Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/33edIl-aoatNVMnoJrgxj5uRht0.roa
File: 33edIl-aoatNVMnoJrgxj5uRht0.roa (raw, json)
Hash identifier: WSvGDVTjE8hjXpfMgqnw1o2zesDWRsx/FXebeDbxuFQ=
Subject key identifier: DF:77:9D:22:5F:9A:A1:AB:4D:54:C9:E8:26:B8:31:8F:9B:91:86:DD
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01BF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/33edIl-aoatNVMnoJrgxj5uRht0.roa
Signing time: Mon 01 May 2023 01:32:11 +0000
ROA not before: Mon 01 May 2023 01:32:11 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 175.133.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:32:11 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=DF779D225F9AA1AB4D54C9E826B8318F9B9186DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:b8:90:22:d7:7e:25:1f:15:3d:db:b7:83:
6f:63:5e:d8:d3:ff:22:d4:ce:d1:55:3b:fb:22:f2:
60:86:8c:93:57:db:df:53:09:f9:4d:53:9f:2e:2d:
76:4b:e5:0a:1c:f5:fe:41:5d:a9:c0:62:b4:2c:46:
e5:80:f1:4c:e6:d0:c6:7c:73:8f:20:21:aa:85:2c:
15:2a:cd:11:fa:5e:44:11:69:d0:85:39:4b:66:1f:
75:11:27:ad:aa:84:5a:ff:7b:e7:7f:ee:70:03:b0:
e0:76:f7:41:a1:7e:49:24:60:94:53:dd:b3:b0:22:
c7:18:7c:e2:82:ec:69:54:37:c2:a4:89:ea:c3:22:
6a:f3:b1:91:a5:bf:3d:42:55:ba:9f:cb:be:d0:b5:
5f:0e:dc:a8:a3:3e:e3:a4:d9:d9:23:c7:ea:22:1f:
ca:71:28:4e:8b:33:86:8a:06:d3:41:8e:57:42:ff:
c3:75:28:54:f3:44:7b:c1:84:13:d3:6e:9e:b8:53:
44:20:0c:00:c8:aa:e2:f8:e7:03:9d:4c:45:18:d7:
bb:11:5a:d7:90:96:ac:c0:a8:2f:a5:70:cb:14:03:
c2:a0:c3:95:e5:1a:70:3a:52:3f:1b:08:52:81:9b:
7c:f6:fb:ce:78:46:95:55:62:5b:3e:45:b2:33:00:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:77:9D:22:5F:9A:A1:AB:4D:54:C9:E8:26:B8:31:8F:9B:91:86:DD
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/33edIl-aoatNVMnoJrgxj5uRht0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.133.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:2b:dc:31:21:99:22:41:d3:49:9f:32:4f:7e:ee:c9:f0:35:
95:62:c4:32:6d:26:70:76:72:15:34:a3:bb:a8:30:5b:79:92:
1b:c0:a9:bf:86:37:6a:2a:f9:91:3f:c2:ae:44:f1:82:5b:06:
0e:56:ed:d4:48:c3:1a:02:cd:c3:37:3f:73:ee:b1:34:b9:47:
2e:e5:6c:a3:20:c8:01:8c:53:f4:b6:99:9a:99:44:dc:35:c9:
c5:b7:51:b5:db:a7:44:3d:aa:0e:51:cf:95:65:7f:50:2c:1f:
ea:a6:02:aa:bf:1a:17:c0:31:56:db:35:c4:70:a4:3d:49:e3:
f6:2a:e8:24:90:74:17:dc:8f:12:bb:00:1c:48:6e:dc:0b:88:
0c:a6:36:04:66:23:f7:e8:67:47:44:6e:3e:5d:14:3c:8c:44:
bc:a4:2c:a6:9a:a5:33:d6:0c:13:b4:a3:46:1d:c5:29:3b:1a:
82:49:e2:41:c6:65:85:39:4b:ad:1c:8c:6e:33:8c:f0:d3:ba:
fa:96:d9:63:f4:a7:10:6b:08:de:2d:d1:c9:70:4b:c8:72:1c:
87:33:9a:f8:e7:a2:8d:47:2f:e0:70:61:36:05:c3:ad:8d:48:
e8:1a:ae:ca:1e:22:00:d6:a8:e7:e4:87:d4:55:4a:17:27:87:
96:87:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org