Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KleCrcVYhtQgfuMu_ZaaJhHhV2w.roa
File: KleCrcVYhtQgfuMu_ZaaJhHhV2w.roa (raw, json)
Hash identifier: 6MJ9V4Cd0HqgcKJWvkjCWch+4WxOHw2qM1ZnQEw7cak=
Subject key identifier: 2A:57:82:AD:C5:58:86:D4:20:7E:E3:2E:FD:96:9A:26:11:E1:57:6C
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0424
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KleCrcVYhtQgfuMu_ZaaJhHhV2w.roa
Signing time: Wed 18 Dec 2024 02:22:11 +0000
ROA not before: Wed 18 Dec 2024 02:22:11 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.8.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 26 Feb 2025 09:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060 (0x424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:22:11 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=2A5782ADC55886D4207EE32EFD969A2611E1576C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:fa:33:84:39:6d:3f:16:73:10:cd:02:06:
d5:88:9f:1f:37:1b:ca:c7:83:94:9a:7d:51:ae:dc:
58:a0:90:14:e1:98:f8:d3:7e:94:47:06:de:09:71:
0b:01:14:89:49:54:a9:3c:00:b3:3e:b0:f2:01:a5:
7b:37:e5:b2:69:2a:12:f8:72:91:27:35:af:17:c2:
59:b9:28:05:71:9e:cb:54:1c:92:cb:32:e0:e9:a0:
8b:f4:ca:59:0b:49:ce:3f:91:5a:ce:06:b1:28:fc:
7d:1f:f8:fa:11:ab:89:5b:1d:24:52:80:32:52:cd:
9e:a1:d6:92:e0:ce:9a:15:b2:bd:c4:64:13:97:89:
76:48:b0:78:95:46:b9:f8:3f:ee:ce:02:2b:fc:47:
e1:03:78:f4:a8:7e:04:59:99:37:fd:a3:79:bc:68:
09:59:8d:6f:37:35:65:8d:27:f4:0a:74:ae:de:5a:
3f:ea:26:97:3c:ed:a5:4b:55:0d:39:87:5d:c7:7e:
05:d8:c5:b4:8d:96:2c:50:cf:78:d6:77:8f:7e:b0:
7b:7f:d4:d7:92:4f:96:05:5f:54:1f:e7:3b:5d:de:
81:cd:21:a7:cd:9e:bc:bf:3a:4c:8d:b2:ae:b1:e4:
06:b8:c9:9e:e3:ad:b1:59:6d:c9:a8:5b:a5:7b:47:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:57:82:AD:C5:58:86:D4:20:7E:E3:2E:FD:96:9A:26:11:E1:57:6C
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KleCrcVYhtQgfuMu_ZaaJhHhV2w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.8.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:92:17:d6:96:7c:61:fa:e2:0d:b5:b7:b7:6d:d8:55:73:20:
fb:e3:cd:9b:99:d8:97:d2:22:ec:90:ce:69:0e:c4:c5:1f:ef:
ff:74:2d:df:21:f0:14:fc:3a:75:23:86:aa:c7:48:e4:d0:2c:
02:6b:de:b2:74:0c:3b:d2:16:39:92:fe:1f:ff:32:f3:d7:5a:
63:d9:d1:fe:12:2c:d7:83:2c:b6:69:e4:b0:c8:35:00:8d:86:
e5:34:83:88:d7:5d:60:83:cf:9c:51:5d:b2:a3:5b:78:c9:f7:
fb:6f:f4:9b:d8:93:44:6d:8a:80:1d:00:86:38:88:de:67:c5:
7b:9e:45:17:22:42:aa:02:52:4b:d3:8e:4d:04:2a:75:f6:0f:
71:32:e0:62:9c:6c:fc:83:fe:b6:a2:b5:a0:3f:8b:e4:0a:66:
fe:48:1a:65:79:89:df:3f:83:c3:9b:5d:f6:97:33:c5:09:02:
4b:30:31:49:38:c3:0f:4c:74:ab:65:0a:a6:09:b2:91:c5:7b:
9d:e1:9a:9e:de:85:e7:c3:ab:e7:c0:59:e1:91:ca:82:1c:1d:
cd:75:bc:83:a9:f8:e2:db:01:fa:b4:cd:9f:8b:96:43:68:89:
99:98:f7:5d:33:13:c8:cd:1d:41:6a:be:93:75:76:ec:5f:58:
11:de:73:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:36 2025 by rpki-client