Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa
File: gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa (raw, json)
Hash identifier: xJw6ZnJBSLETnXHXXIE8Ezb04FYvTGCjaRQjVOohK04=
Subject key identifier: 81:2D:79:B9:06:8F:CF:06:6E:65:9D:5C:0D:59:CE:62:74:8D:B7:4C
Certificate issuer: /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial: 33
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa
Signing time: Tue 28 May 2024 01:03:03 +0000
ROA not before: Tue 28 May 2024 01:03:03 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 131934
IP address blocks: 118.27.240.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 01 May 2025 01:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
Validity
Not Before: May 28 01:03:03 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=812D79B9068FCF066E659D5C0D59CE62748DB74C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:3d:30:90:fb:b9:d0:00:e1:d0:c0:d7:2d:
c4:30:cc:32:e0:5e:75:af:d9:f8:5b:c4:50:69:94:
26:a6:81:0d:6b:63:0c:ad:17:2d:78:f7:73:f0:a0:
ab:a6:80:00:70:81:97:f4:68:97:ae:5e:20:40:e3:
a5:6c:42:d1:79:30:5e:b1:e4:68:56:bf:48:3b:55:
9d:21:e5:da:0a:7f:2a:3c:9d:59:92:ac:0a:99:cc:
5c:95:1a:d9:5e:00:07:8f:1b:cb:ba:b6:18:9f:8a:
53:57:a5:49:1d:00:c8:82:fc:d7:48:38:5e:a4:cf:
0b:7a:ae:18:b3:1e:49:84:a7:ab:a5:10:d8:e4:3e:
8c:6a:f2:d5:de:f1:df:e3:3b:7a:0f:04:a4:90:52:
9f:09:15:13:bb:c3:4e:13:21:f7:04:bf:e4:3c:7f:
2a:d6:8e:d3:02:61:e4:d1:fc:ea:7e:ae:9c:c3:10:
00:30:5c:ed:b2:bb:af:21:d6:06:26:e6:9d:a0:bb:
6c:ee:f6:6b:66:46:c4:92:13:2b:bb:c3:eb:b3:c0:
fa:1a:a1:ae:52:ba:d8:8f:f7:c4:f1:b3:a8:88:84:
2b:f6:91:f6:c2:49:89:95:5f:a5:d2:71:a4:cb:29:
cc:cc:9b:37:96:ca:ed:27:ad:43:e0:28:05:d5:56:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2D:79:B9:06:8F:CF:06:6E:65:9D:5C:0D:59:CE:62:74:8D:B7:4C
X509v3 Authority Key Identifier:
keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/gS15uQaPzwZuZZ1cDVnOYnSNt0w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.27.240.0/20
Signature Algorithm: sha256WithRSAEncryption
07:1d:66:0d:bb:24:9d:ca:6d:cc:6b:e8:c3:c8:ca:06:66:14:
ae:bf:fe:c1:90:69:4b:a0:da:44:4e:5b:b7:bd:ee:55:c2:5e:
5e:3c:09:ff:d6:0d:8e:b2:a8:de:4f:00:5d:c2:3d:fe:34:e4:
be:b0:4c:61:b8:6e:bb:95:c0:28:8b:a9:fe:49:8a:60:4c:88:
56:73:58:b8:21:8c:44:28:32:9f:9e:e7:73:43:70:11:5b:1b:
f7:ce:78:59:16:65:3c:64:3e:af:f6:a9:3f:51:27:94:8d:ef:
ca:ea:55:82:b1:d9:2e:c0:4b:f9:3b:bd:e2:f4:c0:9b:18:23:
43:86:c4:19:33:21:90:11:07:c0:c8:e5:cc:39:90:6d:73:75:
14:dc:44:45:18:86:a9:2b:04:e5:fd:65:b2:f9:6a:68:f8:e4:
2c:12:5a:30:13:75:88:2f:e6:f3:68:5a:07:d6:49:7b:52:ff:
b0:c9:77:d7:dc:25:d4:b7:0e:ed:a3:ce:c6:cd:34:72:b3:e8:
66:e9:81:95:3c:5a:2f:04:04:bc:ce:6e:29:85:25:e8:5c:4b:
a1:fd:75:31:15:0a:2c:69:32:d9:82:6f:a8:53:df:e6:4a:ca:
c3:f0:e0:db:ff:b4:99:ce:37:08:cb:bf:29:3f:b3:96:c2:8b:
09:a7:11:8a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC
Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTI0MDUyODAx
MDMwM1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoODEyRDc5QjkwNjhGQ0Yw
NjZFNjU5RDVDMEQ1OUNFNjI3NDhEQjc0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ2fPTCQ+7nQAOHQwNctxDDMMuBeda/Z+FvEUGmUJqaBDWtjDK0X
LXj3c/Cgq6aAAHCBl/Rol65eIEDjpWxC0XkwXrHkaFa/SDtVnSHl2gp/KjydWZKs
CpnMXJUa2V4AB48by7q2GJ+KU1elSR0AyIL810g4XqTPC3quGLMeSYSnq6UQ2OQ+
jGry1d7x3+M7eg8EpJBSnwkVE7vDThMh9wS/5Dx/KtaO0wJh5NH86n6unMMQADBc
7bK7ryHWBibmnaC7bO72a2ZGxJITK7vD67PA+hqhrlK62I/3xPGzqIiEK/aR9sJJ
iZVfpdJxpMspzMybN5bK7SetQ+AoBdVWkSECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSBLXm5Bo/PBm5lnVwNWc5idI23TDAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU
wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa
NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDAvZ1MxNXVRYVB6d1p1WloxY0RWbk9ZblNOdDB3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHYb8DANBgkqhkiG9w0BAQsFAAOCAQEABx1mDbskncptzGvow8jKBmYUrr/+
wZBpS6DaRE5bt73uVcJeXjwJ/9YNjrKo3k8AXcI9/jTkvrBMYbhuu5XAKIup/kmK
YEyIVnNYuCGMRCgyn57nc0NwEVsb9854WRZlPGQ+r/apP1EnlI3vyupVgrHZLsBL
+Tu94vTAmxgjQ4bEGTMhkBEHwMjlzDmQbXN1FNxERRiGqSsE5f1lsvlqaPjkLBJa
MBN1iC/m82haB9ZJe1L/sMl319wl1LcO7aPOxs00crPoZumBlTxaLwQEvM5uKYUl
6FxLof11MRUKLGky2YJvqFPf5krKw/Dg2/+0mc43CMu/KT+zlsKLCacRig==
-----END CERTIFICATE-----
Generated at Sun May 18 19:04:39 2025 by rpki-client