Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Pj_yFTikUDRMAAyAv23FfuKkFw0.roa
File: Pj_yFTikUDRMAAyAv23FfuKkFw0.roa (raw, json)
Hash identifier: Tj044ZG1tx2i5oJcnaod2vjj/BsFcSRJL2fCCUjM14E=
Subject key identifier: 3E:3F:F2:15:38:A4:50:34:4C:00:0C:80:BF:6D:C5:7E:E2:A4:17:0D
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0116
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Pj_yFTikUDRMAAyAv23FfuKkFw0.roa
Signing time: Sat 01 Jan 2022 01:31:22 +0000
ROA not before: Sat 01 Jan 2022 01:31:22 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:22 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=3E3FF21538A450344C000C80BF6DC57EE2A4170D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:39:ad:cb:f0:37:2e:8b:6f:81:f2:60:bc:
c3:5b:b1:07:08:f4:c6:af:ee:e8:cf:c6:06:c5:52:
b6:e8:71:63:59:91:63:8f:15:c6:a4:1f:35:31:67:
4e:ac:36:42:a0:cc:2d:42:88:43:8e:6f:be:bf:39:
87:d0:c9:8a:38:eb:2e:f6:48:be:7b:21:ed:51:72:
53:e0:c8:03:64:83:ef:31:76:66:88:27:c4:fb:18:
67:76:c7:ef:f1:82:5d:eb:70:0d:75:da:c6:c0:7c:
02:8b:e3:bf:f2:d5:86:f6:0e:9c:0a:a8:33:5e:ee:
22:4a:e9:d9:30:72:19:9f:f2:8a:2f:25:f4:e2:a2:
13:7f:36:4e:de:13:0c:47:52:80:c2:cb:77:4b:79:
55:b3:31:6f:e3:6c:6a:57:7c:65:30:50:24:ce:f5:
a8:9e:35:4c:a0:94:a5:a7:2d:a7:2c:38:b0:66:51:
7b:42:89:8c:09:eb:d0:71:91:c9:81:53:ae:59:a6:
51:c4:e8:26:69:cc:4e:71:bf:16:66:e9:3a:e6:ad:
61:3d:87:44:8d:a2:88:8c:ce:02:0b:45:4b:f8:c7:
44:79:5b:ad:e8:fe:50:12:88:d3:57:28:60:e5:e9:
31:d7:13:92:eb:70:85:a2:aa:c0:64:2b:ff:49:ee:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3F:F2:15:38:A4:50:34:4C:00:0C:80:BF:6D:C5:7E:E2:A4:17:0D
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Pj_yFTikUDRMAAyAv23FfuKkFw0.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.229.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:f7:4a:cf:44:7d:28:00:b1:94:2f:f9:ac:11:66:63:de:ce:
ee:11:32:4d:96:88:53:bf:a4:86:a5:24:2a:8b:27:3c:99:d9:
0a:61:38:ec:0c:83:7f:68:6b:8f:64:02:9b:45:85:47:87:d8:
b2:2b:21:37:f2:80:eb:0d:9f:b6:f3:ec:fc:ad:18:ea:38:dd:
de:4a:49:e0:ba:16:0c:94:7e:03:ff:e9:67:25:e2:f1:a7:7c:
47:3f:50:e1:98:3c:6f:18:74:1f:72:f8:d0:8d:27:c5:1c:a9:
a0:7c:8a:89:a3:7a:f7:06:ed:bd:64:c4:58:69:8a:88:87:34:
ef:ab:5c:c1:2d:17:e6:9b:f4:b1:d0:07:fa:a1:7a:25:89:60:
ab:cc:35:33:66:9e:28:96:4d:62:7d:8a:76:88:c8:7a:f1:03:
b4:02:82:7d:3f:bd:fb:ae:6a:1d:d2:fb:c5:7b:be:04:4a:2a:
19:47:3d:08:6f:2a:b1:e9:7a:da:5f:67:71:36:b2:f9:05:d7:
db:88:10:72:cd:0f:7f:a0:06:4a:84:48:ac:ef:81:40:36:ea:
6c:38:3c:07:54:31:7c:6c:d5:70:a7:f5:d3:f8:3c:91:d8:88:
b5:67:3c:c9:e2:1d:c2:f1:c1:41:53:13:2a:40:c2:36:77:c5:
f0:99:22:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:45 2025 by rpki-client