Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OwitaclViWMZ3u5Wn1C06eQe9KY.roa
File: OwitaclViWMZ3u5Wn1C06eQe9KY.roa (raw, json)
Hash identifier: QIAyRwq6+XHfJupCi13GWyuDFewWwSmzDsTdpi1bm2g=
Subject key identifier: 3B:08:AD:69:C9:55:89:63:19:DE:EE:56:9F:50:B4:E9:E4:1E:F4:A6
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01C2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OwitaclViWMZ3u5Wn1C06eQe9KY.roa
Signing time: Fri 07 Jul 2023 04:14:42 +0000
ROA not before: Fri 07 Jul 2023 04:14:42 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 153.120.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:14:42 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=3B08AD69C955896319DEEE569F50B4E9E41EF4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:d6:89:17:46:14:67:b7:9d:de:eb:b5:86:
9b:97:57:6a:63:d9:31:28:82:61:c3:da:45:a0:72:
cd:8d:c4:d7:0a:ea:e3:f1:ae:27:60:c3:10:58:85:
ec:c9:e5:8c:e8:ff:3a:78:49:57:89:8f:25:c1:95:
56:c4:17:44:41:b7:b2:e8:13:0f:be:dd:98:b8:15:
92:24:65:2d:20:cd:9c:3d:f4:e2:01:e2:17:b7:19:
59:69:1a:6d:6d:c1:02:75:b0:e6:2d:55:86:85:53:
05:30:f7:0d:32:a3:b3:6d:ed:90:62:8d:e3:e2:38:
6e:11:27:be:55:71:00:69:54:9d:4d:f6:89:0b:60:
e6:3c:b1:5f:fc:f3:65:b4:a5:56:4e:86:71:8d:85:
3a:57:8e:7b:ae:35:15:97:d4:1c:7a:26:39:22:b3:
bf:37:d9:55:8c:4e:ce:4f:b7:b9:6c:a8:16:56:3d:
31:9c:72:1d:2c:e8:da:e8:35:0b:d9:4c:4f:29:0c:
3c:2a:6c:9a:c6:70:ef:16:ab:72:17:1f:0a:f0:e0:
49:30:9a:ba:df:76:24:82:46:0d:ba:57:0f:bb:2e:
c6:84:d9:93:44:66:73:f7:03:0d:a4:6d:05:8b:78:
9b:d3:13:b5:79:56:c2:d7:37:9a:d7:b1:4f:83:f4:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:AD:69:C9:55:89:63:19:DE:EE:56:9F:50:B4:E9:E4:1E:F4:A6
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OwitaclViWMZ3u5Wn1C06eQe9KY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.120.216.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:3c:57:f5:6d:a1:97:5a:f1:b0:7f:0e:dc:dd:78:dc:6e:be:
c7:8b:d1:1c:8e:7f:2f:b9:f6:3b:e9:7c:91:a3:f5:a7:85:00:
c3:3d:d4:00:a0:a6:78:31:01:5a:2c:bc:23:24:ff:ac:62:bf:
f8:b8:04:c1:55:5a:2c:29:69:50:19:9c:59:35:fa:48:8e:59:
2d:c5:9a:fe:59:f7:5a:4f:64:0c:e1:bc:41:1a:42:75:e7:65:
c4:e7:a3:32:84:31:1f:30:45:85:86:71:23:bf:c3:71:7b:86:
4a:e0:72:10:21:61:28:9b:e7:9b:98:3c:2b:32:8f:34:b5:61:
ae:f2:c8:08:f0:0f:c8:d9:d1:99:d8:d0:2a:cf:e8:10:1f:3c:
61:a3:db:dc:d2:78:e3:c1:ad:7d:3b:33:ac:d5:7a:a3:8d:d5:
30:33:4f:57:19:06:3f:9c:93:7c:72:48:28:1c:c5:97:c8:04:
d7:7b:99:85:a3:f1:df:ae:73:ff:c9:00:04:6d:b8:bf:3c:25:
78:28:d2:ce:1d:fa:33:21:72:7b:29:21:a7:29:41:a5:b9:69:
fa:b7:a4:68:dc:47:78:cc:36:43:b0:04:0f:8f:0a:e3:9c:e2:
e1:57:d3:3e:c9:19:cf:a2:9d:c2:e7:ec:37:e2:c7:fa:04:7e:
6a:b9:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:24 2025 by rpki-client