Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/Jb35t5HhdxwQb701wALcluArHE4.roa
File: Jb35t5HhdxwQb701wALcluArHE4.roa (raw, json)
Hash identifier: 2VPPAGJtGkvToCF/9SkU42yg27CaHAaEsQmaVQVw7CY=
Subject key identifier: 25:BD:F9:B7:91:E1:77:1C:10:6F:BD:35:C0:02:DC:96:E0:2B:1C:4E
Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial: 2B
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/Jb35t5HhdxwQb701wALcluArHE4.roa
Signing time: Sun 01 Jan 2023 01:29:25 +0000
ROA not before: Sun 01 Jan 2023 01:29:25 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 2001:3b8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Validity
Not Before: Jan 1 01:29:25 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=25BDF9B791E1771C106FBD35C002DC96E02B1C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:80:cd:92:fb:fc:90:62:b0:07:84:c3:4a:
cd:49:bd:20:57:2b:86:ae:00:08:61:78:36:3a:75:
47:58:c8:4d:b7:d2:1e:08:c7:22:88:25:8d:f8:9a:
26:05:03:6d:1c:23:aa:44:8b:e9:f5:af:96:44:50:
a6:6f:54:18:1a:2f:a4:5d:ca:87:11:f1:41:93:3b:
72:e3:be:91:36:68:33:47:ed:4b:40:58:f0:af:58:
14:83:9c:b0:61:50:34:e2:55:ed:1b:bd:4a:24:42:
6f:96:2b:53:09:4b:fb:b1:09:cb:ec:28:5d:f5:76:
cf:17:ac:8f:d0:3e:7c:6e:e8:5e:59:37:7a:16:3e:
83:45:a6:57:4a:4c:1d:94:41:82:fe:bf:d7:f2:6f:
d4:54:b8:6a:00:28:1a:92:d8:c5:b8:1e:6a:a9:c7:
84:fc:5d:6c:78:13:a9:ea:ef:c9:7a:b1:52:5d:d0:
fb:8f:11:1d:20:c2:f8:22:0c:87:ec:8f:0f:ed:fd:
9c:53:37:4f:90:e3:93:34:8e:20:b4:e5:b3:f7:c8:
e1:43:80:07:d2:ff:a2:d8:e7:ef:4c:0b:f0:a7:8b:
2c:d1:a3:a4:aa:ae:fe:d4:f0:e9:c8:66:86:90:1e:
e0:10:6e:99:89:ca:cc:82:e1:2d:e5:44:e9:2e:f9:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:F9:B7:91:E1:77:1C:10:6F:BD:35:C0:02:DC:96:E0:2B:1C:4E
X509v3 Authority Key Identifier:
keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/Jb35t5HhdxwQb701wALcluArHE4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
80:11:54:f8:3d:08:c6:63:92:59:70:b3:5b:92:ff:68:b3:c2:
3d:90:7b:54:c2:0f:19:5b:26:b4:2d:a9:45:0f:65:37:0f:c5:
ff:99:dd:68:1f:f7:ef:72:4a:85:c8:59:91:17:db:88:23:44:
08:3a:e8:f8:f5:f8:26:1a:b6:2d:f2:f2:83:32:e5:1c:00:57:
7c:08:3e:5e:38:69:2a:02:35:f8:ae:2d:25:2b:73:de:bd:99:
78:d9:3c:f3:73:91:e6:6a:9e:e6:29:8a:fe:76:c3:6d:2a:fc:
5a:ed:a8:6b:39:03:8a:b7:a7:b6:9a:0f:fc:55:72:87:f3:1f:
d1:46:0a:06:5c:4f:58:d4:ce:ca:8d:aa:e5:a9:d8:44:e5:fb:
9c:ad:31:d1:88:9c:f5:b2:10:90:c2:b6:4c:6b:4c:74:bd:39:
c5:75:69:3e:c0:5c:19:9f:07:c9:b7:44:1a:c3:82:b4:37:dd:
94:92:2d:7f:60:47:6f:78:a3:f8:c7:d6:6d:ea:bf:79:26:47:
06:33:98:4b:a5:8d:b1:41:31:22:9a:20:e1:af:72:b4:56:c3:
2a:36:82:f3:ce:ea:4d:9f:5f:7c:9e:8d:ac:f1:01:08:1c:1c:
cc:b5:83:a7:87:fe:ef:28:b1:24:d3:09:e5:ed:4d:d9:a4:d1:
e0:17:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:26 2025 by rpki-client