Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Or5xG3l5sUHkuKCbCMU0fEPySe8.roa
File: Or5xG3l5sUHkuKCbCMU0fEPySe8.roa (raw, json)
Hash identifier: AsZVeJ7B5uLdxpeaLce1eKnyh2yHkEiQLw7rImPE34U=
Subject key identifier: 3A:BE:71:1B:79:79:B1:41:E4:B8:A0:9B:08:C5:34:7C:43:F2:49:EF
Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial: 21
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Or5xG3l5sUHkuKCbCMU0fEPySe8.roa
Signing time: Wed 28 Feb 2024 05:03:56 +0000
ROA not before: Wed 28 Feb 2024 05:03:56 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 7679
IP address blocks: 211.132.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Validity
Not Before: Feb 28 05:03:56 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=3ABE711B7979B141E4B8A09B08C5347C43F249EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:94:dc:7e:55:14:f7:ec:88:9d:01:c6:d2:
23:45:4f:18:c3:29:7e:ff:0d:52:d8:8f:8f:c0:71:
4f:f6:2e:9d:52:58:12:f7:ad:c6:6d:65:ec:d3:a7:
5e:e1:c8:04:ed:7d:14:9d:69:37:36:5b:b7:fe:3a:
f8:47:b0:b2:95:be:c3:b4:0e:d6:35:de:c7:83:61:
5b:14:f6:2d:b6:38:b9:da:0b:d1:b2:25:5a:83:25:
02:b1:eb:d4:02:74:65:dd:48:b9:b3:35:d7:fd:02:
5f:c6:dd:16:52:16:9c:c1:d1:43:6f:bb:ad:09:1f:
08:c3:ec:c9:7f:16:66:01:a9:1f:bd:25:1a:d3:0b:
07:46:be:ce:bb:f0:5f:9c:4d:15:2e:67:97:d4:9b:
f2:d9:a8:46:6e:69:5f:db:46:0b:79:21:4b:91:a2:
2c:f2:c6:26:e9:19:84:ed:ea:8a:0f:31:db:01:d3:
a0:ed:42:a9:cc:13:45:f7:f4:7f:ee:3c:47:b0:90:
ce:98:7e:80:4a:fd:d3:bd:e6:d5:f4:1a:fe:50:ab:
a0:ba:89:ab:7d:19:fe:3e:c9:98:25:43:04:c3:88:
75:e9:1f:0c:04:67:e9:fc:42:9b:3b:79:10:05:67:
c7:2d:ca:c1:8b:67:61:51:b7:57:71:6b:a1:08:e0:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:71:1B:79:79:B1:41:E4:B8:A0:9B:08:C5:34:7C:43:F2:49:EF
X509v3 Authority Key Identifier:
keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Or5xG3l5sUHkuKCbCMU0fEPySe8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.132.96.0/19
Signature Algorithm: sha256WithRSAEncryption
bd:8e:e7:a7:cd:fd:88:9a:74:32:f6:cc:6f:3a:d8:94:b4:24:
13:19:9e:1c:a1:eb:78:a1:9f:dd:cc:d4:3d:32:a6:d2:fa:85:
d3:77:53:fc:4b:56:23:8b:9b:5b:bd:5d:87:f1:88:4a:b5:6b:
7a:98:57:14:f8:a3:4d:c5:5a:a0:b2:1a:16:5a:a4:54:fe:02:
6e:40:48:ea:3b:7d:78:a4:e3:16:a9:05:44:34:86:ac:41:c6:
f0:43:06:28:81:e0:47:dd:a1:30:d2:d5:45:37:8a:ac:88:e6:
3e:fd:66:d4:c6:c2:34:d6:70:aa:b2:18:a4:18:a8:0c:8b:ed:
3d:54:f2:ed:e0:8d:9a:a1:54:50:1a:91:30:39:bc:5f:67:2b:
d2:bb:39:79:43:ab:3d:07:8b:05:9f:bf:3a:cd:e2:bf:45:00:
bb:5e:34:21:bd:6f:7f:0c:22:0b:a6:f2:68:84:ae:58:93:22:
f9:65:48:02:7c:24:3c:33:15:20:08:a8:50:d5:0a:c5:78:49:
48:0c:be:f4:d4:18:6e:8c:5c:69:20:22:77:ca:a1:20:f7:42:
9e:cf:24:ae:d4:cb:c9:7e:ce:e6:58:9f:47:da:ef:d6:bd:81:
f8:dc:de:0f:c2:83:13:4e:5b:bd:64:70:38:8f:6f:e4:64:33:
c1:8f:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:16 2025 by rpki-client