Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/UardUPWH7B-uGVYspB6RhkWG-eU.roa
File: UardUPWH7B-uGVYspB6RhkWG-eU.roa (raw, json)
Hash identifier: DTztsWKToIqRD3yz9DvFBr7ZQvRAkUvcPtsyOUultyc=
Subject key identifier: 51:AA:DD:50:F5:87:EC:1F:AE:19:56:2C:A4:1E:91:86:45:86:F9:E5
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 3C
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/UardUPWH7B-uGVYspB6RhkWG-eU.roa
Signing time: Thu 01 Dec 2022 01:28:49 +0000
ROA not before: Thu 01 Dec 2022 01:28:49 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7514
IP address blocks: 210.198.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Dec 1 01:28:49 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=51AADD50F587EC1FAE19562CA41E91864586F9E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:31:b6:1b:40:2d:2d:ff:4d:d9:a2:24:51:
31:3f:ab:77:f4:a9:82:c2:37:1f:c2:53:50:6b:cd:
5e:af:6a:55:e8:f0:73:20:53:b2:03:6d:fb:f7:6b:
d4:4b:7c:f9:4c:3e:6a:3c:75:bc:de:64:86:13:3b:
81:3a:03:cb:af:a5:84:ca:cb:53:a3:29:fe:13:5a:
9d:e0:82:66:77:84:90:f0:41:fd:35:7d:b1:3c:03:
d8:49:ac:20:9c:8f:34:97:21:ea:b5:d3:9a:e1:f9:
6a:40:2e:75:af:ff:2d:2d:72:6f:e2:ce:70:fe:dc:
b0:76:9c:57:75:eb:1c:8e:d3:44:51:de:fa:24:e1:
06:5c:db:a0:a8:f3:f6:45:ce:88:85:3a:26:d1:14:
07:ad:65:01:df:ba:6d:f2:32:86:e4:08:92:b3:84:
84:a5:b7:61:86:20:e3:ee:2f:98:c6:c6:62:8b:b2:
52:ed:6b:70:6e:9c:7b:46:fe:d9:e9:d7:85:7f:6c:
27:74:4a:f7:20:dd:9d:4e:b8:29:7d:8c:36:ac:f7:
00:da:51:c2:cc:f1:9f:44:8a:02:6a:ad:9f:84:9d:
bd:1f:99:fe:a7:3a:1e:04:8e:4a:98:81:71:7e:3a:
f7:00:da:79:78:07:e1:a7:11:c5:7c:61:96:a2:74:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:DD:50:F5:87:EC:1F:AE:19:56:2C:A4:1E:91:86:45:86:F9:E5
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/UardUPWH7B-uGVYspB6RhkWG-eU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.198.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:20:c1:5e:dc:86:1c:f2:9e:07:65:51:c6:db:99:ee:a5:c1:
e0:70:e1:c8:42:1c:44:c9:8f:dd:02:7c:2d:84:2e:c7:52:34:
e9:de:ca:51:ce:bd:bc:2f:fe:27:06:e3:43:71:6f:34:04:30:
59:7b:f7:e8:ae:4e:1a:dd:68:c2:f1:fe:4e:b5:5a:de:44:35:
46:27:6d:3b:b0:a3:ad:9b:59:a0:57:66:48:f5:7c:7c:dd:63:
46:fa:37:c7:a1:82:e3:ec:87:55:b2:5d:74:b2:b1:4e:14:f3:
1c:7c:89:73:c7:e1:73:2b:2c:8a:c4:cd:20:52:8d:0a:48:c6:
b8:45:a8:37:1f:77:76:40:b8:45:b7:ac:cc:cc:e0:3c:26:b6:
66:80:34:49:d7:c5:45:ce:3c:ad:63:d0:e5:3c:81:db:b9:3b:
cc:58:d0:99:c0:ba:78:f3:a9:3e:b2:0f:21:8a:da:d3:1d:ad:
fc:84:5a:ee:6d:25:d5:20:52:fb:11:a5:72:8e:ad:59:dd:a0:
df:3c:9d:4f:9b:2e:6b:c4:71:ea:cb:fd:21:dd:77:d4:c7:49:
30:3b:ef:d2:6c:5e:5b:f8:c9:37:33:9c:21:93:47:ac:68:ce:
d4:36:21:c8:4d:db:6d:f7:06:89:d4:b2:cc:92:de:80:dd:95:
fb:fc:99:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:35 2025 by rpki-client