Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/up-7VZzcyI7EIIyjTGiVH1g7vXc.roa
File: up-7VZzcyI7EIIyjTGiVH1g7vXc.roa (raw, json)
Hash identifier: 5iJE8RoaxMhHlONt4fjlLaLqPzPvGCfCal0kKngkoBI=
Subject key identifier: BA:9F:BB:55:9C:DC:C8:8E:C4:20:8C:A3:4C:68:95:1F:58:3B:BD:77
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01F6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/up-7VZzcyI7EIIyjTGiVH1g7vXc.roa
Signing time: Mon 01 May 2023 01:35:39 +0000
ROA not before: Mon 01 May 2023 01:35:39 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 125.28.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:35:39 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=BA9FBB559CDCC88EC4208CA34C68951F583BBD77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:b2:b4:e2:0b:df:65:0f:99:73:27:42:12:
9c:0d:b0:e7:ac:8b:0e:cf:69:bf:a3:34:ec:98:a3:
a3:b5:6e:c7:39:cc:c4:cd:04:eb:e0:75:94:38:19:
b6:6f:37:a3:cb:13:c4:02:60:6f:00:fb:d5:0f:c3:
20:62:c7:47:08:d5:b1:b9:66:af:11:de:4e:a0:bd:
19:6c:5e:52:29:87:87:dc:46:a8:cd:90:06:e2:27:
a1:a8:f4:f4:7b:08:d0:93:2f:f7:60:2c:7c:56:0c:
9b:01:58:27:17:27:ed:79:b7:b4:2b:98:3b:71:1c:
0d:7e:b0:8d:d4:ee:7f:a5:20:7b:09:a4:c5:c7:06:
44:11:ea:44:91:c0:f3:5e:10:4d:29:4c:bf:c3:9f:
6b:50:89:cc:f2:c0:a2:b4:9a:24:6b:5d:8b:f6:d2:
41:66:95:10:57:28:c0:f8:5c:29:c7:9b:21:0e:6e:
80:3d:76:0a:1a:8e:10:65:aa:0b:96:b4:28:2c:d6:
1e:33:ea:36:da:75:ee:64:1a:c8:3b:e2:41:8f:b0:
02:24:09:5b:3a:01:09:6e:ea:9b:3e:ed:4b:e1:e2:
4b:a5:3f:90:df:56:56:62:54:f6:25:b1:8e:6c:01:
c5:35:54:26:1b:d6:8f:df:8d:7a:97:2e:c1:ec:11:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:BB:55:9C:DC:C8:8E:C4:20:8C:A3:4C:68:95:1F:58:3B:BD:77
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/up-7VZzcyI7EIIyjTGiVH1g7vXc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.28.0.0/17
Signature Algorithm: sha256WithRSAEncryption
37:42:79:44:28:c1:77:e9:4e:74:f3:85:8b:f6:a3:e8:5a:f4:
8d:7b:e0:02:52:8b:d0:8b:38:eb:f0:3a:39:f7:98:44:a8:d5:
6e:22:ca:55:52:67:63:03:91:78:a3:8a:1e:6e:ef:9d:9c:e8:
09:fa:7d:06:09:23:cf:ed:c3:b0:57:3e:30:5b:58:ac:6e:3f:
bd:e5:3f:6c:df:76:df:9b:49:51:19:61:9f:c0:76:19:cf:c7:
b2:7f:08:0a:04:87:14:31:c6:8f:a7:5b:28:55:58:27:d5:3e:
14:04:c4:29:6d:75:de:ce:8e:fd:75:c7:7a:3c:1c:4a:b1:79:
59:f1:d7:c7:56:fe:de:e0:fe:15:24:df:e5:8e:fd:02:d4:2f:
3a:fd:55:60:c8:d3:7a:ea:10:aa:49:ca:9d:c7:5a:71:e3:f4:
f0:b0:1d:be:b7:d4:5f:c3:b6:b1:b2:83:c8:ea:47:2b:69:b5:
09:03:a2:2a:e2:ae:70:1b:b5:c5:ef:df:82:73:1f:97:d6:a1:
be:3b:ad:00:4d:62:cc:1b:59:dc:48:0d:e2:4a:47:03:58:09:
85:e0:b0:65:10:7c:1c:91:13:0e:4d:b5:00:80:b0:71:30:b0:
01:fc:68:e8:e1:7c:42:06:45:47:93:77:fa:76:e8:ff:9c:3e:
f9:df:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org