Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kl3YMBmQQwjANivJuMx61871lTs.roa
File: kl3YMBmQQwjANivJuMx61871lTs.roa (raw, json)
Hash identifier: AL3EFXuV1hBa+nIhrjfkR1p9/83cgzdtfkTApAvFjEs=
Subject key identifier: 92:5D:D8:30:19:90:43:08:C0:36:2B:C9:B8:CC:7A:D7:CE:F5:95:3B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 051A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kl3YMBmQQwjANivJuMx61871lTs.roa
Signing time: Thu 27 Jul 2023 16:54:06 +0000
ROA not before: Thu 27 Jul 2023 16:54:06 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.77.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:44:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:06 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=925DD83019904308C0362BC9B8CC7AD7CEF5953B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:01:f0:70:f6:ba:0f:89:15:4b:1f:ee:e8:
0b:90:c8:fa:dd:75:6a:44:b5:cf:a4:e4:9f:4f:e4:
9d:57:ae:5d:67:76:7f:62:24:a8:44:e3:fc:76:62:
16:36:b5:31:e6:d1:ad:30:85:81:9e:1d:a1:c5:4e:
6d:cf:26:33:f3:0e:e4:51:6c:69:16:91:61:39:ae:
f2:c9:79:48:c6:c3:ae:18:8a:0a:27:63:9f:6c:ee:
38:60:a3:45:27:ea:b5:e5:26:78:68:d0:cc:5d:64:
7b:10:6b:80:95:0c:53:63:26:fd:47:0c:4c:11:ff:
09:05:7b:2e:6f:38:e1:0b:bf:83:bb:9f:9b:06:fb:
dd:68:55:25:68:48:63:1a:8a:8a:4e:6a:71:f2:8b:
fa:0f:44:93:42:12:3c:20:d3:5f:26:ca:54:fd:33:
18:bc:6b:b9:98:45:b8:b8:50:15:50:09:cd:8d:ff:
19:7c:ef:1c:44:ff:52:87:49:14:d6:3e:b4:6b:f8:
bd:ee:94:8b:d9:0a:13:68:fc:b9:de:f1:00:7f:36:
b6:16:f2:c1:09:7b:d4:9e:64:3f:c1:70:8e:ed:d6:
35:0d:53:97:74:ae:46:fb:1f:a9:8b:41:49:40:6e:
99:9b:51:55:c7:79:ea:8a:21:fa:1e:96:ef:d9:65:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5D:D8:30:19:90:43:08:C0:36:2B:C9:B8:CC:7A:D7:CE:F5:95:3B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kl3YMBmQQwjANivJuMx61871lTs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
52:3f:ae:61:95:f2:52:fa:c3:e8:be:59:90:bc:ab:9a:35:15:
98:e5:2f:7a:fd:74:5d:86:f6:81:ea:e6:69:4a:e6:15:da:73:
e8:34:48:2a:6f:16:72:c5:c7:4c:3e:f3:a3:ef:d2:1d:6d:01:
89:49:f4:cd:88:24:70:04:76:02:6e:d7:1a:5b:34:d3:f7:4f:
c0:8c:c0:7c:29:7a:0a:2b:6e:74:ef:43:9c:c1:dc:37:3f:00:
4e:93:f0:75:e9:a2:78:26:31:e8:44:1a:5d:e8:9e:07:50:75:
50:c6:26:95:fd:81:5f:e3:ce:1f:d7:62:9d:ab:74:30:29:f4:
4e:01:ff:d4:04:92:62:8c:cb:80:73:ed:73:5e:97:63:6e:29:
0d:99:e0:80:63:90:11:f1:d7:3b:6d:ed:c9:3b:c5:97:19:bf:
12:87:aa:35:48:00:f4:32:1d:4f:0c:37:50:e4:a6:86:62:e9:
b4:67:e2:fd:c2:03:d9:93:3d:37:4a:fe:2b:5e:3f:5a:3f:f3:
b8:19:e9:33:5d:d3:60:81:09:b1:43:20:2d:f8:1d:b0:8c:6e:
55:d9:ad:f9:6e:83:81:55:e4:10:1c:a7:89:bb:d9:b6:00:c6:
ff:ef:aa:3f:fa:76:76:31:d2:e6:13:fe:e8:85:03:37:f8:24:
44:b6:33:a3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU0MDZaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDkyNUREODMwMTk5MDQz
MDhDMDM2MkJDOUI4Q0M3QUQ3Q0VGNTk1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDavQHwcPa6D4kVSx/u6AuQyPrddWpEtc+k5J9P5J1Xrl1ndn9i
JKhE4/x2YhY2tTHm0a0whYGeHaHFTm3PJjPzDuRRbGkWkWE5rvLJeUjGw64Yigon
Y59s7jhgo0Un6rXlJnho0MxdZHsQa4CVDFNjJv1HDEwR/wkFey5vOOELv4O7n5sG
+91oVSVoSGMaiopOanHyi/oPRJNCEjwg018mylT9Mxi8a7mYRbi4UBVQCc2N/xl8
7xxE/1KHSRTWPrRr+L3ulIvZChNo/Lne8QB/NrYW8sEJe9SeZD/BcI7t1jUNU5d0
rkb7H6mLQUlAbpmbUVXHeeqKIfoelu/ZZf7tAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkl3YMBmQQwjANivJuMx61871lTswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2tsM1lNQm1RUXdqQU5pdkp1TXg2MTg3MWxUcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcBTYAwDQYJKoZIhvcNAQELBQADggEBAFI/rmGV8lL6w+i+WZC8q5o1FZjl
L3r9dF2G9oHq5mlK5hXac+g0SCpvFnLFx0w+86Pv0h1tAYlJ9M2IJHAEdgJu1xpb
NNP3T8CMwHwpegorbnTvQ5zB3Dc/AE6T8HXpongmMehEGl3ongdQdVDGJpX9gV/j
zh/XYp2rdDAp9E4B/9QEkmKMy4Bz7XNel2NuKQ2Z4IBjkBHx1ztt7ck7xZcZvxKH
qjVIAPQyHU8MN1DkpoZi6bRn4v3CA9mTPTdK/iteP1o/87gZ6TNd02CBCbFDIC34
HbCMblXZrflug4FV5BAcp4m72bYAxv/vqj/6dnYx0uYT/uiFAzf4JES2M6M=
-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org