Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4M6c5yFbpRHRA9e5IXQxQxmflVE.roa
File: 4M6c5yFbpRHRA9e5IXQxQxmflVE.roa (raw, json)
Hash identifier: 6nDqjeS7/KwXM/FVYeb4VJ/Kr5j4RGRYzoPzqj3m6HY=
Subject key identifier: E0:CE:9C:E7:21:5B:A5:11:D1:03:D7:B9:21:74:31:43:19:9F:95:51
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 1E
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4M6c5yFbpRHRA9e5IXQxQxmflVE.roa
Signing time: Tue 23 Feb 2021 08:57:34 +0000
ROA not before: Tue 23 Feb 2021 08:57:34 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 147.192.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:34 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=E0CE9CE7215BA511D103D7B921743143199F9551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:63:f3:bd:f6:ef:52:57:d9:74:6d:a7:32:
c9:ee:85:ff:da:01:12:bc:be:13:3b:c6:19:70:2c:
d9:45:5d:27:ba:8f:85:b5:29:bf:df:1f:1a:3a:54:
f4:bf:da:1d:74:af:64:23:de:4b:66:ec:db:94:62:
bd:4b:44:90:f5:09:26:57:29:b5:0b:d5:cd:5b:c1:
c8:d8:7a:2f:4f:15:83:20:07:79:97:3e:b7:e9:92:
b2:0d:f0:08:4a:d1:96:be:e8:92:bd:24:7d:9f:4c:
26:ca:92:d7:ae:a3:c2:4a:2f:56:33:be:25:dc:89:
31:b4:da:5d:fe:81:b5:68:08:d6:cc:22:c8:60:b2:
cd:77:64:fb:81:9e:4e:7e:c0:50:21:a8:ff:7c:e4:
6f:44:0b:97:ce:93:07:0b:ad:53:4f:d8:67:5f:2e:
af:90:2e:5a:0d:1a:3c:40:9d:72:82:41:78:e5:29:
c9:c7:4e:0e:60:fc:90:bf:19:9a:be:44:3e:c9:31:
1d:e2:e5:73:39:e1:8e:4c:ef:12:b4:8d:9e:05:3c:
4d:de:3d:86:e0:9f:6a:bf:46:f0:a0:e5:91:73:51:
18:12:fc:53:7f:08:de:64:95:6c:92:32:3a:12:76:
06:bc:f1:e8:d0:a9:c1:a3:5e:4d:f6:99:b4:f3:24:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:9C:E7:21:5B:A5:11:D1:03:D7:B9:21:74:31:43:19:9F:95:51
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4M6c5yFbpRHRA9e5IXQxQxmflVE.roa
sbgp-ipAddrBlock: critical
IPv4:
147.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:b0:0c:c6:6a:fa:32:32:3d:33:50:8f:2a:f9:5e:c3:cb:3e:
0f:9b:e9:c5:d7:ea:fe:bc:67:2f:17:51:ce:a4:a8:6a:4c:ce:
9f:a8:98:b6:c5:0d:f8:8c:4b:0c:0c:ff:bf:44:b5:bc:5e:3e:
3e:8c:7e:eb:31:62:b7:86:3b:e1:98:e1:03:cc:aa:32:68:fa:
82:be:d7:05:84:11:0e:30:d7:1c:c2:3a:24:9c:89:75:2f:f0:
0a:3c:68:3e:81:91:4c:58:9f:02:fb:a7:22:ab:55:88:48:7a:
4c:0b:d9:30:20:b4:01:0d:7d:55:f6:08:9b:5e:6d:3f:6b:7b:
84:f8:f1:70:ce:2c:a7:67:e9:dc:c2:46:f3:ad:4c:50:28:a8:
2d:1f:09:9e:75:2a:fb:2c:c4:35:96:3e:a5:f5:ee:0c:26:89:
0f:33:22:08:f6:06:5d:ac:e9:63:aa:1f:cb:20:59:35:4d:06:
af:67:dd:66:89:3b:3f:12:5c:86:6f:6d:39:3c:ab:a8:78:50:
29:f4:4f:f1:fc:db:32:27:5d:3d:49:91:82:2d:ec:64:60:d5:
0b:e0:48:72:1e:8b:8f:fa:cb:88:62:6e:a6:8e:7c:90:07:20:
45:0e:7a:5f:be:22:d2:d9:89:b3:f0:36:6a:36:e9:99:34:43:
cf:3f:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:16:00 2025 by rpki-client