Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/B-YIQ-WXF2ckbhpYO8cuWvUzOLc.roa
File: B-YIQ-WXF2ckbhpYO8cuWvUzOLc.roa (raw, json)
Hash identifier: zHQWoEZhGeO/wREj/CAF0fNRZHiUEDeAM4FgEQsz2C8=
Subject key identifier: 07:E6:08:43:E5:97:17:67:24:6E:1A:58:3B:C7:2E:5A:F5:33:38:B7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0456
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B-YIQ-WXF2ckbhpYO8cuWvUzOLc.roa
Signing time: Thu 27 Jul 2023 16:43:16 +0000
ROA not before: Thu 27 Jul 2023 16:43:16 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.67.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:43:16 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=07E60843E5971767246E1A583BC72E5AF53338B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:b4:e9:28:b8:33:e2:a3:c1:3a:cd:e1:be:
44:17:91:ac:38:7f:b3:19:6c:4d:ca:96:9c:d9:12:
64:02:99:57:24:03:14:a9:9e:f5:98:0b:aa:fe:a6:
a6:ee:1d:d5:eb:4e:b3:eb:71:20:1b:f1:b9:9a:35:
70:7f:88:c5:ab:11:48:a6:e8:cd:b0:0f:00:7f:98:
65:94:ef:de:e8:a1:26:58:fc:5f:46:e9:02:31:ec:
d0:38:42:0b:45:34:98:37:fb:9d:15:a4:33:97:d1:
3b:6d:70:34:b8:ce:37:d8:0c:ac:9c:f3:61:64:28:
23:38:fb:1e:30:2a:97:80:00:2f:71:45:44:2d:a9:
aa:fe:16:55:74:fe:8d:3a:ef:1d:0d:af:33:79:22:
53:81:f0:e6:f7:89:51:2e:a6:7c:f9:e4:8d:26:a4:
e7:8c:31:d9:f5:1d:eb:aa:32:01:4d:bd:6e:31:31:
16:b3:ee:9a:fa:59:3e:8d:dc:85:24:bb:37:2b:0e:
11:ad:31:8f:3c:64:a7:4c:72:f4:9c:55:ad:b4:8a:
61:c1:81:56:34:71:5b:6f:52:a6:a8:24:cb:ce:fc:
61:b9:2b:d5:c2:d7:6d:0c:1f:36:ed:85:2d:c0:32:
43:c1:64:a5:8d:3d:69:3a:1e:ca:07:58:b3:e0:8d:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:08:43:E5:97:17:67:24:6E:1A:58:3B:C7:2E:5A:F5:33:38:B7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/B-YIQ-WXF2ckbhpYO8cuWvUzOLc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1e:84:3f:7d:f0:80:59:28:d4:d4:08:73:28:1a:28:c3:40:
39:4f:09:87:45:be:8a:7c:9d:aa:70:95:59:1a:eb:58:2b:90:
51:8a:43:e6:b9:34:9b:d1:07:f1:15:42:e4:1a:d6:56:65:92:
b2:7d:fa:e4:b9:9e:57:2d:09:69:4e:16:1c:1d:0b:cd:ed:36:
57:56:a1:22:d5:b1:4d:55:17:48:f4:fd:bd:7a:36:38:5b:a9:
3b:bb:52:5d:a1:34:67:1c:61:65:dd:a6:8f:35:20:77:3a:59:
19:7e:87:2e:0f:2b:60:23:6a:72:e4:36:fd:82:e5:a2:ce:a9:
5d:4d:78:55:b0:1a:f4:9b:de:aa:67:ae:2a:fa:a0:49:6e:7e:
7c:4a:15:89:a4:53:68:55:1f:b1:5f:ae:01:70:a1:ea:70:94:
af:bb:f9:7b:bf:58:94:14:36:88:8b:25:d0:cc:6f:a3:da:51:
6f:2e:7a:43:60:e4:b9:c9:82:ee:73:d6:a8:b1:3d:39:22:43:
a9:fb:33:90:c3:5f:35:48:b8:0c:4d:e9:5c:e7:da:a8:1e:77:
ab:5a:4c:a8:a9:d8:f0:55:80:59:cd:cd:c9:7e:cf:c4:1e:0b:
f5:9d:62:20:8f:77:88:6d:0b:03:d4:12:0f:c0:79:fd:fc:5d:
42:6a:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:51 2025 by rpki-client