Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa
File: KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa (raw, json)
Hash identifier: hsq6SNpBaRRcmMkHG9i1UelVtKcKO5LPRVAgZU+Jpnw=
Subject key identifier: 2B:10:94:C3:33:A0:4F:70:8A:49:7A:B8:4B:67:D2:2F:53:79:17:C7
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 02E9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa
Signing time: Sun 31 Mar 2024 01:35:48 +0000
ROA not before: Sun 31 Mar 2024 01:35:48 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 124.215.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:35:48 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=2B1094C333A04F708A497AB84B67D22F537917C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:ef:03:70:c0:87:f1:4f:6d:15:21:52:24:
d5:88:4b:6e:17:75:57:f5:7d:e2:1a:7f:9b:31:fe:
b8:42:04:a0:cf:b1:c7:ce:44:14:0b:a3:47:b4:54:
ec:ea:77:ba:2a:18:99:33:23:fe:7a:51:2b:ec:e0:
2e:87:b6:f2:cb:96:21:0d:f0:58:e5:13:8b:d8:fe:
4e:26:17:1e:f9:6c:02:8c:aa:1e:3a:09:f8:41:8c:
76:4c:45:a1:11:2d:8a:0b:ea:ef:de:40:8d:30:62:
ea:c3:e5:4c:4b:f0:69:0e:d1:7e:f0:6b:b6:e7:95:
52:13:ed:ac:2c:81:ec:bc:0a:9a:e4:d8:b4:2d:a0:
48:f5:33:02:5b:29:32:02:e5:70:85:1b:5e:18:b9:
0d:d5:77:15:4b:01:2b:90:81:96:ec:4b:6a:d0:a2:
d6:93:a5:e4:32:1d:c8:c3:c2:5b:e2:14:f8:83:1a:
fc:16:e8:0d:0d:88:4d:17:f6:c9:ce:3a:9b:67:6b:
b5:28:3e:0b:ae:8a:8c:da:4e:01:c5:93:a5:da:75:
86:5b:58:1b:fb:fe:8a:63:8c:5d:23:20:b4:70:02:
7b:8b:59:b3:97:3b:9e:97:e8:06:58:8a:a5:0d:ee:
1c:27:ab:17:d2:f8:5d:3b:db:17:08:d0:1c:9d:15:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:94:C3:33:A0:4F:70:8A:49:7A:B8:4B:67:D2:2F:53:79:17:C7
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.215.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3d:51:d3:11:29:11:5f:24:31:65:83:b4:12:b0:f4:d3:09:b8:
0c:54:eb:d1:95:a5:7e:bb:30:e9:02:47:35:58:06:7c:07:9f:
4e:de:46:eb:70:6f:0c:b5:70:f0:a5:5b:74:43:2b:44:d7:85:
c5:ba:cc:bb:90:17:18:89:51:50:2d:1a:b4:52:ea:c6:3a:d2:
a4:59:36:81:72:54:04:54:0f:65:7f:41:8f:f7:cf:af:78:a2:
a6:33:20:6c:01:be:6e:0e:90:51:ee:e8:e9:e7:ef:40:5e:40:
f8:83:02:80:a2:75:f3:03:50:c6:c3:f8:5c:e2:1d:89:cd:08:
3f:6d:ff:e9:36:f0:a7:9d:c5:29:0f:93:8d:bb:d0:f8:5c:5e:
98:03:af:d5:81:f3:1b:42:db:03:5c:44:4e:4d:75:21:4c:c6:
84:a2:99:ee:12:1a:dc:a1:0f:00:d7:bf:2a:8d:4b:cd:bc:e3:
6d:6d:9a:4a:c6:cf:68:59:b6:8a:c4:49:81:f8:5e:27:21:8f:
0d:08:98:25:fa:c2:79:3f:fe:78:fc:88:78:60:47:85:c5:e8:
43:aa:30:0c:b5:31:e0:08:5f:b9:a8:1d:c9:6b:22:f1:bf:22:
dc:78:14:23:ed:02:c9:9f:31:b4:95:d2:a8:6a:5b:90:9e:62:
b8:67:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:38 2025 by rpki-client