Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8aCXMFGXRAHauOsBNtcQxMB8NfU.roa
File: 8aCXMFGXRAHauOsBNtcQxMB8NfU.roa (raw, json)
Hash identifier: qLhvcsZBVBSs6s4JQbYaXHfAwrSDTX7onHYgret32TM=
Subject key identifier: F1:A0:97:30:51:97:44:01:DA:B8:EB:01:36:D7:10:C4:C0:7C:35:F5
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0153
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8aCXMFGXRAHauOsBNtcQxMB8NfU.roa
Signing time: Tue 01 Nov 2022 06:55:29 +0000
ROA not before: Tue 01 Nov 2022 06:55:29 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 9371
IP address blocks: 133.167.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Nov 1 06:55:29 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=F1A0973051974401DAB8EB0136D710C4C07C35F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:12:40:4c:9c:f2:d5:6f:a3:a7:85:33:df:
ec:44:b7:66:ea:af:94:41:13:bd:15:13:a0:95:ed:
c3:2d:04:2e:da:38:8d:5f:3b:0f:05:88:8d:29:85:
93:72:0d:b4:8b:92:65:b6:f3:1c:19:9c:19:32:d2:
1d:ac:f8:ab:d2:ad:0d:ce:77:39:18:c7:af:57:bb:
7c:b2:0d:ea:fa:9d:47:e8:09:31:25:2b:e9:31:99:
c0:ce:e5:95:e1:6f:d3:d9:4d:a5:ac:fe:cf:3b:d7:
3c:39:d0:a2:40:a9:4d:38:4a:58:7c:24:61:8d:17:
3e:8b:a4:07:44:a4:32:df:64:c6:6b:29:07:c1:48:
ba:a9:05:2b:ff:ca:d7:4d:b5:98:c3:c0:39:05:69:
f2:a4:31:32:3e:f7:36:ac:49:62:e3:bd:8c:84:07:
97:33:99:b6:d2:40:3d:11:a8:e2:63:44:62:a3:75:
b2:3d:62:82:77:29:13:8e:79:61:5a:98:c1:ac:70:
48:04:6b:50:b4:99:56:ca:1f:1e:f8:1b:27:45:d7:
fc:8a:db:e0:d2:07:53:b3:d0:d0:71:f7:0a:0f:d9:
72:7f:13:c0:ad:d0:fb:a4:10:93:50:1d:9e:5c:4a:
5b:0a:64:2c:05:63:55:8a:f6:2e:ea:43:2c:e9:7f:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:97:30:51:97:44:01:DA:B8:EB:01:36:D7:10:C4:C0:7C:35:F5
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8aCXMFGXRAHauOsBNtcQxMB8NfU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:e1:3d:2e:da:a2:f1:ef:48:2f:0a:dc:7b:d8:74:12:47:92:
00:8a:b4:60:d5:6c:35:2e:ad:1c:a7:d7:52:d1:9f:bf:f8:76:
55:28:a3:40:09:5d:db:83:55:ca:8a:2b:79:01:fb:2c:23:d6:
b9:5d:4f:f3:19:48:1c:b5:a9:77:e7:05:f1:ff:9d:9a:25:22:
6b:0e:2c:40:82:c3:63:26:bf:80:42:20:46:39:d3:0c:a4:9a:
01:c2:16:d3:af:38:7a:a6:dc:fb:50:ab:83:36:44:da:a3:34:
3d:5c:8f:5b:af:04:af:26:4c:9f:8e:d4:41:ed:02:d7:8d:fc:
fc:25:12:c6:9f:c0:a7:c0:c3:85:20:3d:92:88:fd:da:2a:39:
d0:56:d5:0b:3f:d6:bb:48:bf:18:96:e1:36:df:b1:dc:b7:2c:
18:66:84:59:34:c8:63:e9:79:6d:20:5b:12:51:d8:84:e9:1a:
ea:d8:a6:a9:7b:20:8a:71:ce:66:c8:94:95:62:c4:a4:73:41:
5c:40:60:37:50:45:81:61:cb:ef:71:ad:24:3e:29:3f:e2:b9:
28:4e:85:e4:84:92:cf:04:a1:e4:4b:9c:cb:76:5f:a7:91:be:
e4:d1:1b:c7:6e:dd:7a:1f:d9:eb:e6:30:c3:3d:f1:48:91:8f:
12:55:b5:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:06 2025 by rpki-client