Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTsCIbeASZGTF4MvcEDdzaCsteQ.roa
File: OTsCIbeASZGTF4MvcEDdzaCsteQ.roa (raw, json)
Hash identifier: aG96Q4Qtuny4aLdV5bayqWbTAtIkXfx2rRQ4EqJFTQ8=
Subject key identifier: 39:3B:02:21:B7:80:49:91:93:17:83:2F:70:40:DD:CD:A0:AC:B5:E4
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 030E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTsCIbeASZGTF4MvcEDdzaCsteQ.roa
Signing time: Sun 31 Mar 2024 01:38:39 +0000
ROA not before: Sun 31 Mar 2024 01:38:39 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 210.255.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:38:39 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=393B0221B78049919317832F7040DDCDA0ACB5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:f0:62:9f:23:5b:dd:06:90:bf:91:bf:5a:
42:86:bc:5c:ff:6d:76:0b:0e:3e:13:8e:92:64:0b:
16:61:91:35:e0:91:6f:d1:cf:5f:0b:35:20:0e:bd:
37:39:7a:e6:d8:6f:43:46:40:9c:46:99:39:9f:01:
07:e6:e4:01:87:c1:74:0a:63:a0:85:3a:67:1f:92:
c2:32:87:8a:4c:74:5e:f4:50:5f:04:3f:45:b4:95:
76:2f:1c:87:55:03:e4:51:22:2e:4b:50:b3:d1:7a:
3a:95:48:32:2f:23:27:da:51:70:88:f5:45:ad:13:
c9:70:c6:12:e0:17:d2:fa:44:fb:de:7c:96:f5:d7:
76:6c:2b:d6:28:f0:fe:81:20:5b:3e:54:d3:8c:2a:
84:9f:31:3f:fe:51:04:4f:db:c7:7c:c1:ee:bd:47:
47:75:06:28:f2:f4:c8:bd:fc:89:74:21:d6:4b:ed:
a9:ab:6a:15:9f:3a:8d:b1:b7:86:2c:21:4c:57:c9:
8c:74:7a:78:72:92:ca:b6:6e:a2:79:77:ca:60:50:
33:df:b6:aa:69:fd:d0:c9:75:2a:63:ea:8d:23:78:
a1:4d:37:b7:3c:4a:69:0d:20:08:1f:7e:f4:fa:6e:
07:5b:a4:c4:b4:d7:6c:59:69:29:fb:31:b6:28:99:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3B:02:21:B7:80:49:91:93:17:83:2F:70:40:DD:CD:A0:AC:B5:E4
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTsCIbeASZGTF4MvcEDdzaCsteQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.255.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:86:70:a9:72:bd:cc:1f:f6:c0:e2:c7:8f:cb:47:fa:a2:47:
55:08:31:6d:04:db:e8:ee:37:7f:76:be:70:cd:06:a1:41:cc:
3d:87:22:bc:58:89:07:95:31:ae:fb:5d:ec:4a:89:09:f6:22:
5e:11:cb:40:9c:21:1c:6a:60:3f:fa:28:7c:73:c3:ef:c6:44:
2d:d9:56:3f:a8:c6:be:78:88:51:74:10:ef:1d:b0:00:ac:8d:
0d:6d:b2:74:25:5d:d8:b7:bb:25:e9:29:fa:e9:d5:9f:c1:8e:
56:78:c4:55:e8:94:86:11:63:8e:f3:dc:d5:74:1a:2e:3c:df:
6e:8a:b4:a4:bc:e2:85:0d:ac:01:30:56:56:a1:16:c5:7c:dd:
3d:73:e0:cc:79:58:41:6e:b1:99:b3:a0:fc:f2:61:11:44:4a:
29:9d:70:01:35:4f:17:98:e8:4a:38:c9:be:8d:d3:d6:05:24:
bc:ca:f6:f7:28:b2:f7:5b:1c:05:fe:19:df:68:0a:b0:2a:3c:
c3:fc:ea:30:d6:77:a1:d6:84:09:01:37:7c:52:e9:d9:26:73:
3b:b5:8f:47:69:af:a6:4f:36:e5:34:1c:5e:91:ce:ee:b5:e8:
06:dc:48:8d:a9:17:e9:57:b7:9a:0a:17:3f:33:c2:bd:62:fc:
0a:8b:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:14 2025 by rpki-client