Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xr1dG1r4J52h2yLTeA7EXD5nVwo.roa
File: xr1dG1r4J52h2yLTeA7EXD5nVwo.roa (raw, json)
Hash identifier: xjfWc41ufR/UNtvHAdYS0uWbCVAo4qZZatmHLNmz0ZE=
Subject key identifier: C6:BD:5D:1B:5A:F8:27:9D:A1:DB:22:D3:78:0E:C4:5C:3E:67:57:0A
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0292
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xr1dG1r4J52h2yLTeA7EXD5nVwo.roa
Signing time: Thu 29 Feb 2024 01:31:33 +0000
ROA not before: Thu 29 Feb 2024 01:31:33 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 2516
IP address blocks: 125.28.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Feb 29 01:31:33 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=C6BD5D1B5AF8279DA1DB22D3780EC45C3E67570A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:2b:a3:1b:22:2e:be:94:2b:19:94:7b:a8:
e6:25:6f:37:5f:40:6e:0e:d8:3d:60:53:9f:71:d7:
0d:a7:47:e6:bf:f7:03:e8:1f:5f:5a:a4:f4:bc:d0:
3a:38:e5:30:76:e7:75:7d:12:c4:1d:a7:bb:ff:0e:
e3:4e:12:25:4c:a4:12:cf:dc:6e:e5:42:65:15:89:
ae:75:48:1c:5f:5c:a4:25:79:5f:30:ac:87:12:56:
22:1c:15:3c:34:af:df:70:3d:7b:96:a6:0e:14:ed:
7d:40:d8:7c:3d:bb:88:b6:26:62:fe:44:84:a5:af:
1a:24:51:1c:93:d6:89:ad:8a:e2:fe:a1:bf:db:89:
86:2f:52:f1:6d:ab:bd:a2:1d:68:9c:57:61:f5:d8:
b4:29:81:4c:fb:99:c8:d3:ec:fd:80:d7:e4:21:f7:
39:90:12:cd:3a:61:28:02:37:cb:18:3d:87:8a:7c:
7a:10:7e:89:60:fe:c1:9b:42:44:c9:d8:cd:f3:fc:
70:34:33:47:bc:f1:d7:85:6d:77:c1:d7:ab:eb:d2:
cb:18:15:33:51:d3:78:a5:70:4f:be:b7:84:48:ea:
57:d9:66:0b:ea:1c:a8:38:e8:b3:cf:57:47:44:f8:
48:cd:39:41:ae:e6:c8:05:d0:15:6a:f6:84:d6:8f:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:5D:1B:5A:F8:27:9D:A1:DB:22:D3:78:0E:C4:5C:3E:67:57:0A
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xr1dG1r4J52h2yLTeA7EXD5nVwo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.28.128.0/17
Signature Algorithm: sha256WithRSAEncryption
71:6f:51:7c:a6:6c:52:fd:64:a5:d3:60:a9:b0:fb:dd:f3:e7:
00:97:14:a6:9d:89:7b:33:7d:dd:f3:50:ba:f5:4d:fd:1a:a8:
43:10:e2:07:ba:3a:76:3d:06:42:d9:70:69:14:42:b6:3a:ba:
ed:cd:c9:0a:a4:71:65:42:d5:7d:34:4c:ab:ff:27:26:3b:53:
52:2d:f4:08:0c:0a:fc:2b:a6:94:8c:dd:b6:cd:7e:20:b2:6b:
df:de:ce:b7:6f:ea:c6:72:e1:b2:f6:60:03:86:63:f3:dc:f8:
17:5e:f4:03:61:6f:1a:1a:44:ba:b6:e9:09:79:fe:8e:98:27:
7f:ae:35:4e:b0:51:92:6f:32:b9:d8:14:52:98:1b:13:28:cc:
b3:b2:1f:44:3b:c9:fa:2d:d0:c6:83:e9:7c:17:6a:a5:7e:f3:
09:22:bb:cc:84:07:41:65:47:8b:1b:31:2c:9f:c3:48:3d:f5:
73:34:fa:7a:cf:94:2d:ea:60:7e:8a:76:7a:d3:0c:45:6d:ad:
0b:50:9b:33:a4:76:d4:93:5c:bb:96:49:63:39:73:34:0a:10:
0b:76:50:9e:f9:ee:01:56:ee:ff:e7:f2:42:16:ba:72:62:a9:
3a:cd:88:ad:df:57:b8:3e:ac:14:58:d7:bd:fb:e9:8a:74:a2:
02:7e:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:31 2025 by rpki-client