Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1B5FHu0tjc5AeYZuapjPpr9GPX0.roa
File: 1B5FHu0tjc5AeYZuapjPpr9GPX0.roa (raw, json)
Hash identifier: 9Nz4oadk4s8ZtbU4olzc3gvL4cCgD56NBWD8lGFI6XI=
Subject key identifier: D4:1E:45:1E:ED:2D:8D:CE:40:79:86:6E:6A:98:CF:A6:BF:46:3D:7D
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 031E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1B5FHu0tjc5AeYZuapjPpr9GPX0.roa
Signing time: Sun 31 Mar 2024 01:38:46 +0000
ROA not before: Sun 31 Mar 2024 01:38:46 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 111.102.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 798 (0x31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:38:46 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=D41E451EED2D8DCE4079866E6A98CFA6BF463D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:86:44:aa:53:9c:83:a9:00:02:2c:d8:83:
5d:98:c9:2e:5d:3e:28:4b:f0:96:18:17:85:4e:ec:
f4:f1:3c:5e:43:32:e0:4d:12:5e:7f:da:77:26:80:
d6:82:72:9d:a2:85:d6:8f:0a:6d:6b:12:c6:ee:c8:
f1:92:d7:24:21:de:56:4c:ea:56:44:89:67:15:a5:
e8:42:ed:bb:25:e3:99:06:5d:4f:0c:14:e2:13:25:
66:9f:a5:c9:0f:be:37:67:98:06:e6:d5:71:fd:ee:
e9:ca:15:35:b0:75:93:15:09:dd:5a:3f:44:cb:78:
8d:21:06:39:4f:0b:1c:7f:6c:e0:fe:fc:75:9f:07:
ed:17:d2:d7:9a:94:24:c3:f9:96:e6:8d:1a:e7:d4:
96:8a:3a:bf:97:d3:e8:b4:d3:fc:32:77:0f:b4:8c:
8b:7d:58:2f:90:97:f5:e4:ee:4a:7d:66:3f:44:17:
13:04:2e:16:37:28:ca:0f:9a:e2:f3:1d:fb:0e:e4:
20:59:55:75:cc:25:42:06:16:ee:a5:56:b1:21:25:
f7:ac:8b:f6:28:1b:73:66:25:65:a8:8a:07:90:93:
32:98:1e:e6:58:fd:8e:1d:42:c2:75:06:50:97:af:
27:8a:d1:b1:d0:9f:74:f3:10:af:4e:53:c7:a1:c5:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1E:45:1E:ED:2D:8D:CE:40:79:86:6E:6A:98:CF:A6:BF:46:3D:7D
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1B5FHu0tjc5AeYZuapjPpr9GPX0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:92:1a:46:5f:49:8a:c9:bb:59:45:f2:df:9d:62:9d:90:37:
63:b0:c5:4d:24:1b:93:2b:84:b6:dd:fa:17:e6:ce:07:b3:8b:
f8:cf:46:4d:a4:ea:bc:d9:89:9f:aa:e2:8e:a9:4b:df:b6:76:
4d:15:cb:82:32:f3:55:a7:73:6c:8b:bc:8f:a5:b6:91:f6:09:
f4:cc:bd:4b:65:fa:aa:65:de:5f:66:7d:a8:fe:0d:60:22:69:
b3:91:21:6e:0c:63:d2:50:c0:c9:57:6d:44:2e:bb:a7:e4:af:
66:33:9b:25:16:76:2f:11:b2:c1:72:70:8a:86:cf:51:84:bd:
22:c0:0c:ba:24:83:d8:34:12:32:b1:bf:54:21:a0:88:24:ed:
ec:1c:da:42:7c:b9:fc:b8:27:db:db:69:c6:3e:da:bb:83:b9:
b5:8c:b4:43:80:84:8e:be:9f:47:bc:18:a1:ff:d9:0c:32:f5:
7a:6e:50:58:b4:bd:c2:ed:b3:9c:e5:de:44:36:75:bb:8f:8b:
7a:92:45:72:ce:d7:ed:1b:b0:4f:54:68:db:a0:b4:e9:a5:b4:
e5:17:f1:76:b1:a4:bd:a3:b0:6a:30:f4:e2:88:a3:ee:7e:ef:
0f:c4:2c:5b:8c:78:fe:a8:74:be:2d:8a:c5:8a:b0:b5:c6:01:
14:df:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:18 2025 by rpki-client