Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qkflhTp65NltWsAytxeij8-4oWM.roa
File: qkflhTp65NltWsAytxeij8-4oWM.roa (raw, json)
Hash identifier: CesjyHYnPbrx32LOFJVeVNk2GAQ6r/7vuZGLtPoWMXQ=
Subject key identifier: AA:47:E5:85:3A:7A:E4:D9:6D:5A:C0:32:B7:17:A2:8F:CF:B8:A1:63
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 056D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qkflhTp65NltWsAytxeij8-4oWM.roa
Signing time: Thu 27 Jul 2023 16:56:22 +0000
ROA not before: Thu 27 Jul 2023 16:56:22 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 30 Jun 2024 01:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:56:22 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=AA47E5853A7AE4D96D5AC032B717A28FCFB8A163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:21:85:47:96:d7:d8:2e:ac:dc:a6:7d:81:
e4:ad:e4:5c:b7:bd:4a:6f:8c:bc:91:50:a1:af:07:
cd:b8:2d:30:e3:c1:e9:2a:b3:aa:79:c5:1e:2f:50:
ef:4e:e9:60:0d:72:cd:bb:b4:6a:1d:ce:d4:08:68:
43:67:d3:81:79:0d:4b:90:24:b6:ba:83:c4:74:9d:
b0:a5:ef:76:89:36:a3:bc:62:d4:ab:ba:5a:8b:7c:
f1:04:f2:1d:4f:7c:e3:b2:ce:f0:4d:4b:9c:6c:0f:
25:70:5f:0b:0f:d5:8d:b3:74:dd:d5:87:45:27:a9:
3d:89:3f:67:b8:16:2d:d3:12:3a:69:ed:13:ad:43:
5b:78:eb:a8:5c:b2:89:cf:71:74:8c:f5:e5:6e:f6:
31:60:87:fd:9b:df:2e:69:c2:4f:ac:12:d5:81:3a:
b8:f4:c0:e1:38:b8:9b:85:0e:81:09:8f:2d:55:9b:
f7:64:f7:6b:ff:1d:98:cb:96:a0:f0:9e:b7:98:0f:
5e:54:fb:d4:59:6f:b8:94:d2:f7:03:dc:60:22:2e:
22:a8:a6:a1:6e:55:74:fa:c2:7b:80:0a:0b:9c:cd:
7f:a1:6c:97:37:46:c4:e8:3d:99:9c:2a:c1:0e:8b:
ae:50:7b:43:a1:28:09:10:58:e5:e2:44:ff:9b:ce:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:E5:85:3A:7A:E4:D9:6D:5A:C0:32:B7:17:A2:8F:CF:B8:A1:63
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qkflhTp65NltWsAytxeij8-4oWM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.96.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ed:d8:48:b6:67:fd:10:2b:05:b4:d1:ab:f8:e0:ce:9c:1a:
39:08:46:c6:c2:b4:74:6b:82:bf:26:d0:d5:1d:52:b5:61:da:
a3:c0:1c:fa:d2:19:e8:82:5f:56:30:06:4f:81:92:2d:13:84:
dd:bc:d6:bd:76:af:0c:83:d0:e2:db:69:91:2d:51:4f:85:53:
d6:89:b4:b0:7b:e1:9e:3e:fe:e6:19:1f:83:2e:a4:85:ab:e4:
c1:97:7e:4f:af:cd:04:96:7b:01:88:69:c2:ae:b1:2a:30:c7:
40:98:74:a1:50:0f:c6:79:47:80:55:70:77:60:29:5c:dc:19:
cd:97:93:4d:09:ec:95:00:86:45:30:20:42:f8:88:21:13:c4:
e8:6f:df:ee:fa:60:0d:66:5e:a6:bb:1c:93:01:9a:72:36:c8:
af:44:d1:d0:18:3f:68:42:f4:7f:06:74:3d:4f:f5:5a:3b:4f:
67:96:46:f2:1a:ec:cb:e3:de:fd:ae:6e:7c:92:c2:cf:dd:fa:
cc:36:be:f6:a6:c1:41:fd:41:2f:be:d6:ca:2f:bb:1c:99:3d:
0e:89:64:cf:6c:b1:45:d0:3a:a4:e9:cf:22:f9:56:71:03:48:
2b:be:b4:de:37:3f:75:a6:5b:0f:65:14:00:e1:40:4a:0e:c8:
78:00:f7:21
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx
NjU2MjJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFBNDdFNTg1M0E3QUU0
RDk2RDVBQzAzMkI3MTdBMjhGQ0ZCOEExNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIuyGFR5bX2C6s3KZ9geSt5Fy3vUpvjLyRUKGvB824LTDjwekq
s6p5xR4vUO9O6WANcs27tGodztQIaENn04F5DUuQJLa6g8R0nbCl73aJNqO8YtSr
ulqLfPEE8h1PfOOyzvBNS5xsDyVwXwsP1Y2zdN3Vh0UnqT2JP2e4Fi3TEjpp7ROt
Q1t466hcsonPcXSM9eVu9jFgh/2b3y5pwk+sEtWBOrj0wOE4uJuFDoEJjy1Vm/dk
92v/HZjLlqDwnreYD15U+9RZb7iU0vcD3GAiLiKopqFuVXT6wnuACguczX+hbJc3
RsToPZmcKsEOi65Qe0OhKAkQWOXiRP+bziHnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqkflhTp65NltWsAytxeij8+4oWMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3FrZmxoVHA2NU5sdFdzQXl0eGVpajgtNG9XTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc0mAwDQYJKoZIhvcNAQELBQADggEBAFft2Ei2Z/0QKwW00av44M6cGjkI
RsbCtHRrgr8m0NUdUrVh2qPAHPrSGeiCX1YwBk+Bki0ThN281r12rwyD0OLbaZEt
UU+FU9aJtLB74Z4+/uYZH4MupIWr5MGXfk+vzQSWewGIacKusSowx0CYdKFQD8Z5
R4BVcHdgKVzcGc2Xk00J7JUAhkUwIEL4iCETxOhv3+76YA1mXqa7HJMBmnI2yK9E
0dAYP2hC9H8GdD1P9Vo7T2eWRvIa7Mvj3v2ubnySws/d+sw2vvamwUH9QS++1sov
uxyZPQ6JZM9ssUXQOqTpzyL5VnEDSCu+tN43P3WmWw9lFADhQEoOyHgA9yE=
-----END CERTIFICATE-----
Generated at Sun Jun 30 04:12:20 2024 by rpki-client on console-fra.rpki-client.org