Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PImYc1KAkxX07pIZxQ3iCFkxRQE.roa
File: PImYc1KAkxX07pIZxQ3iCFkxRQE.roa (raw, json)
Hash identifier: f4EgeyB/o0xmzUdGniyDQLnP6zYDGTXUPoG2CKZOkdY=
Subject key identifier: 3C:89:98:73:52:80:93:15:F4:EE:92:19:C5:0D:E2:08:59:31:45:01
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01D2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PImYc1KAkxX07pIZxQ3iCFkxRQE.roa
Signing time: Wed 24 May 2023 16:40:34 +0000
ROA not before: Wed 24 May 2023 16:40:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=3C89987352809315F4EE9219C50DE20859314501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:85:64:1d:79:d9:f2:4f:40:01:53:e2:bf:
dd:f4:ff:0c:f0:d0:be:be:4b:d8:1b:af:21:e7:6b:
f7:4a:c8:33:e2:8d:1c:b1:5f:4f:2e:9f:37:ba:d7:
78:71:24:7c:9e:d9:82:69:14:8f:12:d1:83:f9:1c:
7f:02:20:c5:b6:08:a3:38:d5:77:f0:18:f1:e9:45:
9c:40:6d:ff:ca:0a:3e:09:51:ff:71:cb:77:e1:2d:
d0:07:35:70:c8:50:b4:13:a2:0f:e6:75:68:a6:98:
52:cf:63:a1:5e:43:98:68:6e:e7:1a:f7:4a:6f:79:
cb:8f:6c:a1:c3:fd:62:d7:39:fb:a8:5b:1e:43:37:
26:a7:3a:2a:70:f2:48:ce:ba:82:ab:c4:99:3f:90:
75:34:7f:32:a2:20:2b:21:33:5e:31:3a:59:f7:b0:
68:c7:9f:f3:b3:30:b3:7d:b6:26:79:b2:7d:bc:f5:
f1:60:57:34:58:99:06:8b:91:2a:a5:3e:32:85:28:
00:7a:5a:56:e5:a5:5a:f7:04:4b:1c:5d:63:f6:20:
9f:cf:a2:ab:fa:5c:b4:f0:9d:19:ad:11:82:ce:4b:
25:9b:aa:ae:d7:f3:02:31:c6:75:e3:9a:b2:8f:20:
68:09:7f:ad:85:19:8c:62:aa:1a:03:ae:0a:89:d4:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:98:73:52:80:93:15:F4:EE:92:19:C5:0D:E2:08:59:31:45:01
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PImYc1KAkxX07pIZxQ3iCFkxRQE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.8.0/22
Signature Algorithm: sha256WithRSAEncryption
df:e8:e8:39:ae:a0:30:6c:86:0f:8a:f2:0a:a1:fe:42:38:f8:
59:2c:6e:28:c4:41:c8:5b:98:f1:f0:a1:c4:73:db:71:85:a6:
5f:7a:6f:cc:9d:52:5d:2e:99:80:6b:c8:ee:6d:55:42:8c:4e:
7a:d7:ff:e6:b4:4b:79:9c:f5:75:d4:a7:f1:3f:da:b8:dd:a4:
f5:62:7a:07:5b:7c:44:7b:a4:62:d1:4d:d3:c3:21:e8:a5:15:
59:fb:7e:1f:15:6e:75:05:89:bd:3c:8f:c0:15:2a:f6:74:f6:
9e:16:e0:d4:ee:88:ce:b8:ac:3b:ef:32:10:6b:5e:cb:cf:97:
75:02:3a:0b:5a:6a:2e:5c:56:48:cd:b7:d6:be:08:4e:cd:9a:
c8:ab:43:78:aa:c8:52:a5:45:68:a9:38:a7:ca:ae:fe:78:0f:
1d:3b:85:27:17:bc:97:2e:93:36:f6:8b:a7:f7:f4:a7:33:06:
f6:1b:6b:d2:06:aa:c6:6f:ed:fe:a2:b9:e9:c8:b6:4f:7e:a6:
4c:6c:ce:8c:75:c9:e5:3f:2f:ab:d5:d5:2a:53:4b:97:cc:31:
53:06:81:12:cb:b1:a4:da:07:12:09:7c:62:d1:06:92:8b:56:
d8:96:b9:ea:44:84:a1:3d:57:73:3a:96:7b:f5:ad:aa:79:85:
8c:f5:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:19 2025 by rpki-client