aiUnc9JsCH3GeLvJWLl+GCLofxqyICxVm9vtWrvTAey
XXtZLQd1SMo6hv0B/n7Gqd4BnRrtd8a24dW6te/U1l0SbXNkn7PAjs9vdIX9vwL1
pyD7aiz+Y6EKK1bcAV8n52joSTxpOIKqGVeVhu1I3t6ci5nTvDLO4EqHZQexPmmZ
OdH/2sCpEPpd15RG1YpJ70EK9auxvveQfjze5sMjRah3F+NbsSCj7v7N6MY=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org