Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/iThxNEhmrwgU5o_EXUdPUq15kBU.roa
File: iThxNEhmrwgU5o_EXUdPUq15kBU.roa (raw, json)
Hash identifier: NcjI1e4W+sFw+jMTAOSDXEqVXLu/jJvWTjedBIjL9Fg=
Subject key identifier: 89:38:71:34:48:66:AF:08:14:E6:8F:C4:5D:47:4F:52:AD:79:90:15
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0394
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iThxNEhmrwgU5o_EXUdPUq15kBU.roa
Signing time: Sat 31 Aug 2024 01:29:55 +0000
ROA not before: Sat 31 Aug 2024 01:29:55 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 2516
IP address blocks: 113.152.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Aug 31 01:29:55 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=893871344866AF0814E68FC45D474F52AD799015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:ac:86:c2:cf:20:02:c6:81:c9:8e:96:d9:
a9:92:86:da:08:86:f6:90:4a:f3:85:3e:4d:68:d4:
11:96:c4:ca:bf:54:b8:fe:d4:ea:f5:01:07:6d:e8:
21:b6:61:d6:bf:f1:d3:2b:ce:79:83:a5:fb:6c:ac:
18:92:10:a9:b7:67:e6:5c:da:9b:10:e4:88:8f:97:
bf:a1:e3:ce:fe:70:c4:0a:8a:2d:32:c1:49:6b:56:
4b:46:47:cc:eb:b7:b3:56:5a:83:7a:2d:53:60:42:
ff:04:b6:d7:b3:b5:96:1f:74:b3:28:4e:6d:3d:b4:
9e:8e:5b:10:52:25:bd:22:fb:9f:96:4b:e8:2b:02:
9e:e1:f8:26:af:db:06:3b:a1:ef:84:a3:4a:50:cd:
54:68:42:d9:e6:21:22:15:06:5e:1e:4e:2b:95:a2:
84:c1:82:f9:1f:df:26:e0:9e:33:22:cb:d9:fd:2e:
bf:3d:7c:62:f6:07:38:1a:6e:91:38:b3:d0:82:52:
9b:3f:8d:dd:48:a9:77:db:05:c6:4f:40:06:0b:f5:
e0:ee:c0:a5:cc:51:7c:89:74:81:de:99:da:e6:dd:
8a:75:88:be:dc:d3:79:40:db:a8:fe:3f:34:19:be:
6a:04:5e:64:d3:80:04:47:df:c7:5c:b2:9b:fc:4a:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:71:34:48:66:AF:08:14:E6:8F:C4:5D:47:4F:52:AD:79:90:15
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iThxNEhmrwgU5o_EXUdPUq15kBU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.152.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:21:30:4b:ef:3b:04:1b:43:d6:d4:25:8a:6a:22:ab:73:94:
01:50:23:81:db:33:52:89:ef:e1:d5:a8:df:34:90:e9:89:5f:
06:48:a4:d3:7c:3c:33:b4:b8:69:f2:e7:0a:47:ee:67:e4:bb:
c9:f9:2d:3d:18:2d:49:93:72:b2:53:94:ed:24:8a:cc:42:b7:
cd:00:eb:02:02:dc:ba:34:cb:e8:ba:6b:c7:44:89:83:31:86:
fa:60:6c:96:ae:22:20:f7:78:c1:60:56:ba:90:19:92:34:a1:
33:26:05:ad:4a:b8:7a:90:32:85:ef:8b:62:f0:f5:50:15:b3:
ec:52:93:8f:fa:66:49:7b:4b:3e:da:f5:e2:91:8e:2c:ea:c1:
b8:2d:75:b0:3f:7e:52:26:86:42:86:bd:e7:06:53:b8:7d:fb:
4e:c4:75:63:b7:f4:e5:80:2a:52:95:66:c9:a8:40:8c:f2:10:
a6:1d:d8:56:3c:ec:29:39:37:ac:11:1d:e1:76:83:9b:8d:a8:
99:46:d3:bc:55:22:8a:af:72:83:a5:b3:2c:31:92:0d:e2:81:
8c:26:d4:23:32:1e:48:05:05:ac:39:9f:78:7c:e8:86:bf:a4:
95:b3:49:0b:05:55:40:7c:24:a7:86:f0:6b:a4:55:cf:39:50:
4b:5b:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:56 2025 by rpki-client