Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9AEnPB3g4ekBmWFspT883LDFcXE.roa
File: 9AEnPB3g4ekBmWFspT883LDFcXE.roa (raw, json)
Hash identifier: Ji2/0/hHGvviOG6xgU1H4uWSEcpM9Oeh9N1+G9fOJ3o=
Subject key identifier: F4:01:27:3C:1D:E0:E1:E9:01:99:61:6C:A5:3F:3C:DC:B0:C5:71:71
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 032D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9AEnPB3g4ekBmWFspT883LDFcXE.roa
Signing time: Sun 31 Mar 2024 01:40:40 +0000
ROA not before: Sun 31 Mar 2024 01:40:40 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 113.157.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:40:40 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=F401273C1DE0E1E90199616CA53F3CDCB0C57171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:47:bb:83:df:3a:69:03:f6:4b:b4:26:98:
e0:db:fa:d8:73:cd:99:ac:3d:fa:56:20:b6:d8:07:
cb:df:2b:78:2c:0a:c3:4b:51:04:87:58:7d:9d:e5:
37:33:ae:3e:a0:82:c6:93:d4:35:1e:77:0e:6a:ed:
83:c1:53:d9:15:45:a0:39:62:a4:f3:bd:0f:bf:36:
fe:7d:71:e3:a8:b9:85:b2:7c:31:77:41:16:bd:07:
60:ec:d5:a1:19:19:ac:d0:84:17:db:d5:d0:b0:ec:
fe:43:6a:dc:66:de:8e:6d:cc:71:0a:a9:67:31:ce:
56:f7:13:d7:5e:07:60:aa:d7:78:93:12:b1:dd:da:
2a:08:74:2c:37:aa:37:51:88:e7:fa:60:a3:8b:9d:
51:81:0c:85:a3:1a:6d:35:85:48:4b:1f:1a:31:60:
68:e1:5e:49:55:77:a4:82:0e:d8:ab:bb:62:a0:e2:
32:56:04:c6:b6:eb:cd:31:e3:9f:f4:1b:d8:a8:2b:
56:49:62:96:a8:0d:2f:ff:89:c7:51:4f:22:a9:59:
3f:ab:bb:29:2b:9e:27:60:7c:c4:8a:6b:59:18:1e:
e3:eb:a3:e0:66:c6:d1:69:ac:fa:4e:da:8a:64:b6:
a0:45:df:fd:21:00:d4:ac:7a:36:6e:f8:25:a1:20:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:01:27:3C:1D:E0:E1:E9:01:99:61:6C:A5:3F:3C:DC:B0:C5:71:71
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9AEnPB3g4ekBmWFspT883LDFcXE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.157.0.0/18
Signature Algorithm: sha256WithRSAEncryption
59:0d:5d:b3:8a:a4:13:06:22:49:31:30:0d:9a:7e:58:7d:ec:
34:95:34:d8:29:41:dd:0f:8f:2f:4d:e3:79:45:bf:bd:5a:59:
e3:09:82:20:44:eb:bc:b9:38:5b:4a:80:48:1a:ed:0f:59:2a:
2f:7e:e1:8a:9f:f3:1c:43:65:de:ad:b5:1d:e9:6b:fe:88:74:
dd:f8:df:e3:fb:74:e7:0a:51:39:2e:51:94:c4:d7:e1:f4:99:
ed:b4:a2:6e:f3:75:f6:96:6b:f1:c0:9c:00:12:79:5c:a6:68:
12:54:2a:fa:4f:2f:c3:01:df:70:42:92:72:4b:7e:bc:cc:5d:
f0:06:9f:1a:50:1c:42:b6:5e:f7:6d:32:60:49:84:8d:a0:1b:
75:80:40:c1:22:8a:0a:bc:66:b6:45:91:d4:75:96:84:f2:bf:
68:58:09:60:06:78:24:0a:dd:96:cc:38:ec:2c:6d:4b:dd:62:
ce:a8:30:17:b8:ec:60:c7:1f:72:2b:14:5c:e2:2e:08:b1:25:
71:f2:29:7d:99:77:15:76:d3:c6:09:4c:8a:79:97:d9:ca:58:
c0:e3:33:43:0f:a2:02:87:11:b3:ec:ac:8c:af:d3:9c:3e:5b:
ad:8a:bb:8a:4d:a4:78:87:74:dc:b3:89:93:d5:ee:57:cb:02:
6f:da:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:34 2025 by rpki-client