Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5fMdC-EohXKAKNtfodB_1KT5yQc.roa
File: 5fMdC-EohXKAKNtfodB_1KT5yQc.roa (raw, json)
Hash identifier: kBDw8U9lVuvItVwIFiESgkGLUUGHgw04A/7GQIS3X8E=
Subject key identifier: E5:F3:1D:0B:E1:28:85:72:80:28:DB:5F:A1:D0:7F:D4:A4:F9:C9:07
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0124
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5fMdC-EohXKAKNtfodB_1KT5yQc.roa
Signing time: Wed 24 May 2023 16:30:18 +0000
ROA not before: Wed 24 May 2023 16:30:18 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:18 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=E5F31D0BE12885728028DB5FA1D07FD4A4F9C907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:a3:c5:1b:40:34:e0:0e:1d:cf:c3:48:2e:
7d:47:d2:ec:49:15:bc:16:b9:09:0e:a2:12:4c:dc:
46:80:55:f1:c6:09:6d:aa:a5:e6:cf:0a:4c:97:08:
51:7d:a6:4b:cc:aa:1b:46:2c:32:15:f1:7f:89:88:
7e:73:73:90:d7:94:6b:14:55:31:3b:f6:6f:dc:87:
21:07:75:a9:f2:ae:8d:5b:f9:11:0c:e0:97:b8:ef:
e5:cf:77:48:3f:db:48:4b:1a:dd:be:76:71:f0:d3:
75:ea:22:16:9a:a6:7b:6e:c8:01:de:ff:5c:d1:d6:
18:ce:b1:d1:9e:31:7c:8d:4b:7a:57:26:50:06:b0:
90:47:39:c2:e8:0b:a9:10:05:a5:20:ea:b1:e0:77:
15:f0:b5:05:7c:2e:11:19:13:ab:12:96:de:30:d0:
46:2f:f9:99:39:4b:cb:d0:f0:bc:ba:0c:f1:10:3e:
94:9b:d2:e5:e3:8c:6c:79:3e:95:72:68:fd:8e:61:
9d:8f:f5:67:4d:31:57:e9:52:08:86:f3:e5:36:49:
c3:6f:c8:11:d8:82:93:53:17:11:df:05:5d:72:75:
b8:f1:c5:15:b8:6e:a4:51:52:32:e8:61:a3:68:40:
af:c9:a0:89:20:d7:bb:6b:7c:2c:86:51:08:5f:1e:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:1D:0B:E1:28:85:72:80:28:DB:5F:A1:D0:7F:D4:A4:F9:C9:07
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5fMdC-EohXKAKNtfodB_1KT5yQc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.16.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:03:1d:a4:83:ca:96:88:e5:ea:5f:e2:4e:4c:1b:f9:3c:85:
5e:57:db:8d:bf:fe:6a:86:64:54:aa:58:4e:95:2d:75:6c:ca:
3a:9a:3e:c8:71:39:31:30:02:5a:e9:ee:0f:5f:b3:30:df:aa:
87:05:7a:ba:d1:34:7b:8b:95:17:4e:a3:31:d5:05:89:dc:b8:
bc:0d:64:cd:4c:0a:81:9c:ca:99:6f:05:20:52:c9:ed:75:f0:
7f:09:ba:33:72:5d:ef:c1:46:ce:25:2b:08:c4:e9:3a:bb:fd:
c3:2a:a5:6f:8d:38:34:25:c5:93:00:fc:37:06:1b:97:9f:02:
31:1a:50:d1:f3:a8:9c:2c:ab:98:1c:7d:a4:28:61:bf:63:1f:
36:6b:25:e4:a6:d6:0b:fe:72:d9:18:10:23:4f:d3:60:f3:2b:
5c:bb:6d:e4:06:a6:2a:e4:49:60:85:54:5a:d8:48:9c:8d:40:
c2:37:fb:26:b3:32:13:46:f8:58:69:10:97:a5:9a:14:02:39:
44:27:19:3e:6f:48:e8:8c:d4:a3:f0:b7:57:b8:c2:bd:ff:9a:
7d:58:b5:ce:cf:47:da:53:3f:57:07:9d:d8:bc:61:ae:5e:7b:
8c:95:8b:dd:53:5c:2f:96:29:45:00:8a:24:31:62:49:c7:48:
4c:a9:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:11:29 2025 by rpki-client