Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7EFzaprsTon7TbE3-CuPwoLZ5tU.roa
File: 7EFzaprsTon7TbE3-CuPwoLZ5tU.roa (raw, json)
Hash identifier: c3ikeZEOYo+QBY10H1GEnGxI+vhCWtjUL0d1TiJxcac=
Subject key identifier: EC:41:73:6A:9A:EC:4E:89:FB:4D:B1:37:F8:2B:8F:C2:82:D9:E6:D5
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 018F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7EFzaprsTon7TbE3-CuPwoLZ5tU.roa
Signing time: Mon 01 May 2023 01:30:28 +0000
ROA not before: Mon 01 May 2023 01:30:28 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 118.157.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 31 Mar 2024 01:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:30:28 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=EC41736A9AEC4E89FB4DB137F82B8FC282D9E6D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:09:f9:09:68:33:ce:e5:f1:b3:72:45:72:
2e:31:59:37:0f:ae:6b:25:87:6f:d8:99:6f:fc:ae:
c5:b8:fc:0e:b2:ba:ab:6e:d4:88:5d:63:11:c9:2e:
61:c8:9a:99:7a:9f:d1:9f:8f:33:b1:81:5a:6a:b4:
dd:ab:74:38:0e:bd:73:5f:e6:43:db:aa:8a:65:a3:
76:0d:36:0d:ad:df:29:d6:e2:04:23:6e:bf:95:48:
7c:87:d0:5a:26:c0:82:f8:ff:7e:48:3b:47:9b:0d:
04:39:7e:cc:01:87:59:63:a8:73:28:40:ca:39:fc:
ee:51:69:85:7a:95:3e:d6:7d:ab:eb:84:1c:f0:4f:
12:21:cd:45:af:c0:e4:57:a7:87:d7:39:bb:9a:96:
cf:b7:0c:c0:8f:de:18:5b:03:d6:d6:ab:f2:64:9c:
f3:41:47:bd:c0:2e:1c:07:73:55:bd:d0:da:90:85:
da:03:7b:75:c8:40:16:4d:30:9b:aa:2d:1b:0f:aa:
06:3c:4b:ed:37:2b:b0:97:99:e9:f3:76:87:eb:58:
1d:ff:6d:41:33:5e:d5:cc:81:8d:11:87:ed:58:38:
b4:31:cd:a8:34:e0:eb:9b:9d:21:bf:9e:cf:ac:5e:
75:5c:95:ea:52:b5:a3:a3:2e:e0:85:2b:a8:62:39:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:73:6A:9A:EC:4E:89:FB:4D:B1:37:F8:2B:8F:C2:82:D9:E6:D5
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7EFzaprsTon7TbE3-CuPwoLZ5tU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:f3:23:81:56:d1:ac:6d:88:72:75:55:de:d1:f5:4b:60:92:
c7:15:e9:14:43:f5:37:d5:3e:9f:e7:99:47:f7:54:14:0b:9e:
7b:07:c9:fa:db:6f:06:97:15:c0:3d:0f:2c:67:39:6e:9f:b9:
54:0f:9f:30:f5:90:e0:c8:80:e7:dd:0a:81:59:d2:15:a5:b3:
1a:f3:87:d9:7c:cb:0e:77:31:8c:09:f9:23:7c:bb:69:db:ed:
4f:47:6e:14:77:a5:d8:39:d9:2c:4f:06:eb:6a:49:c5:a5:d8:
2e:fe:a5:b1:b7:0a:df:36:a4:12:49:9a:41:95:7e:43:6e:43:
ea:2d:ed:64:45:45:ad:45:6b:c3:05:f0:b1:ef:ab:b0:16:9b:
dc:17:4e:bd:c9:a0:50:ba:b1:08:ad:b3:1a:2d:f4:98:2c:c5:
b4:3e:22:e4:0c:6f:03:46:f3:9e:ae:84:4f:c9:86:44:ed:bd:
3c:94:7c:d3:ac:78:42:0f:29:74:44:e5:ee:e1:38:55:2c:ad:
f4:71:6a:89:94:d1:f9:42:30:6c:6c:19:f5:58:a7:c6:0c:3f:
ad:25:ba:fd:a9:3a:3a:13:e4:cd:02:87:85:a2:c2:cc:63:2a:
07:ae:b7:95:2d:36:af:09:c9:2c:be:95:94:51:73:26:7d:0d:
3c:81:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:33 2024 by rpki-client on console-fra.rpki-client.org