Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RUumPNfkW5G15H8zMxC51SGlUc.roa
File: _RUumPNfkW5G15H8zMxC51SGlUc.roa (raw, json)
Hash identifier: Bm73WkaROAv3g6oBA+nMertX671ofPzDj05gY6x8cBw=
Subject key identifier: FD:15:2E:98:F3:5F:91:6E:46:D7:91:FC:CC:CC:42:E7:54:86:95:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0579
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RUumPNfkW5G15H8zMxC51SGlUc.roa
Signing time: Thu 27 Jul 2023 16:58:07 +0000
ROA not before: Thu 27 Jul 2023 16:58:07 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 110.158.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:58:07 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=FD152E98F35F916E46D791FCCCCC42E754869547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:05:64:53:4e:a5:7e:c0:cd:4b:c0:50:fb:
b5:47:c7:a2:cc:39:58:21:66:45:21:42:c1:fd:e1:
23:92:ca:f0:13:2e:fe:79:d7:57:19:62:c4:3d:79:
51:fd:83:eb:95:86:f5:bf:56:88:ef:89:76:95:60:
45:92:c1:a3:7d:cd:b0:6c:d4:95:ee:6a:40:a0:c9:
b0:b5:41:9a:e6:d4:7f:d5:07:26:e1:85:3b:f8:bc:
45:3b:16:d7:47:bb:db:4b:e0:ab:9b:a7:45:89:4e:
f7:78:08:00:5b:ca:97:0f:f8:3b:c7:93:3a:e0:d0:
05:72:91:5f:90:29:c2:0e:9c:56:96:46:ba:c7:b4:
7a:a5:53:8a:9e:72:85:0d:a3:07:07:72:f7:01:7d:
53:ad:4d:93:a4:79:dc:40:71:c5:be:f4:66:e4:1b:
b3:6c:7b:c4:2f:f0:f2:16:e0:ff:32:9b:a2:b1:29:
6d:a5:4d:c2:da:97:21:ce:3a:ac:0e:46:e3:46:fd:
93:a0:8a:5d:03:5b:cf:0d:c0:79:f8:b7:0b:15:95:
52:55:b1:28:63:80:b4:c5:a0:ea:f8:e9:91:a4:4f:
cc:09:c5:ff:bd:6a:02:6c:d0:7d:96:ab:cf:8c:9d:
94:73:1c:75:3f:15:d9:7d:96:fb:3c:5f:35:31:f4:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:15:2E:98:F3:5F:91:6E:46:D7:91:FC:CC:CC:42:E7:54:86:95:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_RUumPNfkW5G15H8zMxC51SGlUc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.158.152.0/21
Signature Algorithm: sha256WithRSAEncryption
46:7b:71:a1:a0:d4:84:43:0e:ab:d8:94:46:fc:9e:8d:c2:7d:
40:81:1f:ea:43:dc:1c:88:79:5e:64:8b:90:3e:50:60:01:e5:
c7:2b:2b:a0:25:c8:68:ce:84:0e:b9:6e:ee:d9:6a:b0:21:fb:
98:85:7a:b2:f6:86:8d:7c:c6:b1:0c:91:aa:11:16:12:0e:9b:
47:12:5d:a2:8d:8b:3d:d8:dd:63:a3:9f:7f:87:d6:93:f5:dc:
02:65:33:31:52:3f:7c:f6:53:9a:c6:4a:ab:88:5c:b8:46:f5:
a4:ef:b7:46:b7:cc:1e:24:65:9c:28:17:53:17:d6:cc:01:fe:
0e:01:50:65:3c:fd:65:42:5b:12:b1:b8:de:d0:85:e0:d9:3e:
63:89:a0:3a:fa:e6:77:46:f8:37:71:8d:9b:48:62:5d:3c:78:
e3:90:02:e8:13:64:62:68:13:14:d4:ba:06:77:ad:ad:74:a7:
66:07:fb:e0:00:63:a1:92:a3:24:98:70:d3:62:2c:77:24:5c:
00:e1:63:d6:32:08:84:a0:13:d0:59:1a:58:89:0c:5e:4c:d0:
26:eb:de:88:47:5c:dd:d4:70:c0:ca:08:8a:7e:a4:15:bc:70:
f1:f5:77:bc:86:25:a8:a1:85:c0:3e:8f:c2:44:25:5c:f2:d4:
fe:21:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:03 2025 by rpki-client