Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/-f73_LrIJX8K8ittzaXroYyPVHE.roa
File: -f73_LrIJX8K8ittzaXroYyPVHE.roa (raw, json)
Hash identifier: slVqUmT3Mv2xZUrrQpj8y0vgGdipkGGaCPqNS4TvlDo=
Subject key identifier: F9:FE:F7:FC:BA:C8:25:7F:0A:F2:2B:6D:CD:A5:EB:A1:8C:8F:54:71
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 2D
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-f73_LrIJX8K8ittzaXroYyPVHE.roa
Signing time: Tue 01 Mar 2022 08:33:58 +0000
ROA not before: Tue 01 Mar 2022 08:33:58 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 124.40.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:58 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=F9FEF7FCBAC8257F0AF22B6DCDA5EBA18C8F5471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:83:a5:d9:f6:be:fa:af:38:4e:cb:0a:1d:
1a:dc:6f:2b:c4:51:60:96:71:5a:e5:b1:00:e3:5f:
a9:5a:46:cf:d7:01:80:94:05:68:e3:62:d5:67:80:
1d:1b:ea:5d:4a:c8:4d:29:fe:52:14:47:52:98:fd:
35:72:8a:4c:70:e5:21:d7:f8:19:73:dd:b8:1f:b5:
07:d3:43:e3:97:bc:37:59:c9:f5:50:35:39:db:ba:
f8:23:66:6a:da:52:dd:f5:72:48:32:9a:10:b2:0c:
7b:1c:af:31:4d:d3:09:c9:99:af:c7:46:ff:78:bd:
28:ac:47:95:02:61:9b:55:e1:eb:eb:1f:64:3a:ae:
2c:6b:3c:09:13:c8:fb:65:ce:f4:23:cc:91:52:0f:
23:7b:6d:f0:69:32:27:b6:cc:af:d5:9b:3d:be:d0:
99:db:ca:21:6d:b3:cd:50:df:66:3e:01:15:20:5a:
23:ee:d3:82:0c:32:bd:3e:aa:e5:bb:53:c8:bf:ce:
68:a5:14:18:bc:c3:b3:de:b2:4e:93:bf:d1:be:b7:
35:6c:c8:9f:76:d6:95:b4:73:30:02:a4:4c:63:06:
6a:22:62:97:4f:94:d4:97:0a:ba:49:3f:0e:3c:92:
0c:ac:74:85:69:b2:61:40:75:0f:56:17:57:10:80:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:F7:FC:BA:C8:25:7F:0A:F2:2B:6D:CD:A5:EB:A1:8C:8F:54:71
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-f73_LrIJX8K8ittzaXroYyPVHE.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.96.0/20
Signature Algorithm: sha256WithRSAEncryption
10:3a:e4:04:cd:bd:d2:49:70:61:2e:bc:0f:b1:db:dd:f5:39:
8b:f1:78:d5:62:b8:a6:ba:55:27:22:2f:86:bc:2e:e7:64:4f:
41:17:ae:af:04:e6:1d:50:1c:9c:c3:50:11:22:a9:7a:7d:1e:
e8:c9:a7:d5:d6:d9:09:97:8b:15:eb:fa:44:55:ff:bc:58:ed:
50:43:e2:48:e8:da:c5:9d:b4:8a:14:d7:3f:5b:91:f2:b8:23:
92:e7:a0:f8:ad:cb:2c:d3:f0:b1:53:75:a2:8c:d6:f4:c5:6a:
5e:a3:64:1e:a4:a0:be:a3:4f:7f:75:8e:22:e5:ed:2d:02:d8:
82:0d:2a:c9:31:d7:dc:4d:c7:21:21:66:6e:16:ae:93:1a:b9:
87:88:e6:b7:69:4d:f7:e6:b9:84:15:fc:98:df:d8:ba:95:b9:
1b:0e:d5:8e:e3:eb:4f:b4:97:82:3a:9e:78:c9:b1:f9:5b:0e:
db:f7:54:92:9c:9d:53:1b:a4:af:7d:e7:ca:f2:20:ab:e2:e9:
0c:10:65:cd:aa:31:55:19:25:ff:ee:8f:5d:b5:e4:27:37:d4:
71:51:0e:45:3a:f5:f2:9e:27:5e:ab:7f:ca:fa:2e:8c:58:9c:
00:12:a3:61:da:0a:2b:80:2c:63:0f:a2:19:b0:4d:f6:5c:20:
a8:d0:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:00 2025 by rpki-client