Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/SNGktOoq4PacmA087YugNpJ7EQ4.roa
File: SNGktOoq4PacmA087YugNpJ7EQ4.roa (raw, json)
Hash identifier: eLEM6V63jADBDxl694iTN+Y2K2hpBS+2+LCyeTNZKds=
Subject key identifier: 48:D1:A4:B4:EA:2A:E0:F6:9C:98:0D:3C:ED:8B:A0:36:92:7B:11:0E
Certificate issuer: /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial: 04
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/SNGktOoq4PacmA087YugNpJ7EQ4.roa
Signing time: Wed 14 Feb 2024 08:14:57 +0000
ROA not before: Wed 14 Feb 2024 08:14:57 +0000
ROA not after: Thu 13 Feb 2025 03:32:11 +0000
asID: 23630
IP address blocks: 133.32.112.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
Validity
Not Before: Feb 14 08:14:57 2024 GMT
Not After : Feb 13 03:32:11 2025 GMT
Subject: CN=48D1A4B4EA2AE0F69C980D3CED8BA036927B110E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:07:0a:c1:d1:d1:9f:8a:20:ff:37:30:50:
b9:32:e8:e1:ca:cc:2e:02:32:97:b5:69:bf:7f:de:
9d:80:68:84:cb:7f:04:3b:03:2b:cb:5f:4e:5c:0d:
51:5e:48:4c:c9:f0:f5:8d:ee:2c:b1:d6:25:05:d6:
35:25:b1:09:e8:7a:26:2c:1e:11:25:42:e7:6d:c2:
1e:15:f6:b9:88:ad:07:ef:68:e1:12:b9:64:ff:fb:
04:a2:b1:72:af:cd:fb:51:d2:d2:04:de:a0:80:6a:
f2:43:e9:03:e3:fc:cd:16:b4:29:41:e4:0c:76:15:
b5:92:f6:31:71:b0:0a:82:16:51:87:bf:be:74:32:
f6:34:07:96:8c:32:b4:1a:cc:01:d8:04:ce:f1:99:
e9:dd:8b:45:bd:f2:8e:b0:17:43:9b:04:ab:03:ec:
98:12:98:04:9b:c7:27:0e:9e:6b:ca:0c:23:5b:6d:
15:ff:86:2e:25:ba:5d:cd:ff:c2:21:ca:66:52:5d:
31:4b:89:33:35:62:72:14:c9:83:b4:d2:59:d7:89:
c9:94:ea:7e:86:f6:d7:de:62:6b:61:36:0f:43:de:
f6:08:42:31:e7:8a:c7:cf:49:eb:5d:a0:5d:7c:48:
56:db:20:a4:5e:e9:c5:a1:6c:b5:80:49:2c:3c:36:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:A4:B4:EA:2A:E0:F6:9C:98:0D:3C:ED:8B:A0:36:92:7B:11:0E
X509v3 Authority Key Identifier:
keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/SNGktOoq4PacmA087YugNpJ7EQ4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.32.112.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:67:d1:27:2d:c2:e1:7b:11:65:a5:b6:4a:ee:d8:9e:af:12:
b6:12:2d:3c:4a:4f:28:cc:70:e0:18:6d:6e:bc:00:1b:4e:41:
82:8b:15:0e:87:23:5e:e6:d7:e7:4b:a4:44:7f:f6:89:a5:83:
20:65:e3:d4:97:62:a7:bb:d4:0d:8f:f2:cd:04:b7:99:3c:26:
16:31:df:1f:26:e7:1a:5f:86:02:c6:a9:18:5e:a4:4f:58:92:
dd:9e:1a:98:16:5b:ce:c9:39:ec:78:1e:ae:8f:aa:8b:e3:ca:
82:45:ec:22:eb:ea:55:51:fb:73:ee:db:fb:1d:f2:a5:87:8c:
98:4d:b0:6d:cf:b2:05:f1:38:a8:78:9c:5a:dc:25:df:b7:e1:
68:8b:13:bb:fb:da:0b:3b:52:f7:b1:01:0b:47:3b:78:32:eb:
89:1d:76:a6:69:3c:9b:40:30:40:92:e7:f5:73:48:80:38:6b:
6f:1c:85:18:28:07:b6:b8:b6:6c:bb:f7:cd:2e:b9:4c:33:34:
3b:a2:d6:4e:5b:20:cf:a7:3a:38:f3:f3:68:bd:60:45:e0:cb:
93:81:3f:08:4d:fd:e6:9d:8c:cb:12:89:ec:c5:17:fa:c1:5c:
fd:8f:1c:81:03:e4:af:c8:af:1b:e7:6e:bc:e7:ca:e1:92:39:
1f:b4:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:40 2025 by rpki-client