Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/X4SzVnfzCcWGdgMHNXTC_stmuIQ.roa
File: X4SzVnfzCcWGdgMHNXTC_stmuIQ.roa (raw, json)
Hash identifier: ifHSkvo9kwEfp6qdkqc18n4UP2sTb86nkjBz7c4nLFY=
Subject key identifier: 5F:84:B3:56:77:F3:09:C5:86:76:03:07:35:74:C2:FE:CB:66:B8:84
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0399
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/X4SzVnfzCcWGdgMHNXTC_stmuIQ.roa
Signing time: Sat 31 Aug 2024 01:34:40 +0000
ROA not before: Sat 31 Aug 2024 01:34:40 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 2516
IP address blocks: 125.29.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Aug 31 01:34:40 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=5F84B35677F309C5867603073574C2FECB66B884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:13:fa:7a:97:26:d8:3c:17:34:d6:c8:d8:
b6:b6:8d:9c:33:19:35:72:3a:c4:93:f2:24:5c:5d:
e1:a4:d1:03:a4:e7:77:d5:95:06:ac:4b:61:42:e6:
78:17:a2:e2:1f:4a:e5:c3:0a:1a:f2:00:ac:2d:bb:
da:6d:e8:a6:aa:aa:6c:52:56:57:a2:a9:53:20:7a:
86:39:1e:ce:77:44:a3:d8:f3:a8:ac:93:9e:c3:2a:
cc:8d:1a:ca:a4:e5:79:c8:df:40:01:15:59:4e:66:
1b:02:30:25:bf:6d:11:8e:bc:98:60:8b:a3:ba:30:
d2:b7:0f:63:2f:b9:79:69:b0:ff:03:6c:7b:9b:14:
ea:c7:32:93:4a:d4:a9:a2:25:3f:7e:a0:1b:69:f5:
ec:b0:07:a0:ce:41:ef:26:cf:04:dd:b5:2e:d9:b9:
c5:23:b5:3c:d7:f2:e9:92:76:05:eb:e3:a5:d4:a8:
bc:ff:18:52:de:79:5f:a7:cd:2f:31:7f:f1:a1:f4:
bb:6a:93:88:06:4b:67:f6:01:3e:3b:53:26:05:71:
45:5f:48:f0:0d:a4:13:1b:54:f5:8f:d0:bf:7f:d3:
26:53:69:b3:83:13:cb:bf:96:83:c4:3e:42:0a:b7:
44:8f:76:29:09:73:7a:d4:e1:23:9c:72:56:35:0a:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:B3:56:77:F3:09:C5:86:76:03:07:35:74:C2:FE:CB:66:B8:84
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/X4SzVnfzCcWGdgMHNXTC_stmuIQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.29.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:d1:5e:c1:4b:9e:43:61:e7:64:72:07:1c:16:1d:1e:18:ae:
1c:ef:b4:6f:0c:b7:b3:1c:9e:79:9e:05:f2:eb:84:04:2d:9a:
dc:9c:3b:ac:f6:b7:27:84:9f:de:2f:72:42:da:c6:18:79:2e:
5a:e7:1a:0f:d0:96:8b:7e:42:e0:86:ae:b5:17:45:33:a4:5e:
0e:20:49:70:1e:35:d2:b1:e0:a7:86:56:ee:39:40:85:f1:4c:
9b:64:fe:46:e3:fc:f7:0d:52:ee:1b:2f:79:9e:a4:4c:93:91:
b7:65:bb:4f:61:a5:d1:d5:b3:56:14:e3:d8:77:68:d5:5e:89:
3a:16:3c:af:0b:0b:17:7b:38:62:a9:06:58:12:28:73:c9:cf:
0b:23:6b:65:9a:30:99:06:c0:76:51:0b:aa:10:bc:1d:04:dd:
fa:5e:16:0c:f5:53:3e:46:ac:2c:46:62:97:4e:cc:f3:5e:90:
fa:b4:a7:48:25:eb:38:55:e1:45:3d:6b:96:b5:b6:c9:43:6f:
b9:d7:1f:c9:ce:e5:70:ac:68:c7:0a:15:fe:6b:65:b2:ff:ba:
22:c7:82:88:c7:68:6b:35:61:06:88:9e:07:d1:1d:fa:b5:98:
86:d7:df:d9:4c:64:a0:7e:bd:67:bc:59:fd:d1:c4:99:d2:34:
0e:db:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:17 2025 by rpki-client