Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa
File: qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa (raw, json)
Hash identifier: VKGTRM7Ls6xuZ7fJfjI4zQpo+u3rmo5ROQAZH8TYpXA=
Subject key identifier: AA:BE:01:A5:F9:0E:23:BB:10:09:D5:82:35:E2:68:2E:0E:88:B4:5D
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 011C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa
Signing time: Fri 01 Sep 2023 01:30:26 +0000
ROA not before: Fri 01 Sep 2023 01:30:26 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 9824
IP address blocks: 223.165.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 01:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Sep 1 01:30:26 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=AABE01A5F90E23BB1009D58235E2682E0E88B45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:72:10:ee:f0:55:ba:f7:8b:d9:2a:75:cc:
63:79:1e:ec:0e:5c:0c:e8:b6:ca:0d:83:c8:fb:0a:
26:5a:7d:08:1a:9f:aa:9f:3b:2a:9f:88:7e:30:1c:
89:bc:bf:aa:41:f5:9a:12:33:08:75:49:97:1b:c0:
f5:8e:b2:8e:bb:25:31:8e:ff:61:5b:97:d9:2a:3f:
b8:38:bd:d9:9f:08:b9:a9:86:5f:d1:be:c9:8e:d3:
88:87:d7:c4:7f:8e:38:31:c7:bb:80:a8:ab:84:70:
01:62:f1:45:34:ad:a0:47:e1:c6:f8:4b:36:c3:73:
12:1c:72:14:82:58:0c:4b:28:97:85:27:95:26:11:
56:be:ff:0f:6e:90:b7:06:43:75:64:05:83:b1:4f:
e8:74:11:9e:64:00:27:d7:3a:c3:5b:cf:53:88:84:
a0:a3:71:3b:e9:1d:b4:78:52:6a:f1:37:43:c4:37:
27:59:fe:d1:72:0c:b1:4d:c4:90:b9:e6:1d:1b:28:
f7:97:92:fc:29:04:ef:42:b3:ee:a1:39:7b:97:af:
5f:df:66:d2:ec:14:62:b8:d5:46:98:1b:c4:d0:16:
0b:41:96:95:68:dc:77:36:20:a5:de:c2:9c:5f:d0:
fa:48:55:d3:6f:fa:21:a3:9f:75:69:05:8f:88:c8:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:01:A5:F9:0E:23:BB:10:09:D5:82:35:E2:68:2E:0E:88:B4:5D
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.165.20.0/22
Signature Algorithm: sha256WithRSAEncryption
61:c2:5e:96:de:07:1d:f4:e7:e3:c0:db:37:09:30:68:6c:e0:
cb:10:02:b6:62:53:e5:e4:04:df:96:07:15:f5:38:0b:1c:6f:
59:ae:b6:08:29:aa:96:ad:e2:61:1d:77:f9:2b:b3:bb:92:5d:
3b:ec:95:7d:ec:26:08:e7:c0:4f:01:cc:fb:92:5c:f5:a1:a7:
11:8d:ac:6d:fc:80:ec:f6:39:89:0e:83:db:13:13:19:fc:38:
00:da:e9:c6:b2:d6:29:4a:1d:f2:cf:3d:f7:80:78:e7:64:e0:
df:88:00:68:10:98:0f:28:c1:2a:16:40:e0:e7:b0:44:62:33:
a4:bf:8d:08:b2:8c:a1:2a:0c:89:6e:7b:f7:fe:2e:9c:d5:85:
fa:cb:68:04:c0:ea:05:cc:94:fa:01:6d:93:5f:a3:eb:08:42:
ee:24:1d:bc:84:06:a9:65:e8:b6:9e:12:10:a8:2c:06:a6:78:
65:65:01:e1:28:88:c4:e3:9f:e1:ba:71:81:31:f2:3b:41:c3:
0f:76:e5:66:03:02:9b:a9:2e:56:40:cc:56:70:23:1c:2a:58:
61:0a:2c:54:92:70:e8:d2:7b:13:29:36:d4:35:42:95:d5:82:
f0:15:ef:bc:14:96:0c:ea:27:03:90:5a:29:2d:02:82:69:87:
79:b4:5d:c6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw
MTMwMjZaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFBQkUwMUE1RjkwRTIz
QkIxMDA5RDU4MjM1RTI2ODJFMEU4OEI0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDidHIQ7vBVuveL2Sp1zGN5HuwOXAzotsoNg8j7CiZafQgan6qf
OyqfiH4wHIm8v6pB9ZoSMwh1SZcbwPWOso67JTGO/2Fbl9kqP7g4vdmfCLmphl/R
vsmO04iH18R/jjgxx7uAqKuEcAFi8UU0raBH4cb4SzbDcxIcchSCWAxLKJeFJ5Um
EVa+/w9ukLcGQ3VkBYOxT+h0EZ5kACfXOsNbz1OIhKCjcTvpHbR4UmrxN0PENydZ
/tFyDLFNxJC55h0bKPeXkvwpBO9Cs+6hOXuXr1/fZtLsFGK41UaYG8TQFgtBlpVo
3Hc2IKXewpxf0PpIVdNv+iGjn3VpBY+IyIaFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqr4BpfkOI7sQCdWCNeJoLg6ItF0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3FyNEJwZmtPSTdzUUNkV0NOZUpvTGc2SXRGMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALfpRQwDQYJKoZIhvcNAQELBQADggEBAGHCXpbeBx305+PA2zcJMGhs4MsQ
ArZiU+XkBN+WBxX1OAscb1mutggpqpat4mEdd/krs7uSXTvslX3sJgjnwE8BzPuS
XPWhpxGNrG38gOz2OYkOg9sTExn8OADa6cay1ilKHfLPPfeAeOdk4N+IAGgQmA8o
wSoWQODnsERiM6S/jQiyjKEqDIlue/f+LpzVhfrLaATA6gXMlPoBbZNfo+sIQu4k
HbyEBqll6LaeEhCoLAameGVlAeEoiMTjn+G6cYEx8jtBww925WYDApupLlZAzFZw
IxwqWGEKLFSScOjSexMpNtQ1QpXVgvAV77wUlgzqJwOQWiktAoJph3m0XcY=
-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:27 2024 by rpki-client on console-fra.rpki-client.org