Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/vryNRH9GBe589rmOqDfI7kMLLlQ.roa
File: vryNRH9GBe589rmOqDfI7kMLLlQ.roa (raw, json)
Hash identifier: /GoYb7U3DnTxpL/uL5BtooroUUJoKGIb/G6HAJjj98o=
Subject key identifier: BE:BC:8D:44:7F:46:05:EE:7C:F6:B9:8E:A8:37:C8:EE:43:0B:2E:54
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 92
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/vryNRH9GBe589rmOqDfI7kMLLlQ.roa
Signing time: Sat 01 Jul 2023 01:28:35 +0000
ROA not before: Sat 01 Jul 2023 01:28:35 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 2518
IP address blocks: 202.247.0.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 01:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Jul 1 01:28:35 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=BEBC8D447F4605EE7CF6B98EA837C8EE430B2E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:92:f6:d5:9e:fe:cb:f2:77:fc:86:f7:17:
9d:7d:dd:ce:8e:ee:9e:57:ac:5f:a9:11:e8:0f:f9:
ab:1c:fc:3f:4b:0f:51:9a:31:e3:6c:a0:79:a4:8c:
92:55:64:93:f5:3e:64:1f:e9:06:44:bc:d3:af:94:
f0:f3:46:57:57:e8:9c:bc:e8:bb:8a:42:46:0a:9f:
06:d4:ab:04:c6:e6:0a:e2:52:24:03:bc:20:2c:52:
aa:92:3a:66:77:8d:50:fb:7d:9d:20:13:58:64:ea:
ad:8b:6c:38:27:3e:20:6d:66:9a:9a:0e:fc:b5:ac:
58:bc:b7:fd:27:89:1e:4c:65:97:4b:cb:06:7e:ee:
87:ea:45:55:54:11:62:80:53:e6:bb:e0:0d:b2:8e:
1c:28:8e:e7:db:db:40:0e:11:fa:70:f6:98:8f:e9:
e2:c5:eb:32:14:aa:8e:b5:b2:3b:e8:36:e3:41:ca:
c8:99:69:90:ca:e5:e1:2b:5d:50:ca:49:a9:0c:fe:
c8:f9:68:a3:61:4f:e4:97:05:68:b5:e0:6a:40:24:
22:6f:b8:8d:43:b8:46:6f:e2:5f:93:28:eb:76:c5:
ec:7d:e0:6a:5e:bf:94:cf:5f:87:e5:60:61:95:9a:
be:44:4a:83:ca:e8:8c:b9:c7:bb:c7:23:dd:bf:56:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:8D:44:7F:46:05:EE:7C:F6:B9:8E:A8:37:C8:EE:43:0B:2E:54
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/vryNRH9GBe589rmOqDfI7kMLLlQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.247.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8f:b0:70:31:0a:7e:32:31:69:53:a3:93:ea:32:e7:02:4e:8e:
9e:56:97:b2:c9:f9:57:34:87:0f:77:6f:47:9f:1e:8a:aa:92:
7a:bf:7a:0a:25:8e:49:e2:ed:1e:08:99:ae:d4:0c:a9:d3:16:
c2:dc:0c:f1:fb:87:03:12:12:74:13:9c:02:b4:34:3e:9b:35:
49:d8:1c:44:fd:53:a2:b2:d8:e7:b6:da:16:10:c5:33:fa:5d:
44:4a:23:37:35:3e:f5:2a:34:53:94:ac:25:49:72:73:76:e6:
91:c6:10:2c:64:03:4b:1a:5f:71:90:31:94:8b:c2:4a:11:7d:
f0:b4:54:f4:37:db:9a:1b:22:92:2c:42:08:ba:42:80:44:d0:
45:97:38:6d:77:0a:ee:b1:31:ef:07:85:1d:d8:9d:b7:c6:7b:
cf:6f:9a:d6:5b:d9:0b:3b:a3:57:7d:43:51:e9:dd:f8:ef:22:
91:4a:1e:27:6f:2e:dc:8d:45:d2:73:bc:67:e0:89:ac:57:f4:
63:9e:72:5a:79:0a:6b:12:35:c1:1d:18:0e:24:09:09:9c:9d:
e2:ba:cb:74:5d:ff:00:8b:e8:7f:51:c0:36:87:1c:03:de:12:
0a:af:01:4e:6e:d9:3b:2f:bc:04:3f:db:2f:3c:97:0a:21:71:
2c:6f:9d:9f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yMzA3MDEw
MTI4MzVaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJFQkM4RDQ0N0Y0NjA1
RUU3Q0Y2Qjk4RUE4MzdDOEVFNDMwQjJFNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR95L21Z7+y/J3/Ib3F5193c6O7p5XrF+pEegP+asc/D9LD1Ga
MeNsoHmkjJJVZJP1PmQf6QZEvNOvlPDzRldX6Jy86LuKQkYKnwbUqwTG5griUiQD
vCAsUqqSOmZ3jVD7fZ0gE1hk6q2LbDgnPiBtZpqaDvy1rFi8t/0niR5MZZdLywZ+
7ofqRVVUEWKAU+a74A2yjhwojufb20AOEfpw9piP6eLF6zIUqo61sjvoNuNBysiZ
aZDK5eErXVDKSakM/sj5aKNhT+SXBWi14GpAJCJvuI1DuEZv4l+TKOt2xex94Gpe
v5TPX4flYGGVmr5ESoPK6Iy5x7vHI92/VpaBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvryNRH9GBe589rmOqDfI7kMLLlQwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5L3ZyeU5SSDlHQmU1ODlybU9xRGZJN2tNTExsUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfK9wAwDQYJKoZIhvcNAQELBQADggEBAI+wcDEKfjIxaVOjk+oy5wJOjp5W
l7LJ+Vc0hw93b0efHoqqknq/egoljkni7R4Ima7UDKnTFsLcDPH7hwMSEnQTnAK0
ND6bNUnYHET9U6Ky2Oe22hYQxTP6XURKIzc1PvUqNFOUrCVJcnN25pHGECxkA0sa
X3GQMZSLwkoRffC0VPQ325obIpIsQgi6QoBE0EWXOG13Cu6xMe8HhR3YnbfGe89v
mtZb2Qs7o1d9Q1Hp3fjvIpFKHidvLtyNRdJzvGfgiaxX9GOeclp5CmsSNcEdGA4k
CQmcneK6y3Rd/wCL6H9RwDaHHAPeEgqvAU5u2TsvvAQ/2y88lwohcSxvnZ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org