Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1Hmnob49TWMXCvkNQ8BGf00kkqk.roa
File: 1Hmnob49TWMXCvkNQ8BGf00kkqk.roa (raw, json)
Hash identifier: 9AD8pA/hdU/6NoPV90S0Os35YEp3jAD9GWE8zZHxg0U=
Subject key identifier: D4:79:A7:A1:BE:3D:4D:63:17:0A:F9:0D:43:C0:46:7F:4D:24:92:A9
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0165
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1Hmnob49TWMXCvkNQ8BGf00kkqk.roa
Signing time: Thu 13 Apr 2023 09:50:45 +0000
ROA not before: Thu 13 Apr 2023 09:50:45 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 2516
IP address blocks: 125.49.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 29 Feb 2024 01:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Apr 13 09:50:45 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=D479A7A1BE3D4D63170AF90D43C0467F4D2492A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:84:45:e6:92:7a:cd:95:6c:44:57:c5:71:
10:80:9a:38:fc:b0:23:e5:2c:8e:96:a1:88:9a:ad:
66:ec:d8:b9:6b:c9:ec:d8:08:41:00:9e:19:e7:98:
5e:2f:5c:ad:3e:66:fb:d6:64:56:88:aa:28:51:17:
91:22:46:4e:1f:80:30:50:02:d7:0c:c5:0c:18:be:
6b:39:dc:cf:64:46:04:04:eb:e9:97:52:26:06:97:
db:a1:30:98:b1:f9:7a:98:ae:53:1f:58:f6:1e:80:
5f:71:0e:4c:57:bd:36:4d:a7:16:f5:0e:52:06:b3:
aa:f7:21:18:1b:46:75:c9:d6:9e:20:3e:f3:07:43:
b2:3d:26:5c:ad:12:7a:b6:f4:b9:31:cc:b1:52:27:
5c:71:0e:7b:0d:68:31:b9:bf:90:9e:8f:c6:34:e4:
ff:da:97:71:ea:cb:13:49:f1:d0:97:cf:84:ae:b6:
c2:bb:f1:1f:3f:b1:91:ee:a2:5a:31:bb:42:92:49:
3d:e7:d8:72:b5:79:5d:72:54:c4:b7:93:b6:c8:bf:
b8:63:22:77:2f:b1:cf:c7:ae:3e:50:0a:df:c2:49:
a9:91:2e:49:19:ba:72:f3:f7:c1:31:18:39:6c:56:
7b:0d:b8:19:47:11:ee:37:ab:74:ef:90:d9:ca:63:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:A7:A1:BE:3D:4D:63:17:0A:F9:0D:43:C0:46:7F:4D:24:92:A9
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1Hmnob49TWMXCvkNQ8BGf00kkqk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.49.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:01:d2:90:78:7e:87:c6:ad:41:23:7a:c9:09:e8:e2:51:04:
f9:12:51:81:cd:0e:e1:2c:b5:88:fe:84:90:54:7d:a2:21:1b:
80:f1:b0:61:e7:b8:b3:40:2c:f1:ac:8e:03:2b:89:04:6c:64:
ff:fd:15:91:c5:3a:9e:30:be:8b:be:43:f6:48:da:82:1e:3a:
12:dc:d5:ab:00:ca:69:7a:e4:ee:da:d1:d8:ce:dc:61:fb:85:
71:75:c8:4d:72:4f:0f:3a:40:d9:4a:4c:dc:bd:fd:1f:15:2f:
a4:0f:62:1d:19:d0:27:f8:74:0e:9c:47:91:26:ad:13:53:9f:
b8:43:ce:a5:43:ec:12:dc:69:29:6b:c0:63:38:05:8b:4e:0a:
fe:d7:81:f9:46:32:7e:63:b3:c2:8e:c5:9a:d4:b6:65:1b:39:
34:c5:13:5b:67:5f:c0:53:52:88:b8:11:c2:99:ec:f8:81:4e:
a1:5a:43:c7:10:91:20:5d:34:de:99:11:c5:9d:e2:4e:12:86:
97:47:c7:ca:7c:b9:13:1d:31:68:74:bc:58:78:9c:4c:db:16:
1b:1a:51:a5:d9:88:c8:d9:90:99:40:4d:9e:44:da:52:bf:5b:
bf:49:f1:42:17:1b:43:be:6e:17:22:23:47:61:4a:6f:17:97:
c9:b7:5d:12
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA0MTMw
OTUwNDVaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0NzlBN0ExQkUzRDRE
NjMxNzBBRjkwRDQzQzA0NjdGNEQyNDkyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7H4RF5pJ6zZVsRFfFcRCAmjj8sCPlLI6WoYiarWbs2LlryezY
CEEAnhnnmF4vXK0+ZvvWZFaIqihRF5EiRk4fgDBQAtcMxQwYvms53M9kRgQE6+mX
UiYGl9uhMJix+XqYrlMfWPYegF9xDkxXvTZNpxb1DlIGs6r3IRgbRnXJ1p4gPvMH
Q7I9JlytEnq29LkxzLFSJ1xxDnsNaDG5v5Cej8Y05P/al3HqyxNJ8dCXz4SutsK7
8R8/sZHuoloxu0KSST3n2HK1eV1yVMS3k7bIv7hjIncvsc/Hrj5QCt/CSamRLkkZ
unLz98ExGDlsVnsNuBlHEe43q3TvkNnKY+B3AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU1Hmnob49TWMXCvkNQ8BGf00kkqkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzFIbW5vYjQ5VFdNWEN2a05ROEJHZjAwa2txay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9MTANBgkqhkiG9w0BAQsFAAOCAQEAJQHSkHh+h8atQSN6yQno4lEE+RJR
gc0O4Sy1iP6EkFR9oiEbgPGwYee4s0As8ayOAyuJBGxk//0VkcU6njC+i75D9kja
gh46EtzVqwDKaXrk7trR2M7cYfuFcXXITXJPDzpA2UpM3L39HxUvpA9iHRnQJ/h0
DpxHkSatE1OfuEPOpUPsEtxpKWvAYzgFi04K/teB+UYyfmOzwo7FmtS2ZRs5NMUT
W2dfwFNSiLgRwpns+IFOoVpDxxCRIF003pkRxZ3iThKGl0fHyny5Ex0xaHS8WHic
TNsWGxpRpdmIyNmQmUBNnkTaUr9bv0nxQhcbQ75uFyIjR2FKbxeXybddEg==
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:25 2024 by rpki-client on console-ams.rpki-client.org