Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sJfFziiUaSwKIvrK1JvYHyMlPGs.roa
File: sJfFziiUaSwKIvrK1JvYHyMlPGs.roa (raw, json)
Hash identifier: mXgIGskTqrWREgDTVtUZhfdaJ7N4GVqOqMEEaxG2chE=
Subject key identifier: B0:97:C5:CE:28:94:69:2C:0A:22:FA:CA:D4:9B:D8:1F:23:25:3C:6B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0321
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sJfFziiUaSwKIvrK1JvYHyMlPGs.roa
Signing time: Thu 01 Jun 2023 16:07:25 +0000
ROA not before: Thu 01 Jun 2023 16:07:25 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 02:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:25 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B097C5CE2894692C0A22FACAD49BD81F23253C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:75:24:ab:9d:5e:55:27:f1:f1:17:4d:53:
52:96:12:0e:cc:82:65:4c:13:67:91:3d:95:9c:41:
67:b5:82:0c:12:d9:98:81:4f:13:07:42:fe:b1:0e:
5d:de:16:74:a6:33:8d:a9:6b:96:d6:05:e9:c5:98:
f6:2f:ae:b1:bb:2d:c9:93:02:70:cf:2f:1d:6c:87:
ec:9f:01:93:83:c3:a9:52:1b:df:1e:7c:4c:3b:cb:
f5:f9:f5:79:de:8e:0d:85:fa:72:3e:47:f6:07:7e:
41:31:a7:7e:63:9d:a1:51:f1:fa:e5:13:23:0e:35:
47:40:38:6e:f5:4b:fd:a1:cd:4b:c6:e8:75:5b:05:
23:b6:b3:a1:d7:d2:cb:b9:3e:21:81:8e:35:8f:99:
ac:62:de:60:87:fd:1d:e6:5c:ce:12:0c:a1:4c:5c:
53:83:65:4d:fa:21:5b:80:31:10:9c:46:8f:fa:e8:
ad:c3:35:82:7b:f5:c5:63:cb:6a:da:82:69:e5:9a:
12:0e:c5:9e:38:dd:68:2d:f2:1e:44:ba:df:c3:8b:
40:d5:8d:89:4f:99:97:d2:df:04:ab:e4:ba:0c:fb:
32:51:46:cb:e6:e1:6d:51:ac:37:3f:69:a8:4e:a9:
cc:de:d8:06:24:95:fb:8f:ce:b9:c4:e0:ce:c1:9c:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:C5:CE:28:94:69:2C:0A:22:FA:CA:D4:9B:D8:1F:23:25:3C:6B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sJfFziiUaSwKIvrK1JvYHyMlPGs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.238.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e5:4c:e6:51:4c:cf:35:f4:59:26:0f:15:f1:d2:11:f6:96:
e3:8d:1f:1c:b5:af:fa:e2:a4:01:dd:20:15:73:a9:2d:1a:5a:
93:27:f4:bd:7a:6b:5b:c9:96:64:f2:46:33:47:63:e1:38:67:
14:b3:7a:00:28:eb:01:db:27:8b:d4:2f:38:06:c8:cf:42:c0:
f8:1d:cc:7d:5b:27:ec:ce:cb:26:e7:35:15:c6:dc:31:52:21:
bd:a2:67:84:2e:65:e3:e2:f5:e0:15:d6:05:cf:47:35:be:10:
b0:63:b6:23:b4:5b:c2:33:55:ff:73:b8:0c:95:1b:85:40:0a:
6e:eb:f0:a9:84:b6:2b:7a:42:73:99:0e:b3:d2:70:e0:79:dc:
a2:97:a6:55:a1:a8:be:6f:67:23:1c:d9:2f:49:67:95:44:22:
56:e1:fa:41:ec:19:8a:98:b5:f6:01:53:dc:6a:cf:ee:f8:ba:
25:1d:83:51:cd:5c:b3:ca:e2:21:ec:7a:0b:71:a3:59:f6:39:
e7:4a:83:3c:ea:39:55:98:9c:9e:28:06:49:2d:7c:ff:5d:48:
72:bb:13:cb:4b:8d:99:c2:82:09:55:02:5f:e2:c7:96:7a:71:
a9:a6:4a:84:24:55:27:68:61:f1:7b:00:a0:17:03:36:4b:8b:
c6:44:3a:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NjA3MjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEIwOTdDNUNFMjg5NDY5
MkMwQTIyRkFDQUQ0OUJEODFGMjMyNTNDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU2HUkq51eVSfx8RdNU1KWEg7MgmVME2eRPZWcQWe1ggwS2ZiB
TxMHQv6xDl3eFnSmM42pa5bWBenFmPYvrrG7LcmTAnDPLx1sh+yfAZODw6lSG98e
fEw7y/X59Xnejg2F+nI+R/YHfkExp35jnaFR8frlEyMONUdAOG71S/2hzUvG6HVb
BSO2s6HX0su5PiGBjjWPmaxi3mCH/R3mXM4SDKFMXFODZU36IVuAMRCcRo/66K3D
NYJ79cVjy2ragmnlmhIOxZ443Wgt8h5Eut/Di0DVjYlPmZfS3wSr5LoM+zJRRsvm
4W1RrDc/aahOqcze2AYklfuPzrnE4M7BnHwbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUsJfFziiUaSwKIvrK1JvYHyMlPGswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3NKZkZ6aWlVYVN3S0l2cksxSnZZSHlNbFBHcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABSe4wDQYJKoZIhvcNAQELBQADggEBABblTOZRTM819FkmDxXx0hH2luON
Hxy1r/ripAHdIBVzqS0aWpMn9L16a1vJlmTyRjNHY+E4ZxSzegAo6wHbJ4vULzgG
yM9CwPgdzH1bJ+zOyybnNRXG3DFSIb2iZ4QuZePi9eAV1gXPRzW+ELBjtiO0W8Iz
Vf9zuAyVG4VACm7r8KmEtit6QnOZDrPScOB53KKXplWhqL5vZyMc2S9JZ5VEIlbh
+kHsGYqYtfYBU9xqz+74uiUdg1HNXLPK4iHsegtxo1n2OedKgzzqOVWYnJ4oBkkt
fP9dSHK7E8tLjZnCgglVAl/ix5Z6cammSoQkVSdoYfF7AKAXAzZLi8ZEOhg=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:35 2024 by rpki-client on console-fra.rpki-client.org