Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYr6KnocVJ-VYzMuoFyFZjm-Q0.roa
File: xJYr6KnocVJ-VYzMuoFyFZjm-Q0.roa (raw, json)
Hash identifier: H/qx4ScBJzcS1gqyUgJtdkR8a/qn2yCxOKgVaGtywe4=
Subject key identifier: C4:96:2B:E8:A9:E8:71:52:7E:55:8C:CC:BA:81:72:15:98:E6:F9:0D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0630
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYr6KnocVJ-VYzMuoFyFZjm-Q0.roa
Signing time: Thu 29 Feb 2024 01:41:05 +0000
ROA not before: Thu 29 Feb 2024 01:41:05 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 18 Sep 2024 03:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:41:05 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=C4962BE8A9E871527E558CCCBA81721598E6F90D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:96:b7:9d:6f:76:74:37:0d:b5:a9:12:84:
fd:87:50:a0:f2:29:82:41:9a:1b:87:b7:50:53:37:
99:2f:88:8c:82:de:ac:b1:46:0f:9a:8e:1c:cd:3f:
55:c7:68:88:49:1f:da:cc:5d:a6:9d:e9:2e:73:3e:
b1:02:76:8d:54:17:f6:65:d1:98:aa:ac:ee:2a:67:
3d:c4:72:1e:dc:c9:5a:49:1c:e1:78:a4:67:b1:30:
7b:fc:bf:f5:3e:f2:66:23:a1:57:90:45:a8:a9:b7:
12:52:cd:53:79:b5:4b:61:e5:6d:4b:18:44:15:ac:
f1:3b:a8:08:d0:6d:a7:0a:38:54:15:95:cc:62:00:
24:84:30:d5:90:51:ff:34:07:7d:a0:75:1a:c2:29:
c0:a4:02:65:25:25:09:ff:84:09:e9:0a:3d:8c:43:
17:03:3a:87:be:f9:63:3b:9a:20:2c:79:a7:3b:8a:
53:8a:a1:f4:dd:63:08:d4:79:a7:c6:aa:42:bc:14:
d9:d4:f6:69:0a:29:30:66:84:bc:d8:42:d3:f4:7c:
5a:14:75:e1:98:52:e1:78:98:cb:8d:14:50:f8:89:
40:fa:f2:7e:05:cf:44:b0:31:62:71:0d:f2:2c:c4:
19:ce:da:2c:e0:11:e2:d3:84:c9:e0:31:4e:49:e3:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:2B:E8:A9:E8:71:52:7E:55:8C:CC:BA:81:72:15:98:E6:F9:0D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xJYr6KnocVJ-VYzMuoFyFZjm-Q0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.200.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:3a:56:e4:8b:9a:84:5b:42:76:be:b7:9d:c6:0b:81:1c:6b:
2a:4a:0e:cf:81:b8:00:0a:66:35:b8:ea:06:67:79:c9:f6:5b:
84:52:5e:8c:1c:db:bd:a8:16:ce:81:de:f6:b9:01:70:cf:d2:
b7:2c:99:47:e2:3d:a8:46:bb:70:6c:21:c8:7b:5c:63:24:12:
bb:e1:bd:93:99:1d:3f:bb:d2:61:15:63:1c:50:71:dc:cf:74:
a5:3a:e4:20:cc:5e:b8:46:11:e4:a1:b5:b7:87:6a:29:9d:e0:
32:3c:48:45:a7:66:05:bd:a2:39:f3:84:26:ff:69:e8:c7:f7:
5e:50:a6:21:60:28:c1:04:5c:7d:bf:f6:c0:46:f9:6b:ac:d4:
aa:d3:da:cc:3e:82:e4:b2:51:f9:8d:2e:af:76:f7:dd:7a:d4:
bb:e2:38:a2:45:d0:a7:dd:f4:ea:31:26:3c:2a:12:ec:83:d0:
9d:07:ac:b9:5d:71:a7:57:8a:09:5b:db:5d:a4:ba:b6:0a:30:
98:0d:4c:d6:5a:3e:1a:a5:d9:9a:f8:52:21:4e:4e:8a:54:cd:
65:1b:3f:9f:e6:22:46:ae:78:5a:5a:b8:cf:89:1a:f7:6f:31:
e3:34:f0:a4:d9:6d:b9:f0:01:e4:85:2c:0f:50:6a:32:12:65:
09:48:e5:81
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTQxMDVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEM0OTYyQkU4QTlFODcx
NTI3RTU1OENDQ0JBODE3MjE1OThFNkY5MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCirJa3nW92dDcNtakShP2HUKDyKYJBmhuHt1BTN5kviIyC3qyx
Rg+ajhzNP1XHaIhJH9rMXaad6S5zPrECdo1UF/Zl0ZiqrO4qZz3Ech7cyVpJHOF4
pGexMHv8v/U+8mYjoVeQRaiptxJSzVN5tUth5W1LGEQVrPE7qAjQbacKOFQVlcxi
ACSEMNWQUf80B32gdRrCKcCkAmUlJQn/hAnpCj2MQxcDOoe++WM7miAseac7ilOK
ofTdYwjUeafGqkK8FNnU9mkKKTBmhLzYQtP0fFoUdeGYUuF4mMuNFFD4iUD68n4F
z0SwMWJxDfIsxBnO2izgEeLThMngMU5J449VAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUxJYr6KnocVJ+VYzMuoFyFZjm+Q0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3hKWXI2S25vY1ZKLVZZek11b0Z5RlpqbS1RMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxYcgwDQYJKoZIhvcNAQELBQADggEBANc6VuSLmoRbQna+t53GC4EcaypK
Ds+BuAAKZjW46gZnecn2W4RSXowc272oFs6B3va5AXDP0rcsmUfiPahGu3BsIch7
XGMkErvhvZOZHT+70mEVYxxQcdzPdKU65CDMXrhGEeShtbeHaimd4DI8SEWnZgW9
ojnzhCb/aejH915QpiFgKMEEXH2/9sBG+Wus1KrT2sw+guSyUfmNLq9299161Lvi
OKJF0Kfd9OoxJjwqEuyD0J0HrLldcadXiglb212kurYKMJgNTNZaPhql2Zr4UiFO
TopUzWUbP5/mIkaueFpauM+JGvdvMeM08KTZbbnwAeSFLA9QajISZQlI5YE=
-----END CERTIFICATE-----
Generated at Wed Sep 18 08:51:05 2024 by rpki-client on console-ams.rpki-client.org