Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa
File: HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa (raw, json)
Hash identifier: SeIG1e3Mm1/VYbSkW2wl5ccNtje/TqrCjdtf7Er5GgM=
Subject key identifier: 1C:BB:4C:61:7F:A2:BB:2F:11:0F:F4:B9:3F:F5:D6:64:99:D8:4A:AB
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: 73
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa
Signing time: Fri 01 Sep 2023 01:28:12 +0000
ROA not before: Fri 01 Sep 2023 01:28:12 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 38644
IP address blocks: 210.173.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Sep 1 01:28:12 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=1CBB4C617FA2BB2F110FF4B93FF5D66499D84AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:20:12:0d:cb:89:f0:c7:55:87:b4:5a:3b:
a8:7b:8a:f6:97:0b:81:9a:c3:0c:e5:76:05:3c:7b:
f6:51:3b:21:65:f6:2d:f7:e8:b1:3b:6d:26:d8:96:
2f:34:3d:7c:d8:01:81:d3:9a:ac:61:dd:9e:0c:80:
ec:a5:67:8a:66:3b:5f:b1:e1:c4:d9:ce:7a:24:3c:
3e:9f:ca:98:66:5a:9a:44:fb:7d:d3:f6:d1:fe:e2:
3e:39:84:a2:64:ba:5f:fe:08:d3:e8:ef:6c:db:2a:
d9:74:68:30:00:42:11:db:56:8b:d3:21:fa:74:fc:
25:11:3a:f6:d4:9d:51:d6:e1:7e:88:78:a9:05:79:
62:77:7a:b2:db:19:84:80:4d:ed:8c:59:e6:a0:24:
1b:29:d0:cd:76:55:cd:28:01:a7:40:bb:ea:c6:82:
4e:86:99:6b:6e:71:56:be:63:12:f0:ca:b2:6e:61:
32:f4:01:fd:b2:4d:05:6b:48:06:44:56:e3:db:0c:
33:4b:0a:c8:19:08:16:f9:9c:2d:9a:e1:62:5c:e7:
fe:ef:a6:fe:f1:a7:86:ce:bd:57:b5:10:20:53:ad:
cc:17:5c:6a:fa:55:59:81:9f:67:8a:18:63:ed:af:
81:0b:75:2a:fb:89:48:1f:48:ea:48:f2:27:db:d3:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:4C:61:7F:A2:BB:2F:11:0F:F4:B9:3F:F5:D6:64:99:D8:4A:AB
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6d:7c:fd:d5:eb:8b:d1:ca:b7:c6:05:04:b1:b3:4b:72:4c:
dc:b8:0e:26:57:ff:a7:9c:bd:cf:d4:62:e4:21:b7:cc:94:5f:
fa:1a:06:94:a1:37:85:b7:55:3a:36:70:78:60:23:3e:53:04:
bb:58:19:71:27:f9:44:e2:22:29:3a:40:0f:60:83:05:9e:58:
74:77:43:a4:9a:17:cc:95:c8:fc:ae:5d:2b:ec:1d:bb:52:60:
1b:b8:f2:77:ad:2a:b5:0a:83:39:96:86:1c:2b:d3:59:f8:76:
7c:19:ee:85:b3:01:9d:17:4f:c4:49:5f:de:2a:24:9c:e1:72:
8c:2c:55:46:3e:4e:f3:6f:ce:4c:d9:a4:9d:9a:5a:a6:27:cf:
eb:93:b7:fa:c6:37:65:c6:94:0b:61:90:99:9c:78:b7:ea:7c:
29:2c:4b:7d:2a:9e:ae:36:f3:cf:fb:e0:e3:f2:ac:0f:4d:2a:
44:84:d6:7a:91:cc:87:12:28:84:fa:f8:2c:e3:7c:79:a7:ef:
fe:1b:90:1a:e7:9c:65:6a:18:ee:46:77:88:3e:a0:16:45:10:
f1:90:5b:3a:ee:bb:39:9d:4a:97:36:70:40:68:c3:a9:c0:43:
73:34:79:43:eb:b5:b5:69:4b:7d:e6:20:19:ba:8e:90:88:58:
bb:41:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:15 2025 by rpki-client