Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lMrdSYbNziSCHRnQBxRKY4e2i5g.roa
File: lMrdSYbNziSCHRnQBxRKY4e2i5g.roa (raw, json)
Hash identifier: 2fp3RakkAVNdIWxR4k2ueJA5T4U3t+qMXSYLZjBfaZ8=
Subject key identifier: 94:CA:DD:49:86:CD:CE:24:82:1D:19:D0:07:14:4A:63:87:B6:8B:98
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0117
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lMrdSYbNziSCHRnQBxRKY4e2i5g.roa
Signing time: Sat 01 Jan 2022 01:31:23 +0000
ROA not before: Sat 01 Jan 2022 01:31:23 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 210.188.220.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:23 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=94CADD4986CDCE24821D19D007144A6387B68B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:1b:f9:b1:16:31:49:31:cd:6d:67:1a:93:
fd:c4:3c:82:6a:51:13:3f:45:b3:28:3f:5b:9a:44:
75:f1:38:80:de:39:56:f8:fe:d0:50:85:b1:ee:1b:
1c:dc:3b:5b:5e:c1:59:6b:ed:54:94:88:e4:43:05:
77:b6:78:67:40:94:08:a1:25:4f:bc:c5:9a:61:f9:
31:f4:c5:bb:52:dc:3c:3e:c7:cf:83:67:86:93:f9:
c8:f0:55:76:c7:7b:c7:7d:73:f6:73:c0:98:a1:00:
32:fe:fd:03:ce:06:cd:70:d8:d5:e7:e9:9f:b9:f9:
4a:41:0f:ce:b0:ce:b4:f7:d3:95:94:69:05:f8:c4:
20:65:ed:86:43:a3:91:7c:9c:be:35:99:36:64:ac:
65:31:98:9b:36:44:94:49:ce:f2:7a:83:7d:13:86:
68:30:90:a6:1c:66:fc:cc:bf:a7:df:d1:d4:d8:6b:
aa:a6:13:14:0c:a0:e4:7a:4a:ea:05:7c:8d:c1:74:
4e:d2:13:84:83:87:15:68:c4:b4:e7:91:3a:9e:16:
e3:47:b3:cf:25:09:36:43:6d:c6:bd:e8:78:dc:11:
e3:70:18:ea:28:1f:dd:36:95:7d:79:c7:73:d9:ea:
c6:99:df:12:41:a7:e6:21:ba:ec:a8:bb:c6:77:e9:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CA:DD:49:86:CD:CE:24:82:1D:19:D0:07:14:4A:63:87:B6:8B:98
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lMrdSYbNziSCHRnQBxRKY4e2i5g.roa
sbgp-ipAddrBlock: critical
IPv4:
210.188.220.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:f9:db:49:e2:b9:cc:d1:a8:4a:78:d0:3f:ca:54:80:19:4a:
cc:d7:e3:09:0f:72:d3:ce:f2:58:f4:29:ec:41:8d:6e:1f:aa:
93:94:d5:d6:62:e9:d8:51:57:c5:1c:7b:d3:23:b5:3d:d1:34:
c6:f7:e1:79:10:ec:2d:ee:28:fb:e6:c1:52:b4:4f:e9:79:cf:
1a:59:bf:43:05:02:36:5b:23:6f:6a:87:e6:9b:f6:3a:19:85:
b6:e2:21:a8:75:52:10:58:06:ef:14:9c:de:3d:0c:60:a5:f0:
67:da:00:c7:2b:aa:57:c0:ea:c4:ba:ea:40:6c:06:0f:a0:be:
61:81:de:10:66:2b:d9:74:80:84:ca:10:a7:f3:b5:8b:e9:0c:
16:dc:13:2b:5a:4a:d0:da:34:a8:15:d9:22:fd:05:9d:65:eb:
09:93:e7:61:0c:d1:d1:e0:4f:04:c2:84:2f:4e:18:d4:68:a6:
57:87:4c:c8:1e:67:1c:91:32:49:28:0a:48:54:c4:52:7e:74:
16:4f:81:79:fe:a1:18:db:24:30:87:73:9b:33:34:e1:d5:20:
cf:70:a9:ce:f2:c3:0f:a3:b9:8d:4c:eb:e1:f2:24:6c:7c:34:
f6:80:4b:9a:f0:d9:65:27:09:be:1c:dd:5c:37:f1:28:6c:9a:
e4:bb:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:21 2025 by rpki-client