Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa
File: lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa (raw, json)
Hash identifier: iK/QT7jJPmHexgAeKjqLRb23l9zjxf2EP8NA/YGc1eI=
Subject key identifier: 96:7C:C0:FF:54:4F:A7:25:6A:8A:EF:B3:C6:3C:32:5A:72:9F:08:28
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0299
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa
Signing time: Sun 31 Mar 2024 01:29:37 +0000
ROA not before: Sun 31 Mar 2024 01:29:37 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 118.158.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:29:37 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=967CC0FF544FA7256A8AEFB3C63C325A729F0828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:8b:af:27:0f:57:24:11:a4:31:d4:38:ad:
59:00:1a:16:02:b6:13:ff:0e:84:31:b7:42:0e:f0:
ef:f7:84:78:a9:d3:41:63:50:ff:72:27:f8:89:a5:
b7:26:ea:cb:8a:79:38:f2:5f:50:98:7f:56:3b:ef:
31:ee:b1:83:85:7a:89:0f:43:57:98:51:41:57:df:
1c:e8:d0:64:3c:4d:a8:88:64:6b:74:6c:43:18:57:
c2:6b:af:81:08:b3:b1:89:ce:ca:d3:6c:b3:31:a6:
94:0a:ed:77:cb:a3:0d:74:fb:f9:69:c9:31:f9:6f:
ca:e9:49:04:c4:f2:12:72:c0:b5:33:c4:98:e2:1c:
9e:30:57:b4:b8:58:d5:f7:4d:7e:18:29:4f:0c:1a:
6b:4e:64:43:74:a4:1c:f5:3a:e4:c3:99:89:45:4e:
ae:c9:c7:e6:88:2a:98:43:b1:3a:5b:34:27:58:d6:
82:f2:36:5a:e9:a2:44:6d:98:64:29:4f:c9:44:2b:
a3:42:47:ff:e9:d7:63:4e:e8:e9:7b:d8:a3:29:0a:
70:a0:ec:00:d2:60:0b:54:03:1e:30:78:98:32:8d:
f4:83:13:81:cd:b5:14:b5:10:05:05:3c:a8:7e:57:
36:5a:57:d5:ee:18:eb:2d:79:a2:d7:8a:24:be:58:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7C:C0:FF:54:4F:A7:25:6A:8A:EF:B3:C6:3C:32:5A:72:9F:08:28
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:33:fc:fc:9b:3a:c9:c0:aa:ce:b3:4a:6d:9e:46:03:af:b4:
5e:ca:1a:ba:f9:e1:52:aa:cc:1c:32:c2:8a:68:99:47:0e:e3:
e7:2f:a6:c6:3e:8d:fd:c8:9e:35:4f:ce:6c:3c:05:9d:f5:f0:
0a:2b:52:14:97:3f:44:eb:77:d3:66:71:80:0c:e1:e9:68:9f:
fd:29:1c:f1:97:1f:a5:4a:da:7c:fa:40:be:3c:94:5a:e5:80:
8c:1f:73:f0:f5:f2:6c:df:63:82:9d:75:b7:75:da:4e:d9:ad:
1d:52:aa:f5:8b:0c:36:b8:1c:63:b6:e7:61:9f:b1:73:82:c9:
ca:8a:97:e6:24:07:60:7c:c7:8a:65:48:77:76:ef:c8:57:b4:
b4:81:a4:d8:f4:23:8c:05:1f:e7:77:99:79:a3:a1:82:db:37:
8c:b2:e9:36:b9:4d:35:eb:89:e7:32:62:19:ee:49:7c:1c:22:
9c:eb:ff:f9:2d:1a:de:77:b5:6a:f9:e8:4d:ad:00:a9:4b:48:
3e:d0:db:cb:17:6a:bc:52:c0:26:99:ef:e1:12:ae:80:63:c4:
cc:7a:9c:b1:48:cf:7c:25:3a:73:9b:fa:d4:7e:da:b3:70:9c:
50:be:c0:bc:26:a7:5e:27:a7:4f:f1:42:6c:a6:b9:7d:a6:3d:
54:b9:f0:af
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICApkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTI5MzdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2N0NDMEZGNTQ0RkE3
MjU2QThBRUZCM0M2M0MzMjVBNzI5RjA4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBCouvJw9XJBGkMdQ4rVkAGhYCthP/DoQxt0IO8O/3hHip00Fj
UP9yJ/iJpbcm6suKeTjyX1CYf1Y77zHusYOFeokPQ1eYUUFX3xzo0GQ8TaiIZGt0
bEMYV8Jrr4EIs7GJzsrTbLMxppQK7XfLow10+/lpyTH5b8rpSQTE8hJywLUzxJji
HJ4wV7S4WNX3TX4YKU8MGmtOZEN0pBz1OuTDmYlFTq7Jx+aIKphDsTpbNCdY1oLy
NlrpokRtmGQpT8lEK6NCR//p12NO6Ol72KMpCnCg7ADSYAtUAx4weJgyjfSDE4HN
tRS1EAUFPKh+VzZaV9XuGOsteaLXiiS+WE3zAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUlnzA/1RPpyVqiu+zxjwyWnKfCCgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2xuekFfMVJQcHlWcWl1LXp4and5V25LZkNDZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB2njANBgkqhkiG9w0BAQsFAAOCAQEAmTP8/Js6ycCqzrNKbZ5GA6+0Xsoa
uvnhUqrMHDLCimiZRw7j5y+mxj6N/cieNU/ObDwFnfXwCitSFJc/ROt302ZxgAzh
6Wif/Skc8ZcfpUrafPpAvjyUWuWAjB9z8PXybN9jgp11t3XaTtmtHVKq9YsMNrgc
Y7bnYZ+xc4LJyoqX5iQHYHzHimVId3bvyFe0tIGk2PQjjAUf53eZeaOhgts3jLLp
NrlNNeuJ5zJiGe5JfBwinOv/+S0a3ne1avnoTa0AqUtIPtDbyxdqvFLAJpnv4RKu
gGPEzHqcsUjPfCU6c5v61H7as3CcUL7AvCanXienT/FCbKa5faY9VLnwrw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:21 2025 by rpki-client