Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/law_5M5dqs9tdip6yEMvzwO5kcA.roa
File: law_5M5dqs9tdip6yEMvzwO5kcA.roa (raw, json)
Hash identifier: 208Ex0patQ7GmKTWKVb0Ij+pur6f9yiMnQ8Mxm57978=
Subject key identifier: 95:AC:3F:E4:CE:5D:AA:CF:6D:76:2A:7A:C8:43:2F:CF:03:B9:91:C0
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 042B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/law_5M5dqs9tdip6yEMvzwO5kcA.roa
Signing time: Thu 13 Apr 2023 09:55:22 +0000
ROA not before: Thu 13 Apr 2023 09:55:22 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 203.95.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:55:22 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=95AC3FE4CE5DAACF6D762A7AC8432FCF03B991C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:fc:8c:03:98:4d:70:96:00:e9:1e:4c:75:
53:5a:25:56:dd:c2:0e:fc:ff:2d:93:b2:8e:5c:a1:
d0:51:71:0d:68:fe:f8:5f:34:87:84:c0:25:6a:a8:
7b:ca:12:d9:44:93:d2:66:0f:28:ff:c3:1d:e5:da:
c1:59:a0:95:ff:3c:a9:91:df:f0:96:7c:4e:54:ea:
5a:74:76:22:ae:f5:28:8a:de:4b:d7:3f:d8:33:e7:
40:82:ef:f4:bb:40:68:eb:ea:51:f6:7a:a2:de:78:
9a:1a:3d:91:1f:b1:8f:b8:d4:85:ec:9c:2d:fa:5b:
83:df:8a:fa:e9:ae:c7:85:9c:38:e1:a3:ee:dc:b2:
f9:d5:8e:65:1e:2e:8c:bd:a9:6e:8f:1f:f4:cf:c9:
94:09:ae:2d:01:ce:87:88:c7:9b:99:05:8f:26:90:
7e:c2:d9:b5:36:a1:de:2f:73:92:07:1e:29:9f:d3:
31:91:24:01:1d:0a:74:5d:ca:eb:72:28:66:9b:67:
7d:cd:b0:e1:cb:6f:1e:c9:0a:63:02:1c:10:6c:48:
47:94:22:9b:55:7d:6d:d3:c2:26:0f:a7:b3:cd:dc:
82:bc:26:50:69:14:58:68:42:2f:f2:e3:8f:91:26:
cc:a0:8e:7e:02:07:e3:ee:d6:73:23:07:34:08:eb:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:3F:E4:CE:5D:AA:CF:6D:76:2A:7A:C8:43:2F:CF:03:B9:91:C0
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/law_5M5dqs9tdip6yEMvzwO5kcA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.95.32.0/19
Signature Algorithm: sha256WithRSAEncryption
78:8e:0d:24:69:90:94:11:0a:d3:eb:16:81:3d:7e:5d:2c:31:
b6:83:42:91:b4:e2:d4:60:c2:6f:51:54:f8:c3:a3:ce:49:70:
6d:60:91:c5:f2:df:c1:f5:04:25:29:ce:64:dd:98:b3:22:6c:
ed:4f:06:a4:6b:96:fc:5e:a7:0c:f5:74:07:ad:90:8f:4d:35:
30:f6:42:2e:d8:21:67:2a:af:86:6f:e9:44:a1:3c:40:e2:63:
1c:c9:9f:fd:82:76:ff:2b:93:17:ba:f7:c3:47:27:ce:6a:40:
4f:5e:57:fd:87:40:b2:56:6b:95:da:8b:4b:f2:2a:4a:34:57:
5e:c8:b1:f9:23:1d:c9:a1:da:d8:18:12:11:ba:2f:19:65:83:
b1:cd:db:db:91:84:b1:5c:b2:fa:49:4f:e2:4c:ad:9f:e5:02:
44:d5:17:fa:29:fc:a1:d2:89:81:06:05:f5:95:2a:be:28:ad:
77:42:b2:6e:dc:d7:e9:66:f7:47:fb:d2:78:e3:29:02:17:db:
9a:93:ee:19:c2:df:c0:4f:bd:5c:54:31:21:87:e4:be:e3:a3:
5d:e0:0f:99:0c:5f:0f:c4:97:59:7d:80:91:8e:db:2a:9a:76:
4c:8d:ed:f4:3f:74:1b:a6:21:40:88:79:3e:75:6c:3f:7d:c7:
fd:ff:8b:ad
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU1MjJaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDk1QUMzRkU0Q0U1REFB
Q0Y2RDc2MkE3QUM4NDMyRkNGMDNCOTkxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFXvyMA5hNcJYA6R5MdVNaJVbdwg78/y2Tso5codBRcQ1o/vhf
NIeEwCVqqHvKEtlEk9JmDyj/wx3l2sFZoJX/PKmR3/CWfE5U6lp0diKu9SiK3kvX
P9gz50CC7/S7QGjr6lH2eqLeeJoaPZEfsY+41IXsnC36W4PfivrprseFnDjho+7c
svnVjmUeLoy9qW6PH/TPyZQJri0BzoeIx5uZBY8mkH7C2bU2od4vc5IHHimf0zGR
JAEdCnRdyutyKGabZ33NsOHLbx7JCmMCHBBsSEeUIptVfW3TwiYPp7PN3IK8JlBp
FFhoQi/y44+RJsygjn4CB+Pu1nMjBzQI67CfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUlaw/5M5dqs9tdip6yEMvzwO5kcAwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2xhd181TTVkcXM5dGRpcDZ5RU12endPNWtjQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXLXyAwDQYJKoZIhvcNAQELBQADggEBAHiODSRpkJQRCtPrFoE9fl0sMbaD
QpG04tRgwm9RVPjDo85JcG1gkcXy38H1BCUpzmTdmLMibO1PBqRrlvxepwz1dAet
kI9NNTD2Qi7YIWcqr4Zv6UShPEDiYxzJn/2Cdv8rkxe698NHJ85qQE9eV/2HQLJW
a5Xai0vyKko0V17IsfkjHcmh2tgYEhG6Lxllg7HN29uRhLFcsvpJT+JMrZ/lAkTV
F/op/KHSiYEGBfWVKr4orXdCsm7c1+lm90f70njjKQIX25qT7hnC38BPvVxUMSGH
5L7jo13gD5kMXw/El1l9gJGO2yqadkyN7fQ/dBumIUCIeT51bD99x/3/i60=
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org