Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/iOEFemeoqZpF_Dyu9yooA25HjVs.roa
File: iOEFemeoqZpF_Dyu9yooA25HjVs.roa (raw, json)
Hash identifier: OPdU7JaDXkNQvXsFH4BKh7sm4Kf+7FILAf/xbvSmq3k=
Subject key identifier: 88:E1:05:7A:67:A8:A9:9A:45:FC:3C:AE:F7:2A:28:03:6E:47:8D:5B
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 047F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iOEFemeoqZpF_Dyu9yooA25HjVs.roa
Signing time: Wed 18 Dec 2024 02:26:27 +0000
ROA not before: Wed 18 Dec 2024 02:26:27 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.8.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 26 Feb 2025 09:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:26:27 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=88E1057A67A8A99A45FC3CAEF72A28036E478D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:3e:4f:7c:8e:c8:ac:46:4a:db:5d:53:eb:
28:d6:eb:7a:0d:be:22:b7:c3:a8:48:5a:7f:84:38:
c3:a2:65:2d:90:a6:5d:6d:e3:df:0a:44:dc:90:b8:
cd:14:f9:14:7e:8e:a0:24:67:6c:88:27:cd:9a:81:
e0:b7:45:41:4e:ea:e6:40:b8:0c:1f:69:d6:82:ce:
fa:8e:0f:37:5e:59:51:d2:41:10:fc:36:54:2e:f6:
74:a4:c9:59:36:0f:ec:89:7c:c1:8a:76:8c:20:4b:
b3:3f:80:51:95:aa:22:e0:36:64:83:01:a0:45:49:
38:c6:40:13:b6:83:ea:9d:78:f0:ef:a6:b0:18:b1:
24:42:87:2b:39:ae:77:57:b5:ff:ff:52:05:dd:0c:
40:31:de:05:65:e7:a5:b2:bd:45:69:13:fc:2d:26:
dd:5d:42:96:35:01:a0:95:ca:40:88:7d:d7:7f:da:
82:df:5b:97:3f:7f:3f:ca:7a:af:b0:0d:17:2f:d3:
55:58:ee:37:17:fc:31:6e:d8:8b:d0:d3:ec:85:e1:
ae:f0:16:41:8f:f2:00:6a:48:18:8e:74:54:35:1a:
3a:1d:c7:99:24:4e:56:2a:26:d6:68:16:70:b8:ea:
15:42:73:bc:25:a8:02:5b:13:ca:22:b0:23:85:5a:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:05:7A:67:A8:A9:9A:45:FC:3C:AE:F7:2A:28:03:6E:47:8D:5B
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iOEFemeoqZpF_Dyu9yooA25HjVs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.8.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:c0:2c:9c:c3:53:59:af:46:2b:55:22:19:1d:81:39:c8:e5:
a4:3e:d1:38:ad:80:cb:90:74:45:95:ae:1b:39:53:30:e3:e3:
5a:4d:76:00:6c:85:bb:84:8d:71:2e:1c:a8:ac:a9:3b:45:b0:
50:bd:d0:1b:aa:2b:93:c0:34:89:47:d5:51:91:d1:07:54:0d:
04:aa:77:9d:62:15:38:08:e8:d6:9c:ea:11:d9:9f:21:fe:a3:
98:df:c1:39:e3:84:08:43:dd:88:20:c7:31:47:9c:83:8d:73:
43:db:80:9e:ca:d9:47:00:52:90:7d:1f:a2:d8:de:c2:5c:60:
fd:41:d5:e3:f1:3f:6c:83:d2:71:4d:93:50:42:2f:03:85:51:
90:ea:80:9a:48:87:a1:df:98:08:df:4f:1e:b9:49:c7:8b:d3:
ce:b1:6c:77:c8:54:63:ad:4b:3b:3d:c2:15:8e:9c:f2:dd:6d:
e6:0f:a2:fc:cf:6c:d0:cf:37:b0:df:a8:12:90:a2:2d:9b:78:
e3:08:81:e9:8d:48:cc:2f:6e:4c:96:56:2d:ff:26:f6:b3:59:
a7:a4:2b:c0:e1:2e:08:67:d6:06:02:f3:3b:49:5d:0c:3e:6b:
7b:0b:ce:9e:ec:a3:6b:44:cb:26:a0:95:7d:0e:03:9a:e0:4b:
f1:5b:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:44 2025 by rpki-client