Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7NDbACLYmmXukx1cuybKHeTy6-M.roa
File: 7NDbACLYmmXukx1cuybKHeTy6-M.roa (raw, json)
Hash identifier: AvQwWSRF52qRikqFDPJhhHxRSSqGlf8LO20VLZ+pMwI=
Subject key identifier: EC:D0:DB:00:22:D8:9A:65:EE:93:1D:5C:BB:26:CA:1D:E4:F2:EB:E3
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 75
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7NDbACLYmmXukx1cuybKHeTy6-M.roa
Signing time: Sat 08 May 2021 04:05:41 +0000
ROA not before: Sat 08 May 2021 04:05:41 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 153.224.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:41 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=ECD0DB0022D89A65EE931D5CBB26CA1DE4F2EBE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:9a:23:a8:29:98:8a:36:fe:47:b8:66:02:
48:c3:de:a4:fd:5f:59:90:d4:df:01:87:31:f4:3c:
11:98:d4:8d:bf:9b:19:5f:3e:4b:b0:21:2a:05:fe:
32:44:86:09:6b:41:87:e1:df:d1:94:e2:10:60:20:
63:c7:05:5b:f9:4a:49:59:27:6b:c7:cd:88:10:ef:
15:53:0e:58:a5:a9:86:f8:6b:86:f5:87:cd:15:de:
a5:3f:54:66:b5:41:98:1e:63:a3:0d:50:9f:0a:84:
de:a5:ad:34:b0:61:e7:23:1a:d0:96:31:25:59:de:
9f:e3:6a:8d:59:03:51:5c:de:4c:59:76:94:2f:33:
38:cf:67:d3:b7:5f:fc:8b:79:75:ee:01:cf:82:46:
4c:29:69:6d:41:de:b8:06:6b:0c:d5:2f:30:c0:96:
08:e5:f8:22:f8:f4:1f:3e:5b:11:a2:9c:07:43:b1:
ca:b1:6a:17:30:99:01:40:0f:b1:7b:51:26:fc:ab:
7d:11:42:5f:c1:b0:9a:b3:30:a0:7b:5a:f9:41:f8:
03:ab:b2:3b:fe:de:4f:5b:4d:85:c7:d9:b3:c2:d4:
61:eb:17:8b:f8:a7:c9:67:1a:5e:12:2c:30:df:3c:
d2:04:13:18:58:a3:c7:15:02:9c:30:31:7d:9a:d1:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:DB:00:22:D8:9A:65:EE:93:1D:5C:BB:26:CA:1D:E4:F2:EB:E3
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7NDbACLYmmXukx1cuybKHeTy6-M.roa
sbgp-ipAddrBlock: critical
IPv4:
153.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
72:94:dc:06:22:fd:91:5b:c2:5f:24:d6:ab:83:da:ff:ec:c0:
bd:3b:a5:31:6e:6e:71:ea:a5:cf:c0:90:98:e9:b9:09:15:32:
51:f0:e9:80:fd:62:68:37:9e:89:46:13:d7:62:66:94:f1:6c:
26:97:be:27:a2:73:5f:2d:0f:2c:8f:cf:f3:ad:82:43:cb:a7:
17:30:59:d4:61:c2:49:21:90:75:de:69:02:57:4e:7b:9d:f8:
9a:64:92:a5:bd:dd:72:63:4b:8b:d3:0a:13:25:9b:23:98:0a:
70:fb:b0:e0:ee:6d:76:bd:83:7d:e9:b4:72:b0:4b:03:fb:08:
51:a2:91:b2:1d:1b:7a:c4:cb:97:0a:11:c2:be:7c:34:b7:1f:
f8:21:ff:03:05:27:67:07:1d:cc:eb:8d:fb:dd:41:0a:d4:44:
fc:e7:ca:b1:90:0d:d6:fb:a0:c5:9a:36:8f:5d:5e:cf:0b:76:
6e:e0:80:58:2a:29:b5:7f:1d:f4:4c:8a:ca:f2:49:0f:07:fe:
77:34:37:0f:c7:2d:14:01:b7:a1:56:26:cd:e8:00:d1:b3:6e:
bd:5c:79:0f:4f:4f:56:29:21:79:d0:d1:d9:e6:d4:c1:7f:af:
91:7b:1a:14:e5:f1:27:3d:9c:11:98:95:39:d6:5f:55:85:fe:
a6:b1:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:39 2025 by rpki-client