Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/X2FHZOwq_1okPzw-r3XBQBt49is.roa
File: X2FHZOwq_1okPzw-r3XBQBt49is.roa (raw, json)
Hash identifier: w2EwM/qVjbVYF0VRil14lNDiA3F+EiP1OWVTCT8C45I=
Subject key identifier: 5F:61:47:64:EC:2A:FF:5A:24:3F:3C:3E:AF:75:C1:40:1B:78:F6:2B
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: E0
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/X2FHZOwq_1okPzw-r3XBQBt49is.roa
Signing time: Fri 31 May 2024 01:31:23 +0000
ROA not before: Fri 31 May 2024 01:31:23 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 9370
IP address blocks: 153.121.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 01:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: May 31 01:31:23 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=5F614764EC2AFF5A243F3C3EAF75C1401B78F62B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:ba:72:0c:39:64:84:c0:50:2b:c6:45:8b:
6b:d5:66:48:aa:3f:85:71:91:86:16:47:3e:31:d9:
64:f7:e0:0e:ba:a8:4b:40:46:77:f4:83:9c:b3:35:
7c:cb:c2:1f:fa:e9:6d:ef:d1:4f:45:ea:26:93:7d:
8f:3c:70:d8:72:83:a9:9c:a1:f7:c4:4a:9d:18:f0:
0b:45:a0:03:a7:9f:35:a9:f3:ab:5e:75:25:67:93:
43:ce:26:09:a4:73:1b:45:38:f2:c1:6f:ed:23:b1:
36:25:f0:0b:30:69:fe:21:b7:cc:c6:f1:b5:a0:8f:
88:82:ed:0b:ea:a9:db:ad:03:a3:d8:66:a3:ec:3a:
b4:3a:fe:7f:f6:7d:33:aa:f0:2d:1e:3b:96:a8:68:
8c:7a:79:74:be:2a:f8:35:b6:e6:6e:05:af:72:96:
42:f7:ab:22:b5:cf:db:d1:bf:4e:f2:16:b7:2b:31:
5a:91:ee:cf:6e:f5:e7:a8:8a:60:f6:2b:6e:7c:42:
4c:29:96:5e:96:a7:f6:9b:de:23:46:e8:3d:aa:fe:
5e:0f:62:21:fc:fd:d4:fa:5d:8b:29:ae:94:dc:8c:
d1:ba:5a:e2:64:bc:75:08:9d:2a:75:66:59:77:76:
10:a9:3d:00:09:50:d2:df:39:34:71:5c:7b:52:65:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:47:64:EC:2A:FF:5A:24:3F:3C:3E:AF:75:C1:40:1B:78:F6:2B
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/X2FHZOwq_1okPzw-r3XBQBt49is.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.121.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:2e:02:00:62:df:80:36:66:dc:10:00:67:de:a2:d3:6a:1d:
be:fb:bf:71:5c:73:b4:57:8d:98:72:b2:8d:f9:42:83:57:29:
83:3b:50:54:be:cf:4e:6a:e7:8e:48:74:87:9d:69:05:0a:62:
8c:9c:03:38:e6:f3:08:fe:17:02:13:f4:9f:86:45:9d:c3:bf:
e5:79:69:4d:1f:95:6e:d8:b5:4d:70:7e:52:f3:6b:74:d3:a0:
f4:70:e4:40:94:d6:1a:b8:d0:39:1e:f0:d6:33:6a:88:25:c9:
59:0d:bb:d9:73:9d:47:15:41:cc:ec:9e:14:9d:98:83:e0:56:
b7:70:17:5e:1a:6b:ca:07:a4:6c:54:ec:5d:16:6c:37:8c:a7:
08:9f:c2:25:8d:e9:d5:da:83:e7:84:fb:c7:0e:1f:d2:07:09:
b5:84:2a:4e:66:13:cc:b1:5b:fd:ff:78:b8:27:8e:b9:2a:fd:
b0:8e:73:bd:2d:e9:01:79:8c:da:ee:41:66:ef:3b:00:ae:fd:
42:87:d4:1c:63:ec:7b:99:b1:bf:ad:ce:91:9f:cb:26:38:74:
5d:5e:0a:77:5f:b5:0a:1b:4e:0b:1b:42:ed:03:cf:f2:c9:a7:
66:88:ef:7f:9a:4c:03:4b:a8:05:60:c4:e3:a1:16:ed:34:88:
aa:6c:55:52
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw
MTMxMjNaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVGNjE0NzY0RUMyQUZG
NUEyNDNGM0MzRUFGNzVDMTQwMUI3OEY2MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5pbpyDDlkhMBQK8ZFi2vVZkiqP4VxkYYWRz4x2WT34A66qEtA
Rnf0g5yzNXzLwh/66W3v0U9F6iaTfY88cNhyg6mcoffESp0Y8AtFoAOnnzWp86te
dSVnk0POJgmkcxtFOPLBb+0jsTYl8Aswaf4ht8zG8bWgj4iC7QvqqdutA6PYZqPs
OrQ6/n/2fTOq8C0eO5aoaIx6eXS+Kvg1tuZuBa9ylkL3qyK1z9vRv07yFrcrMVqR
7s9u9eeoimD2K258Qkwpll6Wp/ab3iNG6D2q/l4PYiH8/dT6XYsprpTcjNG6WuJk
vHUInSp1Zll3dhCpPQAJUNLfOTRxXHtSZdiHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUX2FHZOwq/1okPzw+r3XBQBt49iswHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L1gyRkhaT3dxXzFva1B6dy1yM1hCUUJ0NDlpcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWZeQAwDQYJKoZIhvcNAQELBQADggEBAF0uAgBi34A2ZtwQAGfeotNqHb77
v3Fcc7RXjZhyso35QoNXKYM7UFS+z05q545IdIedaQUKYoycAzjm8wj+FwIT9J+G
RZ3Dv+V5aU0flW7YtU1wflLza3TToPRw5ECU1hq40Dke8NYzaoglyVkNu9lznUcV
QczsnhSdmIPgVrdwF14aa8oHpGxU7F0WbDeMpwifwiWN6dXag+eE+8cOH9IHCbWE
Kk5mE8yxW/3/eLgnjrkq/bCOc70t6QF5jNruQWbvOwCu/UKH1Bxj7HuZsb+tzpGf
yyY4dF1eCndftQobTgsbQu0Dz/LJp2aI73+aTANLqAVgxOOhFu00iKpsVVI=
-----END CERTIFICATE-----
Generated at Sun May 18 07:51:00 2025 by rpki-client