Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xt2xtekv1dEZhqDDx5kb-mp8KjI.roa
File: Xt2xtekv1dEZhqDDx5kb-mp8KjI.roa (raw, json)
Hash identifier: nUN+gWLIQoYetEPZJrIUa08ncqieCmQB1m8RPxOSZEc=
Subject key identifier: 5E:DD:B1:B5:E9:2F:D5:D1:19:86:A0:C3:C7:99:1B:FA:6A:7C:2A:32
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0390
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xt2xtekv1dEZhqDDx5kb-mp8KjI.roa
Signing time: Sat 31 Aug 2024 01:29:53 +0000
ROA not before: Sat 31 Aug 2024 01:29:53 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 2516
IP address blocks: 111.86.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Aug 31 01:29:53 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=5EDDB1B5E92FD5D11986A0C3C7991BFA6A7C2A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:21:30:3f:26:eb:10:55:3f:80:bb:60:84:
69:30:b4:9b:d0:2b:48:4a:d1:14:91:9a:d0:a4:d7:
49:7e:6c:19:e7:c8:c3:5f:96:06:2c:07:a5:43:99:
17:c6:05:c2:a1:47:33:42:94:a5:08:bf:32:95:64:
67:21:26:54:1a:7a:3b:40:a3:ee:de:ed:3e:33:4c:
7f:74:9f:08:dd:9e:55:f6:7c:c4:c5:14:92:5f:74:
08:05:7a:18:82:9d:73:a4:0c:bb:6b:1c:ea:4f:bb:
32:f5:86:2e:fd:e5:30:eb:25:02:08:eb:71:0b:8b:
19:69:41:81:35:43:ab:9f:38:6d:ae:1d:3a:eb:4f:
b3:c7:fc:94:7e:d5:82:8b:50:f6:61:ff:4e:4c:08:
96:34:87:b4:47:af:55:b7:05:6a:c5:dd:21:62:b9:
98:b0:23:61:d9:79:f2:76:43:ba:9c:fa:6e:17:3b:
46:7d:2e:21:bd:dc:0b:0b:fe:e0:0e:c6:34:1a:3c:
44:7a:d1:05:86:12:a5:0f:07:7a:ae:28:ce:4c:45:
b0:39:3b:c1:f3:2b:91:bd:43:27:07:97:b3:05:d9:
00:50:ed:45:f6:70:57:c5:da:37:d2:1a:3a:98:0b:
67:d6:cb:83:b4:ab:2f:01:97:6f:93:43:97:f5:1d:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:B1:B5:E9:2F:D5:D1:19:86:A0:C3:C7:99:1B:FA:6A:7C:2A:32
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xt2xtekv1dEZhqDDx5kb-mp8KjI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.86.0.0/17
Signature Algorithm: sha256WithRSAEncryption
39:ba:01:69:f6:94:9a:89:da:0f:ac:c3:99:7b:28:ff:4e:3c:
54:48:98:b4:ad:36:04:43:11:0f:ce:f5:87:02:fa:39:86:15:
38:56:e3:5f:88:5f:23:47:35:83:8f:2c:99:99:b1:34:4f:03:
6d:68:25:86:a7:20:aa:32:b4:2d:5f:37:c0:d5:80:86:86:fd:
20:c0:b2:a0:20:bc:ec:cd:3d:61:10:55:66:c5:ed:49:20:10:
77:97:1a:ca:b3:66:c6:00:86:97:ce:81:c1:95:51:8f:a8:f6:
d2:bf:86:54:3a:48:60:51:ed:52:63:59:c8:36:83:87:26:92:
fb:0a:e9:a4:60:b1:e6:25:d1:57:dd:f7:9d:88:6f:8a:40:f5:
88:3b:d6:ee:26:1d:ee:75:9e:00:c6:b0:f0:72:43:74:88:81:
70:c2:05:6c:82:96:58:0e:4c:ad:e9:14:32:a6:9f:b6:5a:e8:
3d:9f:46:d2:30:ec:43:85:f7:33:5f:e6:ec:7d:fe:23:b0:50:
c3:55:4e:5f:9f:9d:27:fb:96:fd:04:27:76:53:cb:b2:2e:da:
b6:9a:9d:ce:4a:b7:f8:65:bb:b7:1f:8e:3d:35:4a:25:49:39:
5f:a9:99:ec:b6:74:6f:44:bd:19:0a:3b:d0:b3:23:c0:fd:0c:
c5:5e:c1:30
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDA4MzEw
MTI5NTNaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFRERCMUI1RTkyRkQ1
RDExOTg2QTBDM0M3OTkxQkZBNkE3QzJBMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMRyEwPybrEFU/gLtghGkwtJvQK0hK0RSRmtCk10l+bBnnyMNf
lgYsB6VDmRfGBcKhRzNClKUIvzKVZGchJlQaejtAo+7e7T4zTH90nwjdnlX2fMTF
FJJfdAgFehiCnXOkDLtrHOpPuzL1hi795TDrJQII63ELixlpQYE1Q6ufOG2uHTrr
T7PH/JR+1YKLUPZh/05MCJY0h7RHr1W3BWrF3SFiuZiwI2HZefJ2Q7qc+m4XO0Z9
LiG93AsL/uAOxjQaPER60QWGEqUPB3quKM5MRbA5O8HzK5G9QycHl7MF2QBQ7UX2
cFfF2jfSGjqYC2fWy4O0qy8Bl2+TQ5f1HfedAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXt2xtekv1dEZhqDDx5kb+mp8KjIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1h0Mnh0ZWt2MWRFWmhxRER4NWtiLW1wOEtqSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdvVgAwDQYJKoZIhvcNAQELBQADggEBADm6AWn2lJqJ2g+sw5l7KP9OPFRI
mLStNgRDEQ/O9YcC+jmGFThW41+IXyNHNYOPLJmZsTRPA21oJYanIKoytC1fN8DV
gIaG/SDAsqAgvOzNPWEQVWbF7UkgEHeXGsqzZsYAhpfOgcGVUY+o9tK/hlQ6SGBR
7VJjWcg2g4cmkvsK6aRgseYl0Vfd952Ib4pA9Yg71u4mHe51ngDGsPByQ3SIgXDC
BWyCllgOTK3pFDKmn7Za6D2fRtIw7EOF9zNf5ux9/iOwUMNVTl+fnSf7lv0EJ3ZT
y7Iu2raanc5Kt/hlu7cfjj01SiVJOV+pmey2dG9EvRkKO9CzI8D9DMVewTA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:37:54 2025 by rpki-client