Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/hvrC2RgjCcsGi-GENDhuNRQxa74.roa
File: hvrC2RgjCcsGi-GENDhuNRQxa74.roa (raw, json)
Hash identifier: K52ZpkP4cS9oU+TMiXVf+oG1YqOe9bw9J/a2AIiB1dE=
Subject key identifier: 86:FA:C2:D9:18:23:09:CB:06:8B:E1:84:34:38:6E:35:14:31:6B:BE
Certificate issuer: /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial: 86
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/hvrC2RgjCcsGi-GENDhuNRQxa74.roa
Signing time: Fri 31 May 2024 01:28:28 +0000
ROA not before: Fri 31 May 2024 01:28:28 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 24277
IP address blocks: 115.166.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 01:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Validity
Not Before: May 31 01:28:28 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=86FAC2D9182309CB068BE18434386E3514316BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:a4:79:b5:a9:3b:37:22:fa:68:e9:18:2a:
99:bf:ca:5d:06:cf:75:94:8c:01:4b:d6:41:ab:f4:
1b:ea:ae:61:f4:24:4c:68:e7:d6:e0:46:a3:5d:6b:
dc:40:ff:3e:5a:66:2a:4e:b2:c5:5f:20:3f:2c:4e:
f7:c3:30:e6:da:38:26:83:a5:fb:18:ff:8e:c9:f9:
2b:f7:95:7a:22:ab:73:3a:a5:f1:f6:d3:9c:ad:c7:
a4:d4:c9:10:58:c3:6d:66:ef:25:0a:1e:ff:55:6a:
a9:9d:08:f1:e7:37:20:e6:09:74:df:ec:42:5f:c5:
19:0a:16:72:06:a3:6e:c5:fa:4e:a9:06:fd:95:f5:
e4:83:cd:c5:5e:5f:dc:f4:0b:ea:cf:81:5b:c6:ac:
34:bb:ca:ea:b8:2c:3e:68:f4:1b:03:f5:14:1b:42:
29:90:cb:8b:b7:b7:96:4e:2a:ce:a5:50:8f:6e:af:
c6:7a:ca:58:d2:86:d7:29:ef:ed:5e:e1:55:59:6f:
3f:30:0a:49:9b:ba:27:72:a6:e9:6c:95:c9:42:55:
36:ac:54:43:ab:fc:e9:83:83:c5:98:d7:6d:52:73:
eb:98:65:bb:47:47:4a:1f:b8:dd:79:fe:0c:08:23:
12:c2:31:ed:6f:9c:78:bc:a9:f9:b0:fa:8c:36:99:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:C2:D9:18:23:09:CB:06:8B:E1:84:34:38:6E:35:14:31:6B:BE
X509v3 Authority Key Identifier:
keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/hvrC2RgjCcsGi-GENDhuNRQxa74.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.166.160.0/19
Signature Algorithm: sha256WithRSAEncryption
88:4d:c5:39:99:e5:28:ca:9b:72:fe:08:2f:e7:75:92:b8:1c:
1f:0b:90:68:f0:43:be:97:18:bc:d7:3e:5e:db:0e:84:2d:ef:
c2:04:38:a3:b5:8e:b2:59:20:e0:b9:04:d3:14:d3:5c:6f:96:
1f:81:12:80:c0:17:23:ed:08:cb:bf:0a:06:01:92:e7:6f:06:
e9:41:d0:97:c2:7b:db:2c:06:cf:21:37:21:8c:73:a4:f7:85:
ad:3a:11:bd:8d:a1:14:81:c3:a5:93:64:4a:29:b0:94:72:5d:
68:f4:a8:1d:60:49:b6:5f:e7:fb:3a:97:ac:2e:b2:1c:fc:95:
d0:af:a3:cf:3a:08:78:46:f7:b2:61:d5:31:c9:82:a8:e0:a4:
61:fb:bc:70:00:a4:29:91:45:db:3a:5c:b2:bf:30:4e:a2:15:
d4:63:f3:dc:0e:35:40:10:16:54:49:dd:00:f6:3a:03:36:f7:
d5:91:d9:c5:f5:b7:bf:90:32:a2:44:aa:2c:f7:52:75:ee:48:
46:69:0e:cb:d0:e6:13:17:0e:d8:eb:58:18:fb:63:89:e7:4e:
96:be:a3:af:ea:26:d2:36:cc:02:65:9d:d6:91:1f:55:1b:7c:
b8:b8:73:ad:aa:fd:8c:1f:00:cc:30:71:01:7e:88:75:ee:99:
ae:f2:9a:fd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURC
MDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUyQTAeFw0yNDA1MzEw
MTI4MjhaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg2RkFDMkQ5MTgyMzA5
Q0IwNjhCRTE4NDM0Mzg2RTM1MTQzMTZCQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0gaR5tak7NyL6aOkYKpm/yl0Gz3WUjAFL1kGr9BvqrmH0JExo
59bgRqNda9xA/z5aZipOssVfID8sTvfDMObaOCaDpfsY/47J+Sv3lXoiq3M6pfH2
05ytx6TUyRBYw21m7yUKHv9VaqmdCPHnNyDmCXTf7EJfxRkKFnIGo27F+k6pBv2V
9eSDzcVeX9z0C+rPgVvGrDS7yuq4LD5o9BsD9RQbQimQy4u3t5ZOKs6lUI9ur8Z6
yljShtcp7+1e4VVZbz8wCkmbuidypulslclCVTasVEOr/OmDg8WY121Sc+uYZbtH
R0ofuN15/gwIIxLCMe1vnHi8qfmw+ow2mdaRAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUhvrC2RgjCcsGi+GENDhuNRQxa74wHwYDVR0jBBgwFoAUnbB2TG38Hj32vVgO
pplKHnCY9SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDYzL25iQjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25iQjJURzM4SGozMnZWZ09wcGxL
SG5DWTlTby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA2My9odnJDMlJnakNjc0dpLUdFTkRodU5SUXhhNzQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFc6agMA0GCSqGSIb3DQEBCwUAA4IBAQCITcU5meUoypty/ggv53WS
uBwfC5Bo8EO+lxi81z5e2w6ELe/CBDijtY6yWSDguQTTFNNcb5YfgRKAwBcj7QjL
vwoGAZLnbwbpQdCXwnvbLAbPITchjHOk94WtOhG9jaEUgcOlk2RKKbCUcl1o9Kgd
YEm2X+f7OpesLrIc/JXQr6PPOgh4RveyYdUxyYKo4KRh+7xwAKQpkUXbOlyyvzBO
ohXUY/PcDjVAEBZUSd0A9joDNvfVkdnF9be/kDKiRKos91J17khGaQ7L0OYTFw7Y
61gY+2OJ506WvqOv6ibSNswCZZ3WkR9VG3y4uHOtqv2MHwDMMHEBfoh17pmu8pr9
-----END CERTIFICATE-----
Generated at Tue May 6 12:06:36 2025 by rpki-client