Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ImVCstZL-zhpjSGKJSFlBfq-jC0.roa
File: ImVCstZL-zhpjSGKJSFlBfq-jC0.roa (raw, json)
Hash identifier: wSPCkaSz0XfEVf3SVNfL9DAsb2hPKv0an78u+VkmY8E=
Subject key identifier: 22:65:42:B2:D6:4B:FB:38:69:8D:21:8A:25:21:65:05:FA:BE:8C:2D
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0246
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ImVCstZL-zhpjSGKJSFlBfq-jC0.roa
Signing time: Tue 01 Aug 2023 01:28:42 +0000
ROA not before: Tue 01 Aug 2023 01:28:42 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 2516
IP address blocks: 14.11.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Aug 1 01:28:42 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=226542B2D64BFB38698D218A25216505FABE8C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:46:9d:8d:c0:42:48:d5:a5:ea:3f:a8:5a:
6e:98:26:93:95:41:06:24:30:ab:b5:1f:b4:99:bb:
59:6b:bb:ff:64:05:5a:e9:45:ab:27:ad:04:f2:14:
ab:47:1c:b8:67:73:c0:6f:e2:61:ba:1e:28:e8:cf:
8c:d2:96:6f:49:96:05:b2:f9:91:ac:15:a7:39:fe:
5e:d6:30:ca:98:4a:8b:45:54:9f:66:98:6b:4c:fc:
c2:ed:ff:22:23:82:5b:85:b6:39:c7:0a:0e:db:c5:
8c:55:33:23:2c:0c:a1:ca:da:09:3f:da:e0:34:9c:
fa:ea:dc:e9:e6:db:fd:bc:1b:70:88:0a:7d:91:51:
a2:8b:9f:63:86:24:00:f9:0e:c1:99:3a:61:f2:20:
c4:db:b4:26:99:61:2e:bd:61:df:15:a5:72:cc:84:
12:b2:4a:8c:12:06:af:25:3e:dd:bc:db:71:fa:09:
b9:63:de:5b:63:b9:e9:e2:34:0b:0c:0f:90:29:20:
b8:1d:e9:86:6d:96:48:1b:25:a8:e0:76:25:4d:1d:
65:ba:4c:6a:60:2b:36:0b:92:31:be:3f:35:42:69:
44:4e:48:68:95:d5:b0:46:d9:1a:dd:ae:bd:37:d0:
1d:86:f7:bf:eb:d9:81:92:0b:78:84:21:91:c1:3d:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:42:B2:D6:4B:FB:38:69:8D:21:8A:25:21:65:05:FA:BE:8C:2D
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ImVCstZL-zhpjSGKJSFlBfq-jC0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:82:e5:56:3e:3b:a2:65:29:c7:ee:48:d1:c2:28:e6:e5:19:
ad:ae:36:d5:d0:3b:e9:59:6e:47:16:21:28:5c:42:ed:90:fe:
12:bf:8a:c5:17:39:49:cd:a3:47:00:4d:54:90:06:08:e2:60:
65:41:6c:8f:1b:7e:2c:a7:3e:32:ff:b9:48:d2:19:6a:94:15:
52:95:17:44:a5:56:18:e0:e0:99:22:70:0d:5b:00:52:c2:ed:
80:19:28:66:1b:6e:c2:6f:a4:dd:2c:03:4b:0a:7b:80:1d:54:
eb:bc:69:c1:aa:45:c9:1e:91:4e:4b:5e:76:78:83:0b:91:2e:
72:b3:de:4e:43:e4:9c:fa:0a:24:f6:45:ed:bc:f3:0d:91:7a:
2a:1a:dc:83:f8:22:1f:8b:b2:b0:4e:ee:ee:0b:d7:6f:8c:5c:
4c:a2:77:db:bd:32:fe:c6:c1:9b:37:4d:08:ca:16:07:b1:e3:
eb:88:bf:f5:69:81:a9:9e:42:16:b0:87:34:d8:ab:4f:b5:95:
d9:99:50:35:01:87:5c:15:da:cf:7a:2f:f8:55:39:4e:bf:76:
6b:a7:7a:e1:81:40:63:a7:df:13:78:83:81:57:1c:2a:e4:fb:
0e:bb:54:ba:e8:d0:b3:e2:55:de:24:b8:eb:01:77:ce:62:45:
85:4f:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 14:32:31 2024 by rpki-client on console-fra.rpki-client.org