Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xyKXp6ysckIvz3IWSgPFmUBWSV8.roa
File: xyKXp6ysckIvz3IWSgPFmUBWSV8.roa (raw, json)
Hash identifier: 8+lnwbSwNAt3lbV6iDOdtDj8fZF4FirkJ7pDPkXCHxw=
Subject key identifier: C7:22:97:A7:AC:AC:72:42:2F:CF:72:16:4A:03:C5:99:40:56:49:5F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0652
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xyKXp6ysckIvz3IWSgPFmUBWSV8.roa
Signing time: Tue 30 Apr 2024 01:31:34 +0000
ROA not before: Tue 30 Apr 2024 01:31:34 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 27.230.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 01:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:31:34 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C72297A7ACAC72422FCF72164A03C5994056495F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:c9:8b:83:04:92:60:6f:da:75:97:f5:4d:
0a:d3:68:1e:bd:39:b7:a5:34:23:bb:de:f6:ac:4d:
55:00:70:d6:23:eb:7d:06:e1:f0:25:0d:59:e8:97:
4b:c0:d4:ee:a8:5e:06:ef:d5:71:ab:b6:09:92:6d:
6a:3e:3f:be:09:06:fa:0f:3a:88:e7:9b:60:ac:cc:
db:fd:ff:09:2a:db:bc:04:96:f8:1e:f9:c9:f5:fd:
2c:72:24:bc:56:0e:90:7a:50:54:3f:d4:f0:bf:02:
a1:e5:99:0a:38:4e:4c:90:8b:5c:15:da:6b:2a:0d:
8d:35:e6:03:43:71:9c:01:dd:2d:0a:39:00:fb:b7:
e5:12:7c:e0:0e:6a:56:15:10:b7:47:d2:64:79:b6:
c7:9b:e1:34:77:f5:0a:d9:03:66:a8:c6:a2:bd:3d:
31:8a:28:0d:46:30:78:e9:55:a1:13:c8:30:f5:6d:
3c:fe:d3:f7:6d:98:07:99:f6:4d:8d:11:1e:4f:57:
53:5b:93:e0:fd:1a:88:ad:0a:b5:e8:14:56:44:3e:
89:5d:2e:02:d8:1c:ce:11:c7:44:65:9e:6f:2d:74:
58:c2:e9:e8:25:fa:bf:5e:12:91:40:4a:5a:59:cc:
2e:d9:ed:c3:2f:cd:f6:c6:57:1a:a0:3f:62:d2:57:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:97:A7:AC:AC:72:42:2F:CF:72:16:4A:03:C5:99:40:56:49:5F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xyKXp6ysckIvz3IWSgPFmUBWSV8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a1:90:0e:44:e4:06:0e:fb:cf:ae:e6:43:c9:ef:b9:2d:05:
f0:8c:16:80:4a:c7:5e:89:e6:de:48:11:66:3e:68:e5:94:67:
0e:a0:0a:e0:64:aa:93:b5:26:99:c6:ed:2b:08:01:10:46:e8:
7a:7c:dc:f8:e0:1c:f7:ea:79:ce:c9:c9:c4:5c:b5:48:49:6b:
86:5d:4f:4e:2c:0b:df:41:34:8c:3f:6d:7a:91:51:04:b6:66:
58:02:fb:6d:bd:2c:fa:41:01:3a:87:87:f7:14:95:87:31:bc:
f6:4f:c6:d2:40:5d:c0:1c:fb:f6:03:65:1c:95:57:53:56:79:
3e:2d:cc:8c:2e:da:28:55:57:ab:2b:73:c2:ea:a3:c1:f7:46:
f6:d9:e2:07:85:26:84:ea:37:85:0c:fe:7e:d9:9f:df:39:09:
5f:0f:d9:de:8b:4a:76:ee:fd:ee:07:da:99:f6:19:85:89:58:
23:00:19:48:2d:ff:6a:30:12:20:81:98:a5:d1:48:17:5b:82:
dd:49:15:50:26:17:2a:b3:be:a9:12:21:56:af:1e:94:d9:36:
96:57:87:8e:bf:49:3b:16:a8:0b:93:01:b3:72:c1:ad:17:24:
4e:fa:c9:3f:bf:6a:82:fa:f2:b5:40:c4:6f:00:fb:6c:fb:90:
36:03:9d:a8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTMxMzRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3MjI5N0E3QUNBQzcy
NDIyRkNGNzIxNjRBMDNDNTk5NDA1NjQ5NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5XMmLgwSSYG/adZf1TQrTaB69ObelNCO73vasTVUAcNYj630G
4fAlDVnol0vA1O6oXgbv1XGrtgmSbWo+P74JBvoPOojnm2CszNv9/wkq27wElvge
+cn1/SxyJLxWDpB6UFQ/1PC/AqHlmQo4TkyQi1wV2msqDY015gNDcZwB3S0KOQD7
t+USfOAOalYVELdH0mR5tseb4TR39QrZA2aoxqK9PTGKKA1GMHjpVaETyDD1bTz+
0/dtmAeZ9k2NER5PV1Nbk+D9GoitCrXoFFZEPoldLgLYHM4Rx0Rlnm8tdFjC6egl
+r9eEpFASlpZzC7Z7cMvzfbGVxqgP2LSV0fXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUxyKXp6ysckIvz3IWSgPFmUBWSV8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3h5S1hwNnlzY2tJdnozSVdTZ1BGbVVCV1NWOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAb5jQwDQYJKoZIhvcNAQELBQADggEBADGhkA5E5AYO+8+u5kPJ77ktBfCM
FoBKx16J5t5IEWY+aOWUZw6gCuBkqpO1JpnG7SsIARBG6Hp83PjgHPfqec7JycRc
tUhJa4ZdT04sC99BNIw/bXqRUQS2ZlgC+229LPpBATqHh/cUlYcxvPZPxtJAXcAc
+/YDZRyVV1NWeT4tzIwu2ihVV6src8Lqo8H3RvbZ4geFJoTqN4UM/n7Zn985CV8P
2d6LSnbu/e4H2pn2GYWJWCMAGUgt/2owEiCBmKXRSBdbgt1JFVAmFyqzvqkSIVav
HpTZNpZXh46/STsWqAuTAbNywa0XJE76yT+/aoL68rVAxG8A+2z7kDYDnag=
-----END CERTIFICATE-----
Generated at Tue Apr 1 05:42:38 2025 by rpki-client on console.sobornost.net