Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/iOIPkou20jwZJFSFIbjvCtQzmdw.roa
File: iOIPkou20jwZJFSFIbjvCtQzmdw.roa (raw, json)
Hash identifier: ONj0UTva9bvnlWKL/I+1xetNx65gFzCbeEKxNd5hO0g=
Subject key identifier: 88:E2:0F:92:8B:B6:D2:3C:19:24:54:85:21:B8:EF:0A:D4:33:99:DC
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 3E
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/iOIPkou20jwZJFSFIbjvCtQzmdw.roa
Signing time: Fri 01 Jul 2022 01:29:55 +0000
ROA not before: Fri 01 Jul 2022 01:29:55 +0000
ROA not after: Thu 15 Jun 2023 01:30:04 +0000
asID: 55391
IP address blocks: 217.178.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Jul 1 01:29:55 2022 GMT
Not After : Jun 15 01:30:04 2023 GMT
Subject: CN=88E20F928BB6D23C1924548521B8EF0AD43399DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:86:41:08:7b:6d:44:a9:a3:92:49:7b:f7:
a6:c7:d1:cb:4f:71:d6:92:e8:e4:6c:42:d6:67:b5:
23:ef:67:d0:53:bf:6e:8a:38:4e:12:7f:e3:8b:e9:
1b:dd:b7:e2:df:07:da:d4:81:b4:c2:7b:da:4b:23:
68:35:7f:e9:3a:82:bd:70:55:8a:fb:09:34:f5:7e:
d5:e5:04:a0:14:84:aa:16:7d:81:bb:3d:fa:ae:47:
ce:85:0f:7e:ea:cf:b9:62:95:79:49:68:ab:f5:bf:
06:ab:ba:3f:92:4e:ca:c5:9b:0b:7f:ba:c6:0b:f5:
2c:df:63:09:a1:e5:65:3f:79:af:8c:d3:78:e7:70:
8f:12:0b:7d:7f:71:aa:9b:27:a3:7d:39:28:bc:f5:
cb:c5:a0:43:41:1b:ac:52:9a:fb:9e:ca:0d:32:36:
fe:13:c0:c3:2e:3b:e0:bf:31:94:ea:8c:4d:77:ee:
44:1d:07:cf:da:d3:dd:b6:11:da:80:96:e0:2c:18:
6f:12:fb:78:bd:96:ff:c3:e0:65:e3:e9:e0:95:17:
7a:59:3e:9c:bd:40:ec:89:cf:f1:24:a2:a0:60:d3:
59:50:e6:7f:05:09:77:67:16:c1:a9:5d:5c:9e:c3:
6f:68:96:58:b7:d1:0c:4d:7b:63:bf:60:78:50:7a:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:0F:92:8B:B6:D2:3C:19:24:54:85:21:B8:EF:0A:D4:33:99:DC
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/iOIPkou20jwZJFSFIbjvCtQzmdw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
217.178.128.0/18
Signature Algorithm: sha256WithRSAEncryption
52:5c:f8:78:49:b0:9f:49:78:2e:42:9c:e7:84:1e:c7:e5:fc:
33:19:19:d8:91:32:20:de:03:df:71:17:be:9d:c3:85:9c:85:
a9:b7:83:73:1b:79:22:ac:8e:3e:f8:4a:6a:3b:ca:ae:01:7c:
e8:d8:80:b2:ee:3d:5a:21:2f:f6:66:74:e1:38:c1:d6:31:58:
18:45:c9:c0:48:e9:bb:d3:06:02:a4:ee:03:72:47:ac:3e:a9:
2c:91:c3:7d:34:1b:94:0d:32:7b:b3:ee:9a:f7:3f:71:64:30:
7c:4b:1e:9b:4b:45:4c:b3:51:a8:98:21:30:5b:48:5d:7b:32:
7d:20:86:40:61:75:b5:b1:24:2f:db:e0:9e:6a:a9:c2:8a:08:
7e:52:c4:79:49:46:0a:bb:07:e0:46:3d:ef:1a:39:05:3d:93:
67:9c:ff:9d:ac:53:8c:ad:4d:27:af:56:7f:2a:49:f0:0c:c1:
b5:97:c6:fe:fe:57:4d:a0:67:3a:25:a8:9c:70:2f:7a:2c:0c:
cc:d8:2f:f5:69:14:c1:06:41:7f:55:56:ed:b4:0e:b6:45:00:
23:31:b2:f9:9d:a7:ee:b5:bb:3a:4c:48:c8:6b:b3:c1:da:a5:
c3:6a:e6:dc:23:63:bd:64:ce:86:d2:b1:dd:87:e7:49:aa:b9:
86:d1:93:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:02 2025 by rpki-client