Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/oaO4ZSX8XsYnxwoWDuGvpQh5CjM.roa
File: oaO4ZSX8XsYnxwoWDuGvpQh5CjM.roa (raw, json)
Hash identifier: z4AcsMWWZCFrHNBvLWBYZg3FyFdQCGO293JKRke/41o=
Subject key identifier: A1:A3:B8:65:25:FC:5E:C6:27:C7:0A:16:0E:E1:AF:A5:08:79:0A:33
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 74
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/oaO4ZSX8XsYnxwoWDuGvpQh5CjM.roa
Signing time: Sat 08 May 2021 04:05:41 +0000
ROA not before: Sat 08 May 2021 04:05:40 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 124.84.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:40 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=A1A3B86525FC5EC627C70A160EE1AFA508790A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:9f:c6:d5:f3:db:96:f5:c1:cd:0f:be:28:
1a:74:9a:93:42:61:43:84:79:c8:08:10:92:b9:26:
32:3d:cb:18:f8:0f:2a:6d:4b:ef:fb:22:e6:d6:da:
a1:04:55:73:cd:bc:92:d9:8d:5b:71:ab:ed:26:b2:
97:82:96:e7:1a:c5:38:58:ef:15:6e:17:5a:dd:90:
3d:45:17:bc:55:82:b0:a1:a7:b5:7f:94:9d:e2:43:
f6:17:0f:8f:d1:3d:25:c4:fb:82:20:c7:50:88:f7:
b6:ad:9b:2b:f1:aa:5d:ba:92:3e:d3:bb:ef:ca:51:
33:78:fb:ce:e1:1f:fe:46:4e:6a:67:53:da:da:44:
65:5d:77:02:05:03:86:ec:61:3b:73:41:37:6e:6a:
0a:9c:f6:8c:bd:66:0d:53:2f:bf:54:75:0c:de:71:
bf:73:02:af:e8:0d:26:80:c6:ea:f2:19:cd:98:a7:
84:85:3d:d2:0e:cd:02:2a:87:3d:6d:ff:a1:aa:fb:
e7:27:59:07:66:7f:a7:5e:ec:42:d4:cc:36:d4:4a:
40:5a:2c:15:0a:e6:d6:a3:6d:2b:34:2e:c9:59:7d:
16:df:5b:74:78:dd:fe:a2:23:fc:ec:39:7f:39:34:
5b:19:b5:fe:7b:9c:3a:37:c0:6f:c5:61:09:05:0a:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:B8:65:25:FC:5E:C6:27:C7:0A:16:0E:E1:AF:A5:08:79:0A:33
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/oaO4ZSX8XsYnxwoWDuGvpQh5CjM.roa
sbgp-ipAddrBlock: critical
IPv4:
124.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a1:49:12:0c:d4:28:b2:bb:2e:dc:0b:73:07:9f:11:91:90:a2:
26:67:43:a4:aa:45:4a:25:3a:16:f5:ef:7e:db:38:ff:80:56:
fa:40:27:cb:32:87:fe:ea:6d:f6:59:ab:e8:16:e0:18:90:85:
81:d9:b4:a9:e1:3d:3c:d0:e6:b1:96:a8:7c:09:34:1d:f6:fb:
c7:2e:b9:37:29:3c:5f:8b:b5:7e:24:0c:63:31:b9:b4:0c:42:
ad:68:47:67:d2:dc:11:9a:e7:34:6f:15:03:2d:23:4a:15:fc:
3c:58:19:3f:c7:73:c4:cb:13:f2:1b:74:bc:d7:72:ef:d5:f0:
ad:55:05:8d:88:95:20:50:67:5a:fb:5c:ac:10:24:ad:72:d2:
e3:ae:7b:cf:a7:fd:63:73:93:37:f9:5a:05:13:e9:85:a4:b4:
2a:b5:90:de:9b:12:1a:66:b5:4f:83:68:f4:88:36:4d:94:30:
f6:65:50:1f:60:be:72:52:0c:66:9d:cd:2e:b2:65:00:fc:fb:
8f:bf:ea:02:45:60:51:60:d6:a7:bf:7c:b1:86:fe:ef:83:ed:
e1:2b:d3:f2:e0:34:3f:4f:94:f7:d6:da:03:cc:36:3f:0f:eb:
92:f0:25:ea:b8:0f:e5:c1:28:6a:ef:62:c9:34:b4:27:e2:88:
e0:1f:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:25 2025 by rpki-client