Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xu_36loegXuPWO1qQHtu6EOQf0k.roa
File: xu_36loegXuPWO1qQHtu6EOQf0k.roa (raw, json)
Hash identifier: OPynrY2rlV1kmOPn6DeIj2xixJtblvupe/2ofrQ3p+w=
Subject key identifier: C6:EF:F7:EA:5A:1E:81:7B:8F:58:ED:6A:40:7B:6E:E8:43:90:7F:49
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 011B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xu_36loegXuPWO1qQHtu6EOQf0k.roa
Signing time: Wed 24 May 2023 16:30:15 +0000
ROA not before: Wed 24 May 2023 16:30:15 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 01:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:15 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C6EFF7EA5A1E817B8F58ED6A407B6EE843907F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:6e:7e:d1:0d:ff:aa:b8:16:85:0c:73:b4:
97:48:ee:60:f6:cc:fc:d4:e1:b1:ae:cf:af:45:0c:
98:ca:4e:c4:41:27:4d:37:6f:e6:b9:fe:f9:4b:26:
2f:13:d5:e2:4c:46:a0:f4:4d:4b:67:dd:31:f1:fd:
45:9a:53:a6:6e:27:9a:c7:72:09:4d:63:08:01:2b:
b0:ba:d2:9a:2f:8a:94:d2:90:bc:65:61:15:92:48:
2a:bf:a5:38:89:70:6b:03:92:61:0c:35:f6:af:5f:
33:7e:98:32:6d:b9:62:fd:28:40:8b:eb:bb:3d:b0:
a8:bd:c9:87:33:5f:db:6a:a4:ec:6e:84:56:bb:d3:
fb:e2:3b:f4:4e:c3:3d:b5:18:dc:df:76:80:0c:7a:
eb:e0:cf:76:89:d7:1a:48:00:be:c2:5a:6d:0f:7b:
4a:a1:0d:d6:c6:9d:66:9d:c5:33:20:20:05:26:86:
03:71:3f:bc:cf:51:bc:57:2f:61:b4:2c:90:fd:80:
f7:c7:6a:97:83:17:8e:36:4b:da:6b:fe:94:95:a4:
5a:63:90:de:02:72:bd:9a:d7:bc:98:40:e4:a9:d3:
ee:9d:d8:dc:59:04:8e:78:96:2f:c9:97:b8:3d:8f:
e4:9e:ec:65:2a:e7:1d:0c:e0:9d:58:b6:f7:ae:c6:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:F7:EA:5A:1E:81:7B:8F:58:ED:6A:40:7B:6E:E8:43:90:7F:49
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xu_36loegXuPWO1qQHtu6EOQf0k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c7:82:d7:9c:e7:fd:58:55:49:eb:79:20:78:a7:ae:23:cd:
f8:b9:c7:b5:a5:c5:94:4b:2c:1f:cc:ce:e7:a9:ee:04:bc:dd:
e9:69:c3:55:16:96:b9:76:55:9d:74:98:bd:ec:3b:fd:77:e7:
60:c9:22:02:69:7f:14:3d:d1:97:bc:ea:5c:d5:e1:55:16:73:
9d:c2:35:20:44:6b:a3:c9:14:e6:a7:ea:92:75:17:81:72:f3:
9e:4b:3e:10:c1:09:0d:f1:28:98:33:11:f8:14:bd:7d:f9:07:
05:ea:2a:91:62:3f:94:3a:b1:23:af:90:40:0d:4b:f7:d3:5d:
62:3a:1f:22:d8:92:fc:81:9f:c0:c8:c4:55:6b:7b:1d:15:49:
1c:0c:a9:ec:f9:9e:44:68:30:0f:d4:bb:82:b3:a0:7b:94:6f:
1a:be:9d:0b:ad:bd:54:15:b3:7a:54:e4:5c:5a:72:e6:19:ac:
ce:a2:2e:2e:0f:d8:51:94:03:89:27:4b:1e:47:be:69:87:8d:
e2:5f:0b:ee:af:34:16:ad:32:30:71:89:f9:77:69:7f:6f:e9:
30:44:95:2b:f9:4d:06:dc:7d:7e:da:fa:38:1d:22:44:8c:41:
5e:37:b4:82:e5:97:35:aa:45:cb:37:7b:ef:53:46:3a:a7:5e:
95:1e:e5:11
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMwMTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM2RUZGN0VBNUExRTgx
N0I4RjU4RUQ2QTQwN0I2RUU4NDM5MDdGNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/MG5+0Q3/qrgWhQxztJdI7mD2zPzU4bGuz69FDJjKTsRBJ003
b+a5/vlLJi8T1eJMRqD0TUtn3THx/UWaU6ZuJ5rHcglNYwgBK7C60povipTSkLxl
YRWSSCq/pTiJcGsDkmEMNfavXzN+mDJtuWL9KECL67s9sKi9yYczX9tqpOxuhFa7
0/viO/ROwz21GNzfdoAMeuvgz3aJ1xpIAL7CWm0Pe0qhDdbGnWadxTMgIAUmhgNx
P7zPUbxXL2G0LJD9gPfHapeDF442S9pr/pSVpFpjkN4Ccr2a17yYQOSp0+6d2NxZ
BI54li/Jl7g9j+Se7GUq5x0M4J1Ytveuxl0/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUxu/36loegXuPWO1qQHtu6EOQf0kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3h1XzM2bG9lZ1h1UFdPMXFRSHR1NkVPUWYway5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABTwQwDQYJKoZIhvcNAQELBQADggEBAMDHgtec5/1YVUnreSB4p64jzfi5
x7WlxZRLLB/Mzuep7gS83elpw1UWlrl2VZ10mL3sO/1352DJIgJpfxQ90Ze86lzV
4VUWc53CNSBEa6PJFOan6pJ1F4Fy855LPhDBCQ3xKJgzEfgUvX35BwXqKpFiP5Q6
sSOvkEANS/fTXWI6HyLYkvyBn8DIxFVrex0VSRwMqez5nkRoMA/Uu4KzoHuUbxq+
nQutvVQVs3pU5FxacuYZrM6iLi4P2FGUA4knSx5HvmmHjeJfC+6vNBatMjBxifl3
aX9v6TBElSv5TQbcfX7a+jgdIkSMQV43tILllzWqRcs3e+9TRjqnXpUe5RE=
-----END CERTIFICATE-----
Generated at Tue Apr 30 03:42:36 2024 by rpki-client on console-fra.rpki-client.org