Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/tQ3C7LGAZ3NeIyaaaxA5bE-NzLk.roa
File: tQ3C7LGAZ3NeIyaaaxA5bE-NzLk.roa (raw, json)
Hash identifier: 19TG5bs2etnhKV54qTcBFmY0oSTEYPm5Zz5EkIYmLV4=
Subject key identifier: B5:0D:C2:EC:B1:80:67:73:5E:23:26:9A:6B:10:39:6C:4F:8D:CC:B9
Certificate issuer: /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial: 0D
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/tQ3C7LGAZ3NeIyaaaxA5bE-NzLk.roa
Signing time: Wed 28 Apr 2021 06:48:13 +0000
ROA not before: Wed 28 Apr 2021 06:48:13 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 16509
IP address blocks: 150.35.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
Validity
Not Before: Apr 28 06:48:13 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=B50DC2ECB18067735E23269A6B10396C4F8DCCB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:c6:e1:ee:a5:e7:df:b1:34:b4:92:eb:ad:
aa:58:3c:b2:3e:46:2a:1b:1e:84:58:fd:3b:f9:0a:
45:b4:21:b7:9c:85:44:47:00:26:6e:a7:d2:fe:66:
87:42:ae:0f:18:44:d9:af:5a:76:96:43:fa:1c:4c:
69:d9:80:8c:27:e3:10:be:95:f4:62:9b:ea:3c:97:
ba:74:a9:24:3c:aa:32:3f:bb:a1:29:14:b6:1e:58:
27:07:bc:7c:55:f9:1f:8f:1f:87:df:6e:2c:fd:be:
49:b6:dc:5c:0d:79:39:98:f4:44:da:4e:d9:70:ed:
d9:7e:cf:6f:2f:09:35:fa:e4:4b:31:e8:44:d6:30:
e5:37:f2:fb:88:d4:bd:64:1e:a0:32:e0:09:4b:2a:
8c:84:6b:a0:7b:6f:20:54:80:37:85:8a:ae:31:d5:
0a:24:62:c4:9e:90:de:7a:0d:48:3e:88:e6:7e:2b:
fb:72:2b:0a:92:20:03:36:8c:98:da:21:3b:06:38:
50:38:8f:69:63:af:9d:33:39:14:ea:07:e5:ed:83:
a8:7a:f8:9d:f3:f0:e0:6f:b2:4a:62:2b:4b:bb:c2:
47:01:11:7c:5b:12:f8:d5:06:4f:8e:86:3a:79:4b:
29:c1:99:66:a9:09:71:7e:7e:73:67:30:f2:f2:a8:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0D:C2:EC:B1:80:67:73:5E:23:26:9A:6B:10:39:6C:4F:8D:CC:B9
X509v3 Authority Key Identifier:
keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/tQ3C7LGAZ3NeIyaaaxA5bE-NzLk.roa
sbgp-ipAddrBlock: critical
IPv4:
150.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d4:23:4c:38:04:95:c7:15:1e:e2:eb:f3:b3:3e:a7:c2:dd:
6c:be:73:dc:3a:e7:0c:b9:e0:20:e1:5e:41:e2:04:60:4d:73:
30:e7:d1:7b:87:0c:b3:7c:f3:5f:31:f4:7d:36:2c:35:10:a6:
be:3b:e1:95:1d:66:3b:39:05:4d:91:eb:1b:6e:5e:7c:91:a2:
44:81:ad:ba:ce:b9:c5:02:3b:10:6e:c0:27:6e:a3:b4:3a:bd:
35:11:5f:7f:75:1f:9e:d7:45:95:91:52:ac:37:d3:4c:04:1f:
6c:85:31:7e:01:6d:a6:72:d1:ee:ff:31:a7:e9:c7:ac:1b:d9:
6a:85:0b:b7:b9:16:31:22:53:65:8d:5b:1b:6d:6e:5f:8a:ad:
70:0b:c9:4a:a4:18:24:3b:87:1f:ce:85:6b:80:72:00:0b:9d:
ec:d4:19:98:68:de:dc:35:ca:e2:62:3b:c6:1d:de:fa:bf:d2:
ee:a8:ac:fa:62:9e:94:36:a2:10:8f:13:41:a6:26:71:cb:c5:
65:8d:2c:10:4d:cd:ef:f2:a1:25:a3:3f:98:38:a1:05:1b:4c:
9c:24:d4:a5:9f:96:dc:e3:3d:cc:28:17:f7:b5:ba:19:de:3c:
71:99:c8:43:64:05:ee:7b:62:10:59:cd:bb:15:39:6e:af:aa:
91:a7:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:20 2025 by rpki-client