Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MusPOSVh_4tdLMGvPALrHqaLHbA.roa
File: MusPOSVh_4tdLMGvPALrHqaLHbA.roa (raw, json)
Hash identifier: a056a5UstVUBfRQ8HGxdh3zbZbzSXGVT+tWNysP2ta8=
Subject key identifier: 32:EB:0F:39:25:61:FF:8B:5D:2C:C1:AF:3C:02:EB:1E:A6:8B:1D:B0
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 047B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MusPOSVh_4tdLMGvPALrHqaLHbA.roa
Signing time: Wed 18 Dec 2024 02:26:25 +0000
ROA not before: Wed 18 Dec 2024 02:26:25 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.12.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 26 Feb 2025 10:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147 (0x47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:26:25 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=32EB0F392561FF8B5D2CC1AF3C02EB1EA68B1DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:65:18:77:6f:af:4a:c5:e5:bb:2f:14:d4:
fe:49:62:91:32:bc:7e:c5:50:ab:e1:90:1c:6e:82:
47:b2:dd:cb:14:eb:fa:6e:e5:fe:e0:f5:09:11:fd:
7b:31:3a:da:39:e9:fe:7d:9d:50:ca:43:0a:b9:a7:
30:44:38:7f:df:16:a0:74:8e:2d:0a:61:0e:db:c2:
5c:9f:60:bd:c4:79:2e:74:87:1f:be:ac:fd:91:67:
9d:03:f1:db:3d:e4:55:4c:e1:c2:83:0c:aa:d6:a1:
a1:b1:98:76:da:63:4e:3c:c3:f8:b6:5b:50:11:dd:
60:f5:ff:13:b1:4e:62:25:57:b7:c2:72:0d:6f:08:
50:d0:75:95:77:74:d8:54:a8:f9:b4:8b:08:28:64:
03:5d:05:cd:cc:99:ac:77:5e:86:33:49:b2:97:a2:
ee:65:8a:b1:52:72:05:26:87:12:37:c8:81:84:7c:
44:c9:80:0e:00:99:75:e8:10:23:ad:c2:0d:b0:cf:
f6:09:51:d0:45:64:1b:9f:24:15:39:e0:d2:02:bf:
84:c0:2a:f9:4b:cf:88:94:19:36:a5:a7:3e:bf:1b:
99:ef:90:fa:04:b5:ff:c3:8b:07:39:36:68:fc:5f:
6d:a5:71:96:bd:e9:2c:a4:48:df:25:31:23:2e:ef:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:0F:39:25:61:FF:8B:5D:2C:C1:AF:3C:02:EB:1E:A6:8B:1D:B0
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MusPOSVh_4tdLMGvPALrHqaLHbA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.12.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:0f:9c:0a:ce:c6:35:69:f3:82:2d:d9:92:63:3f:9e:81:f6:
f0:a5:87:0d:35:f1:a7:e3:40:1e:4c:b9:41:b9:27:22:0e:51:
87:0b:99:fb:ca:55:d4:87:6b:64:94:2e:bd:f8:03:af:aa:85:
61:82:ae:a4:5a:45:e5:cc:93:e1:52:39:e3:68:71:4f:12:f2:
2b:83:89:57:16:e1:dd:66:e8:eb:81:17:46:6a:50:2b:31:b5:
27:05:d8:97:a5:33:c5:37:a0:9e:98:10:61:7e:68:ea:84:b1:
81:40:08:0d:6f:23:39:33:a5:e0:53:97:a9:c9:fa:c0:54:08:
39:d1:97:e8:7d:c5:bc:b4:8d:c9:76:a9:3e:d4:a6:bd:c8:37:
bd:f9:08:77:10:64:77:bd:56:7d:00:62:70:1d:d9:e7:e0:60:
5c:27:9c:85:3b:dc:be:18:46:b3:f6:4e:aa:2d:7e:54:05:59:
50:9f:72:a1:51:72:ba:1a:a7:98:3c:a0:f4:12:21:c2:6b:84:
de:ce:f7:8a:dc:0c:e8:b0:fc:a8:b3:d8:48:fa:75:ae:da:ea:
78:44:06:72:b1:f7:16:9d:a6:49:94:9d:13:52:33:c1:7d:0a:
2f:10:15:3e:8f:1e:55:9a:04:54:f1:ae:de:f2:ed:39:a9:d2:
36:89:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:52 2025 by rpki-client