Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/P2VhoFE-h6jR9vqkZgtziYVSXK0.roa
File: P2VhoFE-h6jR9vqkZgtziYVSXK0.roa (raw, json)
Hash identifier: 4KebC6+KC/OiuHsKJDV9jx12gW0SVQzGYIkFsI6sxbU=
Subject key identifier: 3F:65:61:A0:51:3E:87:A8:D1:F6:FA:A4:66:0B:73:89:85:52:5C:AD
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 0C
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/P2VhoFE-h6jR9vqkZgtziYVSXK0.roa
Signing time: Tue 20 Jul 2021 04:51:49 +0000
ROA not before: Tue 20 Jul 2021 04:51:49 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 63789
IP address blocks: 202.9.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Jul 20 04:51:49 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=3F6561A0513E87A8D1F6FAA4660B738985525CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:08:0d:54:f1:0f:52:3b:c4:07:2d:6a:88:
cf:e9:52:a1:3f:44:6e:12:bf:5a:8b:89:28:30:f8:
d4:9b:ae:b2:17:d1:48:ef:55:1e:57:a7:ad:91:aa:
be:1c:e7:0c:fc:8b:65:59:98:51:88:d1:cd:c2:a3:
37:ab:30:15:28:31:61:40:25:3a:a4:f3:53:c6:86:
03:a4:46:31:e2:42:a7:47:d3:df:b1:b9:d1:69:dd:
cc:53:91:8e:31:74:8d:8b:d4:ea:26:89:25:3d:d1:
25:6b:cb:38:17:b0:42:d4:5c:55:50:15:c8:f0:7a:
11:28:c0:f6:fb:0b:fc:56:bd:f3:02:d9:c5:49:11:
5e:30:e1:06:fe:cb:9d:d2:85:24:68:b7:b7:fb:b0:
69:e8:b8:cc:6c:8a:06:99:90:a9:55:c4:8f:fd:03:
d2:0d:da:92:f5:f1:a3:2d:a4:72:31:dd:76:cc:bd:
4e:95:c3:f3:67:00:12:27:88:14:b0:24:f6:7e:4b:
cb:ee:3d:fe:49:64:96:20:0a:31:7c:d9:b0:d8:5e:
09:9d:bd:fa:33:fd:89:ba:31:88:d1:25:c4:b6:06:
e3:2d:84:ab:eb:ab:88:c1:dc:68:49:3e:69:49:f2:
9a:ed:72:38:ba:4f:11:a3:e9:fa:df:d4:96:fa:ce:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:61:A0:51:3E:87:A8:D1:F6:FA:A4:66:0B:73:89:85:52:5C:AD
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/P2VhoFE-h6jR9vqkZgtziYVSXK0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/23
Signature Algorithm: sha256WithRSAEncryption
84:48:28:79:a2:a5:fd:74:af:92:11:c4:f8:74:ee:d6:37:48:
d1:28:9b:24:94:a6:5d:3f:c2:e3:f6:43:02:1a:31:bb:30:c9:
45:af:d5:4b:86:13:db:fa:ef:23:71:b7:68:c4:67:a4:0f:ac:
7b:68:79:42:fc:93:a2:a7:a0:ef:0c:6a:85:70:55:72:ce:24:
bd:bf:f3:4e:16:57:45:a6:44:19:8e:7c:e6:92:6a:98:a4:eb:
70:95:08:ed:f4:b2:8b:fc:7d:24:d2:db:a8:33:b7:75:a5:7c:
66:29:af:94:83:04:50:5e:8e:d5:6d:eb:ec:21:f7:b3:81:d9:
06:48:52:b7:3d:8d:f0:a7:66:b0:1e:be:5e:1e:ee:43:10:2b:
81:ca:c1:c6:4e:df:1d:1f:8b:dd:e9:f8:78:37:9c:76:fb:ef:
9a:49:f3:2f:9a:7a:03:8c:e5:f1:b5:f4:2d:5d:c9:0b:6a:8e:
08:81:ec:de:a8:c4:10:71:53:95:41:ec:26:28:0d:fa:23:52:
10:ab:7e:70:bd:e1:20:33:bb:d5:0a:47:da:0c:c1:0f:19:b0:
7e:d7:e0:ad:77:72:54:b5:2b:55:6a:9a:32:63:a4:f8:2d:22:
2e:42:a6:51:09:1e:be:83:18:5e:b3:34:80:4b:1c:46:49:54:
23:53:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:55 2025 by rpki-client