Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa
File: QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa (raw, json)
Hash identifier: 35I02TXsGz8iZK1qfPGPt4GXbt58EkYMJjqJojxcxFQ=
Subject key identifier: 40:CF:E3:62:7B:11:7F:77:EE:C3:6D:C1:4D:A4:53:B3:67:F9:AC:34
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0163
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa
Signing time: Sun 01 Oct 2023 01:33:06 +0000
ROA not before: Sun 01 Oct 2023 01:33:06 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9824
IP address blocks: 202.148.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 01:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:33:06 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=40CFE3627B117F77EEC36DC14DA453B367F9AC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:db:c6:b7:b5:54:db:d2:14:cd:8e:11:2f:
e3:57:28:cb:8e:e6:18:ba:4d:21:67:05:9b:b9:25:
9f:54:be:e5:b1:13:80:7f:9d:d2:0b:3f:87:c4:99:
c2:97:e9:00:2a:0b:77:31:df:92:15:d4:64:81:da:
15:41:87:03:ef:ae:78:e2:0e:1c:7e:e8:b8:a3:7b:
19:00:8b:e1:18:cf:21:d9:9c:02:a5:8d:67:4c:36:
1f:dd:b0:a7:6b:38:0f:42:a3:47:4f:5f:20:51:18:
3b:b5:56:e0:95:e6:71:5d:db:1c:77:fb:d7:08:d5:
3f:62:ce:03:0c:0d:5e:c0:80:4b:bf:64:c3:fb:27:
29:a3:fe:40:01:58:a6:b9:f8:1e:7e:9f:52:10:c2:
28:b7:88:fe:90:d8:ac:64:76:c1:8b:0c:d7:d9:6c:
8b:83:84:29:ed:21:32:ec:c6:67:77:b4:3d:46:28:
31:89:35:97:9c:54:73:7c:18:14:55:3f:ae:cd:8b:
89:e5:03:69:56:ee:0f:5b:fa:48:fb:58:5e:4a:0a:
d1:03:fd:f3:16:d1:73:be:0e:29:a1:e1:9c:e1:9c:
00:1f:b5:f0:bb:b4:ae:2f:e2:90:d2:3c:40:f7:0e:
b2:3a:0f:19:9e:41:e3:5e:9d:e4:5c:c4:52:57:21:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:E3:62:7B:11:7F:77:EE:C3:6D:C1:4D:A4:53:B3:67:F9:AC:34
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.148.240.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:c1:da:f5:d2:84:40:83:f7:c1:8d:aa:09:a4:72:56:fe:ab:
84:72:5d:62:d0:a1:0a:95:f7:98:04:92:cc:55:4c:e5:c4:8a:
0c:a5:98:52:81:6e:26:6d:47:8a:ee:55:38:bd:4b:3d:97:ef:
eb:27:8a:ed:79:44:8e:63:19:a3:38:de:51:af:15:48:4e:52:
4f:d3:98:bf:12:fe:cd:e6:3e:de:b5:86:f6:66:fb:ab:2b:25:
a0:32:eb:aa:be:85:b8:77:4a:0a:4f:39:86:24:88:f4:23:4a:
90:d0:8e:98:e9:e9:9a:62:1f:c0:71:cd:66:fb:a9:ee:79:b2:
17:98:83:2d:af:a7:ad:ee:10:bd:e7:f9:22:1a:15:3e:dd:d3:
a7:3e:f7:ad:ba:62:00:b0:f1:37:95:9e:1e:9c:2f:8c:bd:86:
c5:ed:a7:f0:c0:2d:39:e1:cf:f1:51:44:e7:45:2d:05:7f:4b:
44:a4:db:81:7c:b1:b2:f5:34:24:b4:9e:39:7e:ef:a3:4a:41:
f7:5d:39:21:5c:d7:ba:c9:97:59:a1:e8:8f:41:71:59:10:f7:
64:2c:ee:e4:95:2e:45:06:f0:ba:1b:f7:40:3b:08:ca:a1:9d:
d8:2e:a6:9a:46:ff:77:29:14:03:04:13:65:13:51:df:ac:e4:
c2:2f:75:1c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTMzMDZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQwQ0ZFMzYyN0IxMTdG
NzdFRUMzNkRDMTREQTQ1M0IzNjdGOUFDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzF9vGt7VU29IUzY4RL+NXKMuO5hi6TSFnBZu5JZ9UvuWxE4B/
ndILP4fEmcKX6QAqC3cx35IV1GSB2hVBhwPvrnjiDhx+6LijexkAi+EYzyHZnAKl
jWdMNh/dsKdrOA9Co0dPXyBRGDu1VuCV5nFd2xx3+9cI1T9izgMMDV7AgEu/ZMP7
Jymj/kABWKa5+B5+n1IQwii3iP6Q2KxkdsGLDNfZbIuDhCntITLsxmd3tD1GKDGJ
NZecVHN8GBRVP67Ni4nlA2lW7g9b+kj7WF5KCtED/fMW0XO+Dimh4ZzhnAAftfC7
tK4v4pDSPED3DrI6DxmeQeNeneRcxFJXIR+LAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUQM/jYnsRf3fuw23BTaRTs2f5rDQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1FNX2pZbnNSZjNmdXcyM0JUYVJUczJmNXJEUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKlPAwDQYJKoZIhvcNAQELBQADggEBANHB2vXShECD98GNqgmkclb+q4Ry
XWLQoQqV95gEksxVTOXEigylmFKBbiZtR4ruVTi9Sz2X7+sniu15RI5jGaM43lGv
FUhOUk/TmL8S/s3mPt61hvZm+6srJaAy66q+hbh3SgpPOYYkiPQjSpDQjpjp6Zpi
H8BxzWb7qe55sheYgy2vp63uEL3n+SIaFT7d06c+9626YgCw8TeVnh6cL4y9hsXt
p/DALTnhz/FRROdFLQV/S0Sk24F8sbL1NCS0njl+76NKQfddOSFc17rJl1mh6I9B
cVkQ92Qs7uSVLkUG8Lob90A7CMqhndgupppG/3cpFAMEE2UTUd+s5MIvdRw=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org