Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/oWCMLYxAGUoYGPFLjJJLjKoEfic.roa
File: oWCMLYxAGUoYGPFLjJJLjKoEfic.roa (raw, json)
Hash identifier: 4SXX5S/y3LS5p/NhGPr95672DKc1qmJI9aZnmDpJMiI=
Subject key identifier: A1:60:8C:2D:8C:40:19:4A:18:18:F1:4B:8C:92:4B:8C:AA:04:7E:27
Certificate issuer: /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial: 43
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/oWCMLYxAGUoYGPFLjJJLjKoEfic.roa
Signing time: Thu 29 Feb 2024 01:29:34 +0000
ROA not before: Thu 29 Feb 2024 01:29:34 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 58785
IP address blocks: 157.118.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 31 Jan 2025 01:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Validity
Not Before: Feb 29 01:29:34 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=A1608C2D8C40194A1818F14B8C924B8CAA047E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:68:b0:77:ea:ac:56:a9:ec:54:e6:f8:f4:
50:57:8c:c7:09:ae:c1:89:73:10:c1:e7:45:1d:4e:
89:e2:5b:09:3c:0d:28:8c:88:2a:65:b1:76:0f:b8:
c8:ad:b4:20:45:16:f1:ea:ed:60:81:5e:71:43:21:
25:0a:ef:db:68:27:a5:55:3d:27:1b:09:37:ef:a7:
05:15:17:31:bb:83:4f:95:fa:9d:c2:ee:e9:52:59:
c8:b7:d6:78:c0:13:2b:10:3f:25:d9:c4:85:b2:56:
1a:a3:1e:a6:c1:68:de:40:97:c7:e0:17:d7:8c:24:
80:3c:a1:5f:1c:9d:ca:9c:68:01:f2:4d:34:f1:48:
7f:b4:7a:dc:ca:62:6a:12:ea:03:d5:e7:2f:50:33:
21:ba:9a:2f:51:12:b5:68:f3:71:8a:76:99:47:82:
bd:88:46:a7:50:45:fe:2c:91:56:5b:16:9a:6b:c3:
d1:10:13:d0:92:f7:27:d4:9b:7d:03:f6:4d:90:b5:
9a:23:41:cd:a4:77:81:4f:e0:2e:72:9e:a4:5b:76:
c6:b0:b7:cd:1f:8f:53:cc:a0:81:88:04:0e:cb:30:
32:b2:c1:4d:40:10:3e:94:09:74:81:93:77:de:5b:
f5:59:7e:f4:ff:7e:39:74:12:64:16:e4:85:27:84:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:8C:2D:8C:40:19:4A:18:18:F1:4B:8C:92:4B:8C:AA:04:7E:27
X509v3 Authority Key Identifier:
keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/oWCMLYxAGUoYGPFLjJJLjKoEfic.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:8e:ed:fd:2b:d3:ac:51:f8:fc:27:7f:ac:67:a6:68:a6:a4:
29:d4:1e:7a:0d:e6:10:91:31:9b:ee:01:49:b7:7a:bf:dd:ba:
ce:e6:fa:66:fb:e0:86:ea:c8:80:f6:87:86:c6:a3:f0:22:89:
95:90:6a:1f:33:a9:17:b5:86:aa:74:3b:59:3b:74:28:64:fb:
07:09:c4:61:2b:87:e2:6c:09:63:55:59:ab:b0:24:2a:3e:4f:
10:6e:6d:d8:da:78:0e:64:7e:7c:99:2e:55:d6:81:7f:cf:8b:
f5:63:6f:3c:ae:7c:fd:fc:ed:39:76:79:0c:44:ce:3d:52:da:
cb:78:a9:5c:7f:cc:88:0a:b1:02:67:0c:55:d4:b2:c7:0f:9e:
83:f0:55:8f:28:44:98:ae:bb:42:c8:d0:cf:2b:d3:20:fe:b1:
60:51:62:98:c8:22:6c:6f:fa:52:2c:9c:31:dd:dc:0d:91:ec:
fe:de:d3:5c:67:af:7a:54:89:e7:02:52:31:e3:cd:2b:6c:68:
b3:80:66:9d:5d:05:6d:79:88:40:44:11:19:7c:0a:48:4d:e5:
b2:c8:54:f1:6b:5a:c2:1e:b9:6c:01:18:f2:a9:63:35:93:7a:
2f:48:bc:d4:f3:00:5d:68:01:11:be:19:ed:81:27:c2:fc:0c:
1f:98:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:41 2025 by rpki-client