Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BS7YxdL4tVHKRcWkl-V8RTzXmV4.roa
File: BS7YxdL4tVHKRcWkl-V8RTzXmV4.roa (raw, json)
Hash identifier: x+HeQETbiF9tysN3QP16lnbeHYwjSTw8WVP0squKArw=
Subject key identifier: 05:2E:D8:C5:D2:F8:B5:51:CA:45:C5:A4:97:E5:7C:45:3C:D7:99:5E
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0148
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BS7YxdL4tVHKRcWkl-V8RTzXmV4.roa
Signing time: Thu 01 Sep 2022 01:28:30 +0000
ROA not before: Thu 01 Sep 2022 01:28:30 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 7684
IP address blocks: 49.212.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 1 01:28:30 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=052ED8C5D2F8B551CA45C5A497E57C453CD7995E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:b0:01:f8:ef:db:0b:ab:9b:cb:f7:38:4f:
f5:57:ee:93:74:1a:0c:9d:44:19:dd:cd:9f:c8:33:
c1:74:ce:d3:6b:e2:99:65:39:c5:60:29:84:31:a2:
23:e3:48:4a:ba:fb:27:b7:ae:2a:dc:1f:3a:98:c1:
3b:fc:c8:ec:e6:d8:17:24:d3:b9:31:a7:95:f1:98:
a1:8f:ab:57:3d:69:45:86:70:1e:f1:92:6b:62:1d:
ee:dd:e7:c4:60:47:de:8d:75:56:7e:55:30:dc:cf:
91:f6:3f:ee:3b:1d:1d:4d:08:c9:2e:50:03:82:ac:
43:9a:e4:33:cf:a9:46:9c:f3:28:57:85:c7:04:9b:
c1:f2:26:30:c5:91:99:87:02:28:c8:31:c0:36:d6:
96:6d:16:95:13:8e:09:62:33:77:da:9e:25:d4:d8:
84:bd:96:47:42:72:24:18:36:e2:78:2a:19:ce:26:
e6:2f:53:6f:0c:37:33:e9:35:a7:c1:a9:93:7b:72:
50:e7:24:da:7f:70:3e:5f:af:c1:3e:85:16:89:68:
8d:17:2c:2f:00:75:99:40:91:a1:20:f6:69:ef:e7:
7b:20:e6:f3:53:68:7f:8e:d5:e4:f3:6c:97:cc:a2:
64:80:bb:86:b6:cd:f8:11:bd:90:2c:8b:cd:0a:6d:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:D8:C5:D2:F8:B5:51:CA:45:C5:A4:97:E5:7C:45:3C:D7:99:5E
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BS7YxdL4tVHKRcWkl-V8RTzXmV4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.233.0/24
Signature Algorithm: sha256WithRSAEncryption
65:91:d0:da:3e:71:cc:01:62:b6:a0:6a:b2:ea:66:05:e7:b1:
c6:31:ae:6c:cb:62:33:d5:3b:f7:d6:e4:9d:40:47:fd:5d:1b:
da:be:ab:8a:b1:26:65:bb:be:54:9e:43:86:f7:ee:e0:00:5f:
ec:f6:98:07:5f:6c:65:7c:b6:f3:52:d5:93:e0:4e:93:20:40:
4a:e6:e7:d2:bb:ec:8d:3f:76:c3:25:7a:6a:fa:8e:94:a2:94:
90:e7:91:84:9f:a8:c4:55:cc:4f:de:a0:0c:af:43:c7:ca:ed:
c1:8d:e9:0d:e5:06:46:de:b2:70:42:5c:c3:28:da:dc:1a:ea:
b9:07:bd:c4:f0:82:07:d4:64:cc:00:e7:08:94:c3:01:0f:b6:
21:b6:3d:dc:cb:92:ff:c6:2c:8b:39:bb:f3:d3:28:2d:cf:61:
df:f0:5b:4a:76:6e:79:0c:3c:5b:76:e8:0d:24:6e:2d:c5:5e:
12:28:d8:46:a2:67:a0:22:f7:50:40:99:a4:7d:0e:f8:24:e1:
45:aa:bf:f0:f8:d9:c7:bd:9a:b7:ba:5a:65:2a:9d:a9:4b:11:
d7:9b:c6:fe:c3:b1:5e:fd:d5:da:5a:40:34:b6:02:8e:d3:2e:
d4:bc:81:e3:15:df:af:94:8b:97:e3:c7:4d:60:fd:b5:69:e0:
18:dd:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:34 2025 by rpki-client