Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYpOEOZxs7i9xpVAkduEsc6gigI.roa
File: EYpOEOZxs7i9xpVAkduEsc6gigI.roa (raw, json)
Hash identifier: QZwX9p/KB7q5u6KbOrNcpvo+DAFXhEXB/3djcuBvy/c=
Subject key identifier: 11:8A:4E:10:E6:71:B3:B8:BD:C6:95:40:91:DB:84:B1:CE:A0:8A:02
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0629
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYpOEOZxs7i9xpVAkduEsc6gigI.roa
Signing time: Thu 29 Feb 2024 01:41:03 +0000
ROA not before: Thu 29 Feb 2024 01:41:03 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.72.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:41:03 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=118A4E10E671B3B8BDC6954091DB84B1CEA08A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:29:ef:a0:a1:4e:9b:13:14:94:de:55:57:
40:bd:19:bc:ec:8c:ea:74:5e:3e:e8:e5:35:20:c4:
99:e4:d7:cd:04:c8:3b:af:77:94:d4:9b:82:96:92:
ed:36:35:b0:17:97:ad:88:88:d7:44:68:7a:2f:07:
75:1f:6c:42:63:33:d4:4c:6a:5b:b0:04:e9:ee:d4:
2a:a5:b0:ab:11:f5:75:1a:99:9c:ec:03:48:fe:8f:
15:0f:d7:7e:e5:b9:9c:dc:e9:88:f6:42:9a:0a:91:
bf:e5:96:15:ff:81:5b:93:cc:1d:55:63:46:ea:d7:
82:01:c1:37:72:ca:b8:ea:cd:5d:8e:f7:99:d1:2f:
ae:30:bc:b4:0f:ca:c5:03:7c:06:3c:4a:0d:89:8a:
68:21:b8:37:52:61:66:01:2a:57:cf:5f:4f:30:07:
27:cb:e6:67:71:39:9e:d0:3e:5d:86:6f:f4:46:fe:
50:16:7d:f5:54:42:94:a8:81:d9:e0:9b:11:c0:8f:
5e:b4:a6:37:65:35:5d:44:4c:69:83:88:f6:75:8e:
0d:39:39:a6:bb:89:f0:b7:b4:7f:5f:ed:0c:4d:00:
e2:e1:df:2c:e6:1c:4b:c7:65:29:71:a6:c7:d7:55:
b1:59:d7:5c:93:a7:6b:9d:a2:6f:15:1b:48:09:6b:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:4E:10:E6:71:B3:B8:BD:C6:95:40:91:DB:84:B1:CE:A0:8A:02
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EYpOEOZxs7i9xpVAkduEsc6gigI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.4.0/24
Signature Algorithm: sha256WithRSAEncryption
df:fb:b0:14:73:bd:f5:ec:e2:53:e2:90:ae:af:e1:11:02:bc:
7f:3c:ba:91:79:de:cc:f0:8a:8a:3b:1a:1f:f6:06:46:a6:d6:
89:b8:9b:c4:5f:7e:88:88:d6:d6:a0:09:ec:14:83:34:6f:a0:
88:81:a2:b7:fa:54:2e:47:37:1d:13:9a:13:c9:b4:99:74:6d:
fd:62:80:fb:a8:28:88:89:d5:bd:da:5b:cc:c7:4b:da:45:94:
2e:ac:0b:1b:a0:25:cb:d8:79:f8:22:14:a6:37:32:36:b8:f3:
b5:8d:58:0c:d7:86:f1:18:f9:6e:d9:fb:f4:10:1b:88:56:f6:
49:90:5c:21:95:06:48:f1:42:28:92:37:99:95:bc:3f:7c:23:
87:7c:e4:67:f5:c4:4c:cd:78:5e:c6:c6:07:d6:64:90:8c:d1:
05:9f:7f:56:7e:80:43:67:45:51:31:fe:af:51:17:18:ed:47:
5d:ac:38:0d:fe:f0:10:51:c6:87:d9:d6:f6:04:b4:d1:c5:dd:
95:e6:ca:63:c3:66:dc:5a:4f:3c:f1:2f:25:66:f1:ca:a4:46:
e7:71:24:79:19:28:ef:a4:5d:e9:e9:2c:56:ef:f1:6e:03:4a:
a0:a2:26:2d:8c:2f:ea:b0:e6:b5:06:6c:b8:6b:e2:1d:a4:91:
6c:94:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:42 2025 by rpki-client