Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/PKiqvuAM_zxCpM8v5rB-bTcYbdk.roa
File: PKiqvuAM_zxCpM8v5rB-bTcYbdk.roa (raw, json)
Hash identifier: OgNAKF67VeI+uxV3qmqtF8Qp4Zm1FTD+pCfMmuF1yfM=
Subject key identifier: 3C:A8:AA:BE:E0:0C:FF:3C:42:A4:CF:2F:E6:B0:7E:6D:37:18:6D:D9
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 27
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/PKiqvuAM_zxCpM8v5rB-bTcYbdk.roa
Signing time: Fri 23 Jul 2021 09:55:07 +0000
ROA not before: Fri 23 Jul 2021 09:55:07 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 55392
IP address blocks: 217.178.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Jul 23 09:55:07 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=3CA8AABEE00CFF3C42A4CF2FE6B07E6D37186DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:58:bc:96:aa:a1:be:46:be:fa:6b:89:d7:
12:36:1a:90:40:7a:ae:13:cc:01:59:f3:0d:1f:80:
96:f0:5e:17:8a:c0:a4:c3:86:45:76:5c:af:27:34:
26:cd:3c:59:56:29:2b:74:7b:95:1e:de:a9:f7:98:
a5:b8:9e:db:98:f6:73:be:68:b0:dd:f5:2d:0b:60:
a7:92:25:c5:40:c5:45:1a:91:59:f4:68:d4:5a:7a:
2c:1e:c5:8c:97:38:05:31:e6:7c:e7:a5:1c:43:77:
16:86:93:0c:c0:38:9b:b8:ad:38:fc:a0:0c:0b:cb:
44:d2:44:ad:5b:4d:17:03:2b:48:09:0d:1d:4b:4c:
11:99:ca:2e:00:79:67:9d:97:77:b4:76:9e:7d:c7:
f9:9a:24:1f:7e:2c:f9:b4:77:a0:60:c6:24:92:30:
41:f7:6a:fb:e1:01:58:c8:14:61:ed:fb:52:3f:c8:
bc:65:30:5c:b5:5e:b3:b8:51:b6:30:08:7d:17:c3:
32:4c:37:36:f8:0f:08:dd:54:71:22:4d:53:e3:2c:
01:a4:c1:dc:db:a3:4e:87:ca:f4:9c:97:fc:41:14:
ec:a4:65:99:c1:da:7e:d2:8e:62:49:04:d3:38:12:
2f:4f:e4:3b:32:e7:85:a8:60:e2:70:78:9a:dc:0d:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A8:AA:BE:E0:0C:FF:3C:42:A4:CF:2F:E6:B0:7E:6D:37:18:6D:D9
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/PKiqvuAM_zxCpM8v5rB-bTcYbdk.roa
sbgp-ipAddrBlock: critical
IPv4:
217.178.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:b5:9d:c9:ea:a6:ef:46:3a:54:d0:2c:5b:12:73:21:29:8b:
41:e9:f2:c8:80:c7:00:db:f0:89:b0:1d:55:62:9c:74:db:9d:
63:eb:7e:1c:37:af:1a:60:ae:23:20:4f:f6:87:a7:26:a2:0f:
12:4a:60:01:26:51:5e:a4:24:98:b4:b1:77:4f:ed:c4:9c:50:
19:38:13:e6:ee:d1:f7:8e:a4:f3:93:81:44:b1:80:cb:99:e4:
42:da:88:29:1f:82:da:5e:c8:7d:8f:dd:c4:64:a8:b5:11:20:
96:e2:32:67:4d:79:b2:5f:21:0d:41:0e:c9:07:18:ef:5a:c7:
aa:42:7b:e4:f9:e7:81:26:e0:ef:69:ea:6a:28:e3:43:08:b7:
db:05:c0:f6:63:0e:7c:d2:56:d7:de:e3:d0:0b:5c:b6:6a:95:
00:c5:f3:bf:c6:ec:12:10:a2:e5:b1:33:d8:7c:24:b9:30:75:
bc:8b:ce:9e:d4:d0:fd:02:f2:78:15:5e:55:57:20:f2:48:18:
33:c5:0a:6c:d7:39:8d:81:4d:d6:10:54:66:f0:81:25:37:71:
ff:b4:1b:8b:b7:3a:3d:3c:6c:4f:b2:f2:ed:5a:59:69:86:19:
92:98:18:67:03:65:ea:f0:e4:eb:34:f2:8d:e0:96:0b:97:e5:
26:ae:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:07 2025 by rpki-client