Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/KZp0bsumv2GtFPVVdualeeDvV9w.roa
File: KZp0bsumv2GtFPVVdualeeDvV9w.roa (raw, json)
Hash identifier: khjPZVzC2zYkWLhX5OiDmUnPosyTYihQMFlFWQa167E=
Subject key identifier: 29:9A:74:6E:CB:A6:BF:61:AD:14:F5:55:76:E6:A5:79:E0:EF:57:DC
Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial: 2E
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/KZp0bsumv2GtFPVVdualeeDvV9w.roa
Signing time: Fri 15 Sep 2023 07:18:40 +0000
ROA not before: Fri 15 Sep 2023 07:18:40 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 7670
IP address blocks: 211.1.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Validity
Not Before: Sep 15 07:18:40 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=299A746ECBA6BF61AD14F55576E6A579E0EF57DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:fa:7a:9b:17:8f:1f:18:2e:27:84:5e:97:
bc:bb:05:04:fe:0b:12:a1:e6:65:db:36:bb:96:29:
68:f4:48:e3:d6:7a:ee:c3:4f:75:c3:bc:1a:c8:3b:
f5:ca:48:91:2f:d7:02:79:4c:4e:25:0c:36:b1:ad:
a2:48:ce:ac:ab:94:64:5f:3d:b0:03:f0:24:15:e4:
f0:f6:88:d8:ab:cb:91:6c:6a:55:91:4e:1b:16:79:
50:c6:06:4a:dc:a4:20:09:c3:ce:93:15:c9:04:d0:
68:77:14:8d:de:60:78:c6:c9:93:35:4b:1f:83:8e:
ad:7e:5f:f6:22:e3:a5:df:6a:eb:b1:82:c2:47:0b:
c8:79:54:4c:d1:99:d6:16:01:0b:2f:4c:93:5e:cf:
fb:09:4b:ca:16:12:21:90:0c:de:e2:d1:ca:fd:45:
e9:2c:ce:bf:00:1f:82:38:72:b2:8f:08:ef:51:06:
2f:22:2f:e3:27:c0:23:bd:bd:65:25:0a:f9:0c:4a:
e1:42:93:af:91:8a:34:ea:52:7b:d6:d8:94:91:46:
71:cb:6f:9f:b7:d9:f8:a3:c8:03:a9:c9:64:7c:b3:
91:e1:14:fe:44:08:dc:6c:ea:3b:e6:dc:2c:7f:8b:
08:16:3d:85:30:c0:7c:94:6d:cc:48:cb:96:41:ee:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:74:6E:CB:A6:BF:61:AD:14:F5:55:76:E6:A5:79:E0:EF:57:DC
X509v3 Authority Key Identifier:
keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/KZp0bsumv2GtFPVVdualeeDvV9w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.1.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:0f:f3:eb:49:3f:bc:53:69:54:1c:fb:5d:8e:35:f9:0c:da:
af:c7:26:30:0e:65:50:b0:71:73:9e:75:d7:f6:c8:96:e5:d5:
29:40:9c:67:69:02:8a:f1:04:dc:5a:5c:65:89:4b:f1:fe:10:
9b:51:80:47:61:53:57:5f:e1:bb:c4:08:cd:41:3b:21:b9:f8:
f9:29:89:ad:e6:24:d5:0b:c3:d1:9f:8b:73:a4:a7:13:69:10:
2e:e2:b6:df:84:be:f3:c6:b5:a8:69:2a:e6:7d:76:d9:76:c0:
f6:92:ec:1f:71:12:f0:ba:e2:46:23:69:f6:df:f4:83:56:77:
b0:bb:a5:3b:78:d5:e3:6b:ad:de:c5:b5:56:6b:6b:76:0b:3c:
44:69:31:ad:94:7f:24:39:dc:3e:4e:1b:84:d1:d8:ee:74:a1:
e1:b4:5c:0a:81:3a:56:40:36:c5:c8:67:de:53:5a:a5:3d:77:
96:d7:87:a3:29:4f:6a:cb:78:b7:c0:88:0b:40:4b:a8:0b:d6:
0e:c0:44:92:90:ba:7d:9f:58:f7:21:83:da:4c:0e:a4:d4:8b:
dc:ea:ee:e8:22:1e:96:b8:ab:70:a2:62:5b:1e:58:90:17:ba:
bf:7e:7b:42:c5:0e:3a:27:05:f5:a9:2f:1a:b5:42:cf:b6:52:
94:0b:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:35 2025 by rpki-client