Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/GbfxztoC4PxIpriamUGOUsYOLoQ.roa
File: GbfxztoC4PxIpriamUGOUsYOLoQ.roa (raw, json)
Hash identifier: CGoqVJUUVPBOCWck1qYIwC76siC82roJNmBmQZOYeN8=
Subject key identifier: 19:B7:F1:CE:DA:02:E0:FC:48:A6:B8:9A:99:41:8E:52:C6:0E:2E:84
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: DE
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/GbfxztoC4PxIpriamUGOUsYOLoQ.roa
Signing time: Thu 29 Feb 2024 01:29:40 +0000
ROA not before: Thu 29 Feb 2024 01:29:40 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9607
IP address blocks: 203.141.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Feb 29 01:29:40 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=19B7F1CEDA02E0FC48A6B89A99418E52C60E2E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:b9:72:6d:98:77:70:2c:9c:13:d4:c9:2c:
d2:69:86:72:0e:67:f0:10:be:e1:0e:3f:33:11:13:
cb:13:d2:91:17:80:e6:53:33:78:33:9d:07:f6:96:
a1:24:0f:83:70:85:53:3c:e1:d5:ad:a0:6d:b6:e7:
5c:f9:9b:e1:cf:50:70:f2:94:74:99:9a:04:66:e7:
f8:eb:1a:b1:4b:54:8c:79:44:99:8e:a4:4b:af:ae:
53:54:30:bf:87:43:63:5c:2d:04:20:a1:e3:d1:3d:
b1:64:51:49:71:64:42:b1:77:ae:70:c2:27:a2:ab:
ed:cc:a4:18:4d:ca:8d:5c:19:d8:6b:e1:63:57:87:
e3:41:58:31:eb:fa:06:ed:3b:bc:78:ba:99:12:c1:
1c:d2:ec:b3:9d:4b:8a:14:02:3d:07:fd:ea:e6:99:
16:e5:33:5b:1d:0c:a8:58:67:90:d9:12:9c:24:b3:
8f:d4:51:04:1b:e0:2f:58:7b:69:b8:35:d0:bb:8e:
e4:81:cb:ac:70:ce:d5:10:ff:4d:a3:b3:91:d2:6d:
6e:7c:0b:fe:fe:2c:05:6c:5f:a9:60:89:2b:8c:74:
a2:78:85:13:38:eb:0d:8c:0b:eb:87:05:8b:5f:f5:
c4:eb:20:af:3a:c8:b1:85:f1:c0:76:15:69:17:8c:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:F1:CE:DA:02:E0:FC:48:A6:B8:9A:99:41:8E:52:C6:0E:2E:84
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/GbfxztoC4PxIpriamUGOUsYOLoQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.141.48.0/22
Signature Algorithm: sha256WithRSAEncryption
74:66:f2:37:74:26:a8:fe:13:63:91:22:3e:5b:c7:8d:a4:ee:
a7:94:50:cb:30:28:06:d9:38:82:37:c4:80:31:d1:ac:12:f5:
24:2e:b1:a4:a1:f1:a6:4c:11:07:5a:64:b4:78:14:56:94:6a:
86:3c:e1:06:c7:29:98:2b:7b:15:8d:1e:b8:fe:25:90:3c:5c:
76:8f:d2:32:8c:05:77:f2:b2:26:dd:9f:22:5f:b6:77:ea:2f:
88:2b:f5:4c:82:a2:ec:42:50:f0:ad:de:69:fd:6b:c3:7c:f2:
2a:92:3f:a8:92:e0:b9:28:23:3b:d2:19:93:0c:88:27:87:4c:
41:33:6e:69:72:fc:b9:3c:bf:9f:c4:07:8b:97:f2:a0:26:44:
ac:fb:25:3d:77:4d:f9:be:46:4b:93:5b:ef:b4:24:76:12:ad:
b5:4a:d0:f8:ec:1f:74:4f:97:64:70:63:ef:53:97:11:7c:d7:
57:9b:cd:b5:e6:42:49:f5:34:8c:44:55:ff:1d:a3:70:d0:27:
a7:5f:08:f1:85:46:12:dc:71:07:3d:ac:55:d7:92:f1:fa:f9:
c5:4b:a1:54:a7:26:1e:06:32:b6:ae:7a:c2:f7:4a:95:1b:d2:
1b:f8:c5:dc:90:e4:3d:2d:6c:27:36:37:73:b7:2a:2d:3b:fd:
7c:2b:53:a0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNDAyMjkw
MTI5NDBaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDE5QjdGMUNFREEwMkUw
RkM0OEE2Qjg5QTk5NDE4RTUyQzYwRTJFODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA2rlybZh3cCycE9TJLNJphnIOZ/AQvuEOPzMRE8sT0pEXgOZT
M3gznQf2lqEkD4NwhVM84dWtoG2251z5m+HPUHDylHSZmgRm5/jrGrFLVIx5RJmO
pEuvrlNUML+HQ2NcLQQgoePRPbFkUUlxZEKxd65wwieiq+3MpBhNyo1cGdhr4WNX
h+NBWDHr+gbtO7x4upkSwRzS7LOdS4oUAj0H/ermmRblM1sdDKhYZ5DZEpwks4/U
UQQb4C9Ye2m4NdC7juSBy6xwztUQ/02js5HSbW58C/7+LAVsX6lgiSuMdKJ4hRM4
6w2MC+uHBYtf9cTrIK86yLGF8cB2FWkXjLWlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGbfxztoC4PxIpriamUGOUsYOLoQwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L0diZnh6dG9DNFB4SXByaWFtVUdPVXNZT0xvUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALLjTAwDQYJKoZIhvcNAQELBQADggEBAHRm8jd0Jqj+E2ORIj5bx42k7qeU
UMswKAbZOII3xIAx0awS9SQusaSh8aZMEQdaZLR4FFaUaoY84QbHKZgrexWNHrj+
JZA8XHaP0jKMBXfysibdnyJftnfqL4gr9UyCouxCUPCt3mn9a8N88iqSP6iS4Lko
IzvSGZMMiCeHTEEzbmly/Lk8v5/EB4uX8qAmRKz7JT13Tfm+RkuTW++0JHYSrbVK
0PjsH3RPl2RwY+9TlxF811ebzbXmQkn1NIxEVf8do3DQJ6dfCPGFRhLccQc9rFXX
kvH6+cVLoVSnJh4GMrauesL3SpUb0hv4xdyQ5D0tbCc2N3O3Ki07/XwrU6A=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:47 2025 by rpki-client