Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa
File: hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa (raw, json)
Hash identifier: e/ra4DFd8TabGrEdOXqNDJBNLmhcJAQegGRJHnWq9t4=
Subject key identifier: 85:31:58:4B:15:FA:CE:64:DD:08:C7:66:F2:5F:EA:FE:8B:9A:38:70
Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial: 2F
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa
Signing time: Fri 15 Sep 2023 07:20:47 +0000
ROA not before: Fri 15 Sep 2023 07:20:47 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 7670
IP address blocks: 211.12.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Validity
Not Before: Sep 15 07:20:47 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=8531584B15FACE64DD08C766F25FEAFE8B9A3870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:03:ce:3e:83:82:25:9c:b1:d9:fd:51:b0:
76:e8:19:e2:27:f8:cd:92:84:fa:04:d7:e9:a3:c5:
fb:5d:58:0a:39:98:fc:e2:2f:28:dc:82:ac:5c:fc:
1c:f6:f6:a0:eb:10:ff:01:16:dd:c2:2c:7d:8a:da:
02:98:02:f5:9f:df:f6:90:b3:cb:34:db:df:a4:fe:
2f:da:6e:2e:13:96:96:1a:53:ff:e6:8f:c7:4e:86:
0b:1d:5f:b2:c0:2d:c3:dc:7a:97:2c:cb:0a:89:f3:
d3:e2:8d:93:bd:f5:f1:e1:62:a5:09:00:0d:9d:43:
9e:28:e7:e0:ca:3d:6d:14:75:92:8d:c1:e5:31:5d:
4c:57:4f:3c:57:40:a0:8e:3d:33:28:77:ad:e0:fb:
47:bf:17:49:69:9a:6a:51:d0:13:9a:13:8c:e0:f0:
8d:8e:cc:12:5b:e8:39:bf:7c:e3:ec:12:95:f0:3b:
4a:d1:f4:80:b6:9b:74:5a:cf:2b:c5:1d:f8:fb:7c:
25:01:6c:9c:73:21:ac:71:15:1c:a9:66:cd:ad:83:
48:81:90:03:45:11:fd:b1:46:65:ae:bb:fa:02:ee:
0a:77:2f:22:b6:d2:d1:8a:f5:e6:6b:42:7e:4a:27:
ea:b1:d7:94:52:89:39:cb:d9:95:b0:82:30:01:ca:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:58:4B:15:FA:CE:64:DD:08:C7:66:F2:5F:EA:FE:8B:9A:38:70
X509v3 Authority Key Identifier:
keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/hTFYSxX6zmTdCMdm8l_q_ouaOHA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.12.224.0/19
Signature Algorithm: sha256WithRSAEncryption
91:fd:7b:88:af:70:b2:d4:99:84:7c:f1:3b:5b:62:be:01:5a:
bd:d0:a7:3f:67:21:24:af:3e:b0:bc:a0:d9:af:a7:a8:8c:45:
ec:c0:09:85:ab:43:6e:13:ce:29:5f:f0:10:3d:d6:50:d6:0a:
84:08:00:7c:2a:03:65:95:a3:c8:bb:8d:1d:e2:cc:95:86:df:
46:97:50:cb:27:2a:07:13:08:9d:e3:db:f7:d4:18:1c:bc:c3:
07:77:04:80:ef:e5:c7:55:72:82:14:57:c1:ef:ef:4b:2c:42:
4b:1d:34:84:71:be:51:5a:14:e3:34:cb:20:af:0e:af:96:8e:
31:57:be:87:b7:ad:5c:01:b6:86:02:61:8e:9a:f8:f1:94:2c:
55:5e:ab:f1:a0:65:ca:58:50:6c:10:43:fc:b1:a2:8c:ab:62:
56:69:64:7a:ee:6c:82:a0:41:f4:db:48:1c:40:3d:eb:8d:4a:
e7:c6:91:83:1b:bb:66:f1:57:b8:61:02:aa:34:c6:de:f7:da:
1d:eb:e7:72:e8:74:d3:2e:00:23:45:8a:48:89:03:45:04:fa:
be:2c:91:f7:0a:e6:24:89:47:ce:ea:f3:45:23:f6:6a:94:7c:
36:c8:f2:82:a2:66:43:2f:c6:db:69:2a:ed:c9:cd:bb:1d:04:
da:d2:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:43 2025 by rpki-client