Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/z7PkuYyzRjg45xnloFXflO-n9eY.roa
File: z7PkuYyzRjg45xnloFXflO-n9eY.roa (raw, json)
Hash identifier: JoqiqqivCQsi5VKeHR+Lvff+e8zenVa/qV26dC+WFCw=
Subject key identifier: CF:B3:E4:B9:8C:B3:46:38:38:E7:19:E5:A0:55:DF:94:EF:A7:F5:E6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z7PkuYyzRjg45xnloFXflO-n9eY.roa
Signing time: Thu 29 Feb 2024 01:32:18 +0000
ROA not before: Thu 29 Feb 2024 01:32:18 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 49.97.8.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:32:18 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=CFB3E4B98CB3463838E719E5A055DF94EFA7F5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:8c:37:15:56:9b:2b:96:19:82:e0:2e:1b:
3c:3e:5d:40:47:3b:f7:00:be:5d:92:30:d8:9e:82:
7b:20:a1:bf:0f:f2:82:81:07:c9:6b:02:3c:53:8f:
dd:85:19:be:a5:4f:65:92:22:9a:2a:b4:dc:85:f0:
40:5b:c7:ca:de:0d:c5:d5:61:0c:85:be:60:3c:45:
8f:89:bc:93:f6:4c:c8:3d:65:02:69:a8:51:43:62:
42:1d:8b:af:b7:1a:73:b1:33:3d:42:82:fb:77:b8:
20:38:b8:6e:a0:98:04:89:2f:eb:c1:2d:21:8f:8b:
d4:75:63:7a:94:da:d7:ac:c6:ce:63:8c:79:40:a6:
1a:d5:a0:86:62:9c:c4:0c:23:86:7a:46:c5:98:13:
e3:48:a6:87:60:a4:c4:5d:95:41:bd:84:90:b1:0d:
62:94:82:e2:69:29:3e:66:de:23:93:b6:56:93:9d:
36:a1:d1:37:0a:bd:98:56:22:d5:75:aa:b7:f7:9b:
c3:c6:91:55:7c:73:0e:6f:45:2e:d0:e7:ff:41:de:
89:b8:b9:f8:b6:00:f7:e2:91:31:e9:b0:82:14:4d:
28:1d:82:90:b9:b9:fe:9f:35:ef:30:f8:02:88:3a:
7e:01:9d:47:5b:55:ad:90:ad:eb:63:dd:4d:50:45:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:E4:B9:8C:B3:46:38:38:E7:19:E5:A0:55:DF:94:EF:A7:F5:E6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/z7PkuYyzRjg45xnloFXflO-n9eY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.8.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:09:60:74:d3:b0:ba:26:66:17:c3:67:3b:52:7b:b0:75:e5:
0e:18:7f:d6:66:34:28:92:75:24:89:87:33:59:28:62:3a:55:
c0:71:65:04:a4:e9:e5:8b:68:23:c0:51:66:a5:66:20:84:e3:
b8:75:75:cf:f1:74:52:e7:3f:68:f4:8f:37:a6:f7:73:92:03:
86:63:91:8a:fb:2d:44:68:e2:07:60:98:53:e8:26:58:35:43:
53:33:ab:2f:63:5b:7f:2c:2e:f5:b2:ac:eb:9d:7d:14:a4:85:
bd:8e:8b:af:21:d9:1c:7d:3a:93:e1:fa:aa:fe:56:1b:88:19:
2d:67:e1:40:c2:f3:34:0d:c2:a2:fe:36:3c:fe:b8:90:1b:9e:
ed:b2:7a:9a:2d:87:4d:8f:be:1a:1b:25:d4:0f:fb:e1:5a:3d:
be:61:d1:cc:34:02:3f:c4:d9:3e:78:79:65:36:8e:c3:a0:72:
84:17:bd:41:46:73:78:84:58:34:4c:eb:c3:3c:01:c0:f6:84:
ce:14:b0:5d:65:ef:68:90:3b:85:56:78:8f:32:00:a4:94:78:
de:b9:7d:8c:4a:31:21:00:e2:a4:02:b2:d7:ed:70:b2:bd:75:
55:34:2d:c0:15:61:97:63:65:cd:df:24:de:3f:fc:b0:53:83:
6e:a9:68:fd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw
MTMyMThaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKENGQjNFNEI5OENCMzQ2
MzgzOEU3MTlFNUEwNTVERjk0RUZBN0Y1RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH+ow3FVabK5YZguAuGzw+XUBHO/cAvl2SMNiegnsgob8P8oKB
B8lrAjxTj92FGb6lT2WSIpoqtNyF8EBbx8reDcXVYQyFvmA8RY+JvJP2TMg9ZQJp
qFFDYkIdi6+3GnOxMz1Cgvt3uCA4uG6gmASJL+vBLSGPi9R1Y3qU2tesxs5jjHlA
phrVoIZinMQMI4Z6RsWYE+NIpodgpMRdlUG9hJCxDWKUguJpKT5m3iOTtlaTnTah
0TcKvZhWItV1qrf3m8PGkVV8cw5vRS7Q5/9B3om4ufi2APfikTHpsIIUTSgdgpC5
uf6fNe8w+AKIOn4BnUdbVa2Qretj3U1QRYcDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUz7PkuYyzRjg45xnloFXflO+n9eYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3o3UGt1WXl6UmpnNDV4bmxvRlhmbE8tbjllWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMxYQgwDQYJKoZIhvcNAQELBQADggEBAKoJYHTTsLomZhfDZztSe7B15Q4Y
f9ZmNCiSdSSJhzNZKGI6VcBxZQSk6eWLaCPAUWalZiCE47h1dc/xdFLnP2j0jzem
93OSA4ZjkYr7LURo4gdgmFPoJlg1Q1Mzqy9jW38sLvWyrOudfRSkhb2Oi68h2Rx9
OpPh+qr+VhuIGS1n4UDC8zQNwqL+Njz+uJAbnu2yepoth02PvhobJdQP++FaPb5h
0cw0Aj/E2T54eWU2jsOgcoQXvUFGc3iEWDRM68M8AcD2hM4UsF1l72iQO4VWeI8y
AKSUeN65fYxKMSEA4qQCstftcLK9dVU0LcAVYZdjZc3fJN4//LBTg26paP0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:24 2025 by rpki-client