Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/w-hxpgpXYbiCIx5pjmKJ50BebUg.roa
File: w-hxpgpXYbiCIx5pjmKJ50BebUg.roa (raw, json)
Hash identifier: 4ostjzQ/RD4IQE6eD+V8soEDYxSXTEg+4Y0R41tUjJE=
Subject key identifier: C3:E8:71:A6:0A:57:61:B8:82:23:1E:69:8E:62:89:E7:40:5E:6D:48
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 04B1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w-hxpgpXYbiCIx5pjmKJ50BebUg.roa
Signing time: Thu 29 Feb 2024 01:29:06 +0000
ROA not before: Thu 29 Feb 2024 01:29:06 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201 (0x4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Feb 29 01:29:06 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=C3E871A60A5761B882231E698E6289E7405E6D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:b6:6a:d1:cf:89:ca:e8:b2:4a:9d:6b:a8:
f7:78:ff:9b:5b:68:94:49:3d:df:49:04:08:57:f4:
86:04:a2:7b:0c:1e:bc:b2:ae:37:13:44:99:93:2d:
a4:6d:72:ad:bc:a9:a6:d6:98:49:b9:68:3c:b9:85:
e4:14:17:c4:ee:f7:b2:bc:15:68:24:35:10:05:48:
e2:99:d6:39:1e:81:f7:4b:1c:02:ee:96:86:0e:76:
81:04:fd:cc:37:f2:b4:ee:a0:c7:7c:68:68:a3:0e:
90:d2:4d:c7:1c:d4:f7:32:4e:1d:0f:d0:51:2b:a9:
57:25:19:16:be:75:19:45:f0:92:ea:c4:3a:e0:67:
ad:d5:00:d1:6f:9b:e0:00:97:77:71:d0:c0:d9:4f:
cb:9a:89:54:82:8c:c7:c7:56:54:40:1d:f7:e9:ed:
e3:93:7b:95:85:c7:4a:c5:02:e1:78:c9:76:61:e0:
88:2e:28:26:df:53:db:0e:43:4e:bf:f0:d0:1c:fa:
aa:84:26:27:36:41:33:33:5e:9d:a4:dc:f6:36:35:
1b:e4:d3:29:9b:3b:db:22:0f:65:f4:bf:ad:19:6d:
ff:83:c6:c7:dc:92:e4:81:49:7e:c6:cc:b9:6b:ac:
15:10:ad:3b:98:89:76:81:85:f8:f3:d5:eb:34:46:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:71:A6:0A:57:61:B8:82:23:1E:69:8E:62:89:E7:40:5E:6D:48
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w-hxpgpXYbiCIx5pjmKJ50BebUg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1c:47:09:fa:e9:06:56:31:a1:e7:4b:05:63:27:2f:c7:46:
07:13:4b:d1:e1:f2:67:61:47:66:e5:77:27:c1:68:3a:11:2e:
ee:7e:4b:59:88:c3:ab:97:5e:e8:60:16:79:d4:4d:16:ae:b1:
1b:c8:78:15:cf:45:e8:de:3f:9d:14:50:0f:54:7e:6a:25:ea:
8b:00:d1:c3:e1:17:2a:75:5f:8f:ef:fa:e5:6d:82:86:b5:a3:
85:ce:29:5e:68:23:a2:b1:32:0b:a6:08:fc:88:69:b0:d1:61:
2d:c4:4c:e8:63:07:b3:d8:57:e7:c3:df:77:71:32:e9:cd:a9:
10:cd:1e:99:55:9a:28:6b:ab:9b:c5:b3:83:8c:69:3a:9b:c5:
49:d0:da:82:be:4e:3a:d0:dc:9c:8c:17:2f:6c:ff:c6:bf:7c:
00:70:43:d2:98:ab:fe:10:0f:1e:82:d7:77:ab:f5:62:92:57:
82:2b:36:6e:54:28:eb:32:43:ed:bb:9d:93:fb:77:35:5b:e5:
f7:57:ee:61:ff:3a:7e:16:e4:87:41:45:e1:9e:73:69:5f:a2:
f3:4c:a5:fb:cd:05:06:a9:35:aa:d3:c2:07:bf:40:13:ad:55:
6e:1b:bf:86:2c:83:4c:64:67:3e:28:4a:63:0f:33:de:6d:7a:
d5:66:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:55 2025 by rpki-client