Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/OnorHcwwc-Uv1gq79s_irj1eVEs.roa
File: OnorHcwwc-Uv1gq79s_irj1eVEs.roa (raw, json)
Hash identifier: gt1bPIdBlsaYfxDbIZDT1SbAVsw9ODM6rFbgxD+UYlI=
Subject key identifier: 3A:7A:2B:1D:CC:30:73:E5:2F:D6:0A:BB:F6:CF:E2:AE:3D:5E:54:4B
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 07
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/OnorHcwwc-Uv1gq79s_irj1eVEs.roa
Signing time: Wed 20 Apr 2022 07:22:14 +0000
ROA not before: Wed 20 Apr 2022 07:22:14 +0000
ROA not after: Thu 20 Apr 2023 02:53:00 +0000
asID: 37908
IP address blocks: 122.128.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Apr 20 07:22:14 2022 GMT
Not After : Apr 20 02:53:00 2023 GMT
Subject: CN=3A7A2B1DCC3073E52FD60ABBF6CFE2AE3D5E544B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:74:f4:02:3b:7d:61:e3:b2:28:af:65:58:
30:e9:af:fe:90:75:53:4b:60:41:29:96:67:24:df:
86:32:5a:1f:51:24:19:b1:41:ba:ed:5f:83:a8:db:
82:15:23:16:0f:26:b8:15:84:2d:3b:e2:99:f5:d4:
24:be:90:39:1c:7d:f9:83:fc:73:93:ff:7b:9f:cc:
ef:24:d6:4d:1a:2b:f2:4c:b4:f1:9b:f4:8f:ed:96:
31:a9:cd:75:74:d4:6c:74:3a:c7:64:90:3c:78:8c:
a7:37:ad:28:46:5a:b0:83:3b:3e:f9:6d:e4:8b:df:
36:4f:83:7a:62:55:f1:0c:61:b9:a9:13:f8:e6:5d:
bc:46:e9:47:d2:76:6b:b4:ef:0b:14:f3:de:7b:e8:
99:ec:ec:7a:f7:98:df:58:2d:0b:87:f9:c6:0d:df:
2c:78:4b:be:f0:be:57:6f:0f:5a:a5:86:8d:4a:27:
e6:fa:69:72:7e:74:2a:73:50:a7:a2:96:54:b7:e6:
51:47:65:ad:42:45:c8:24:5e:03:37:0f:27:5d:bb:
56:67:40:07:c6:0e:6e:b8:7b:05:e4:67:7d:91:77:
c7:89:06:cd:2e:2c:8d:96:f5:28:ee:f6:71:f6:6a:
e8:ed:b5:02:0e:f8:1c:b2:31:30:a5:0d:cf:49:6c:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:2B:1D:CC:30:73:E5:2F:D6:0A:BB:F6:CF:E2:AE:3D:5E:54:4B
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/OnorHcwwc-Uv1gq79s_irj1eVEs.roa
sbgp-ipAddrBlock: critical
IPv4:
122.128.0.0/20
Signature Algorithm: sha256WithRSAEncryption
41:f3:0d:0b:14:61:ae:76:9d:7f:14:67:54:ad:00:77:2d:9b:
92:ee:71:3d:ac:c4:ff:58:89:f0:93:ba:e3:7e:b0:9e:22:f0:
b0:9f:f9:75:55:c0:9b:5f:f1:9e:d2:9a:01:b6:cd:b6:39:47:
a7:e5:65:99:7a:ee:a7:eb:5c:45:8d:c6:08:03:86:16:fe:c6:
2b:9b:13:d2:ee:46:fc:e4:fc:55:a1:a8:f5:6d:49:3a:cf:97:
31:3f:95:14:3b:b4:77:b5:93:75:3b:43:4b:5b:f3:43:82:5e:
2a:23:3b:7e:e2:d4:56:f7:e7:a1:55:80:51:62:72:8c:20:92:
7a:69:8d:05:56:2f:16:3d:41:2b:91:19:d0:be:1d:2e:9a:35:
3d:8c:b5:d0:0a:95:7a:14:c8:1c:d9:4c:e2:de:33:75:8f:95:
81:75:35:18:b3:df:bc:9b:75:38:1e:8e:ba:9b:27:75:68:8a:
8e:34:ba:3b:18:74:32:77:ad:c3:1c:3e:40:e7:b4:ef:a2:87:
ec:d3:27:22:c4:f0:ca:f8:80:53:0c:67:55:0c:59:c7:d2:2b:
95:db:0d:b2:1c:a7:2e:02:75:bf:d1:88:8b:c3:54:ba:37:7c:
f4:87:fd:98:99:a7:40:e8:35:80:44:df:c6:65:03:e4:5e:22:
79:ea:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:58:06 2025 by rpki-client