Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S3q7QNrEzsEhwHFaosuSUrR0lQo.roa
File: S3q7QNrEzsEhwHFaosuSUrR0lQo.roa (raw, json)
Hash identifier: QvdsSHwFFoMbxYjh8u5oVB0QF07Oqjjin5qtTUP0tU4=
Subject key identifier: 4B:7A:BB:40:DA:C4:CE:C1:21:C0:71:5A:A2:CB:92:52:B4:74:95:0A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04A7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S3q7QNrEzsEhwHFaosuSUrR0lQo.roa
Signing time: Thu 27 Jul 2023 16:46:14 +0000
ROA not before: Thu 27 Jul 2023 16:46:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:46:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=4B7ABB40DAC4CEC121C0715AA2CB9252B474950A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:b0:cf:e9:4b:5a:c8:2b:be:64:b2:b2:e2:
ab:33:29:72:43:c3:b6:79:55:31:71:a0:77:5f:84:
92:a0:e3:5b:03:68:b3:27:11:d2:85:9c:54:f9:e8:
aa:d2:4f:44:ee:ea:e0:f9:7e:20:39:52:21:1f:a9:
21:64:99:4a:1e:27:d6:84:d4:62:ec:a1:b2:41:05:
d3:e1:f2:2d:42:dd:84:04:39:97:ca:5e:f9:46:9f:
da:3a:65:8c:99:a1:73:c2:be:2e:df:b5:15:27:66:
0e:b5:cd:86:a3:b9:f2:c2:b2:89:73:c7:a6:0b:8e:
a6:2d:73:b1:64:2e:6e:4c:77:31:50:45:48:a6:b8:
a1:83:6f:e5:a6:d2:aa:f1:32:ac:d2:67:b8:0f:40:
77:8f:d1:1c:b9:22:57:f1:c4:27:7d:4b:bb:87:d4:
5a:73:67:4e:6b:92:55:54:42:6d:48:59:16:6c:38:
fa:97:b7:3d:6f:12:41:d7:cb:3a:c5:ab:2b:bb:74:
41:77:de:04:cf:c0:90:0c:b8:93:f2:73:d3:fd:ba:
c6:b7:94:2b:4a:05:09:8c:70:fa:1c:01:7b:dc:94:
47:ad:9b:05:f5:ee:2f:07:a4:ff:ff:a6:29:6e:40:
6b:2e:43:d9:de:76:8f:0e:ca:30:24:c5:f1:74:52:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7A:BB:40:DA:C4:CE:C1:21:C0:71:5A:A2:CB:92:52:B4:74:95:0A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S3q7QNrEzsEhwHFaosuSUrR0lQo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:0e:cf:20:86:6b:ea:1f:9f:a9:3b:f4:5c:de:d0:07:96:d8:
98:c2:82:f7:05:bb:3b:fa:11:a5:b2:09:49:09:95:8c:5e:6a:
d2:19:3d:96:a7:b9:6d:d1:c2:9e:03:18:8a:dd:73:44:0a:15:
d3:bc:78:70:a8:cb:e1:fd:52:4c:5b:b0:62:45:6a:14:5b:0c:
32:75:7d:cd:95:bf:c4:f7:22:c5:ff:36:d9:c7:bd:1c:be:a4:
71:7a:f9:b8:90:0c:17:d7:0b:a1:39:9e:b8:1d:06:5c:af:2d:
17:09:5d:39:84:8c:6c:0e:57:20:c8:09:e3:ac:70:10:e2:22:
97:ea:da:f6:8e:f3:ae:54:0a:ad:30:f0:9b:5d:a4:2e:4b:a0:
b3:dc:1c:c7:e4:ab:46:d0:05:fc:57:68:3f:91:e5:9b:e4:3c:
e2:d0:fe:68:a1:86:59:91:47:58:12:ba:35:f4:fe:78:67:ef:
47:8a:7d:df:e7:8a:4d:b8:a9:74:e2:9b:9e:e8:74:73:43:0a:
69:6c:8c:0c:41:4b:6b:6f:bd:3a:a0:86:c2:4f:16:42:0f:4f:
3f:17:85:58:a8:19:43:4e:ce:25:88:dc:84:26:58:0d:3f:80:
4c:fa:52:af:6a:c8:33:48:7b:8b:95:31:bc:22:81:c0:3f:a3:
23:51:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:49 2025 by rpki-client