Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6l63IICJa5yZfkpXzJAd3bwmj0U.roa
File: 6l63IICJa5yZfkpXzJAd3bwmj0U.roa (raw, json)
Hash identifier: blCaK1NlJHSEuBm31jpLFaj3DW75vzFX7DV9X+MEQ+M=
Subject key identifier: EA:5E:B7:20:80:89:6B:9C:99:7E:4A:57:CC:90:1D:DD:BC:26:8F:45
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0101
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6l63IICJa5yZfkpXzJAd3bwmj0U.roa
Signing time: Sat 01 Jan 2022 01:31:15 +0000
ROA not before: Sat 01 Jan 2022 01:31:15 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:15 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=EA5EB72080896B9C997E4A57CC901DDDBC268F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:f1:32:a2:56:87:22:99:fa:ab:82:48:0f:
3b:dd:fe:d8:bc:ae:cd:fc:8a:1e:e9:c1:b3:41:a0:
f3:1d:d2:39:a1:c7:60:ec:b0:f1:fc:8e:84:5d:48:
7a:19:f7:b3:01:1a:31:d6:cb:ca:ea:0c:a2:a0:2f:
c0:a7:cb:df:e3:a9:d1:35:af:1b:bd:41:88:aa:d1:
f9:4e:9e:9c:ec:a8:fc:b3:a7:1c:6b:61:db:d7:e4:
57:ad:03:51:de:00:17:81:7c:ae:4b:ec:b4:60:f7:
78:31:13:90:fa:00:dd:e4:00:67:93:f5:5d:1e:57:
2f:be:4f:3f:89:a9:04:f0:f5:82:b4:ea:e3:89:99:
fc:9e:35:3d:6e:e7:96:14:9a:70:dc:7c:e3:ff:f2:
ea:0f:31:a9:c6:84:25:ae:c6:62:25:59:e4:0f:90:
29:c3:17:4c:ee:cd:c5:32:4c:5a:1c:eb:f1:2c:a9:
a0:e5:24:80:98:0f:f5:e1:a7:21:44:dd:1a:62:fa:
09:a5:b4:73:c2:45:8d:ec:27:dc:f0:31:17:af:09:
31:d6:47:c8:38:29:c6:7a:e6:92:2c:ed:d9:9d:a8:
b6:ca:15:27:bf:5b:58:f0:46:be:0b:c9:50:29:fd:
e9:e3:e3:dc:bf:c6:25:f2:8f:92:8b:93:a5:ff:44:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:B7:20:80:89:6B:9C:99:7E:4A:57:CC:90:1D:DD:BC:26:8F:45
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/6l63IICJa5yZfkpXzJAd3bwmj0U.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.239.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ec:42:0b:e2:40:0b:9d:48:10:85:0a:16:9a:d0:c3:2e:fd:
77:96:b1:25:8c:20:12:47:c9:43:c4:e8:de:35:49:5e:4d:96:
72:45:70:e2:21:46:17:4c:76:16:85:e8:89:7e:53:db:99:0a:
fe:8b:30:de:be:71:b2:5c:98:23:93:d4:c9:81:3e:25:38:dc:
8c:e0:8e:48:f9:e4:3f:74:c1:fd:10:bb:1f:6a:6e:d9:68:43:
16:53:21:bf:c7:f2:01:43:8d:13:62:c9:4b:59:3a:7e:00:50:
d6:15:f1:b9:a6:3b:13:02:0f:66:bc:1b:ad:84:38:d7:c9:e9:
a1:c5:30:10:e3:8a:5b:5e:21:b6:1d:60:cf:80:32:b2:4c:5d:
06:7b:fb:71:9c:19:83:1f:d5:5f:45:0e:41:87:84:69:c2:01:
0e:b8:d6:09:c0:7c:68:4e:55:26:f0:27:ba:a6:e9:ea:e9:3f:
0e:ab:2e:59:ae:73:31:8f:b0:6f:b7:14:46:bf:86:f2:59:b3:
7c:d1:36:34:8b:fe:cd:7f:89:83:57:aa:f9:f2:82:2f:1d:3c:
15:4a:b7:d7:df:a4:8e:55:7c:23:36:9f:c9:4b:12:1a:35:54:
c4:49:c3:e6:9c:88:16:a0:7b:7f:b3:1b:af:89:cb:82:f1:01:
52:27:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:48 2025 by rpki-client