Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/O_BJwoS7eGxNj2Cd3NTF9G1A2Kg.roa
File: O_BJwoS7eGxNj2Cd3NTF9G1A2Kg.roa (raw, json)
Hash identifier: G9E+Sxr4iemNv1V4CY1HvqVhFtkUJZ/Tda2UIdapoEE=
Subject key identifier: 3B:F0:49:C2:84:BB:78:6C:4D:8F:60:9D:DC:D4:C5:F4:6D:40:D8:A8
Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial: 19
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/O_BJwoS7eGxNj2Cd3NTF9G1A2Kg.roa
Signing time: Tue 01 Feb 2022 01:31:08 +0000
ROA not before: Tue 01 Feb 2022 01:31:08 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 240d::/27 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Validity
Not Before: Feb 1 01:31:08 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=3BF049C284BB786C4D8F609DDCD4C5F46D40D8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:94:6b:bc:44:a2:77:c5:fd:8d:a9:f8:2a:
31:ce:a1:c6:51:0f:cb:ab:e1:c4:96:2d:f7:55:45:
11:82:2a:93:04:76:ea:00:ba:26:55:94:1c:13:e3:
ee:a3:3d:db:ad:80:63:50:a5:3d:08:e7:4a:1a:62:
32:cd:eb:a2:01:a2:a5:5e:39:77:f7:86:76:15:40:
a1:f2:92:42:65:57:55:44:f9:f2:5d:d3:24:b0:ce:
ab:ea:b3:b5:b5:ca:0d:94:5f:0c:dd:e1:72:b6:d2:
dc:1b:90:0f:64:8e:7b:8e:aa:f1:2d:9f:fb:1c:ed:
ef:d4:85:ca:fb:be:d2:3a:56:ff:b3:03:fe:50:5b:
cd:4b:38:f7:ec:07:00:bc:14:5f:c9:c8:b3:89:61:
de:46:1a:f7:aa:ad:fc:e9:cf:2f:31:83:e9:bb:72:
28:e0:f8:93:fa:3c:20:33:ec:51:37:8e:dd:c7:f2:
5f:3b:f1:71:80:9c:5b:b3:ac:c4:e4:19:8b:c7:03:
16:41:91:c8:62:e0:21:c1:38:31:1e:fd:27:07:c9:
1a:13:f8:b8:e0:2e:c9:c1:69:5c:65:3d:0c:5d:6a:
c2:ca:cd:05:21:eb:91:68:66:f6:3b:9e:67:bb:12:
68:c2:6f:6d:8d:24:59:a4:0b:d7:25:98:28:c8:19:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:49:C2:84:BB:78:6C:4D:8F:60:9D:DC:D4:C5:F4:6D:40:D8:A8
X509v3 Authority Key Identifier:
keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/O_BJwoS7eGxNj2Cd3NTF9G1A2Kg.roa
sbgp-ipAddrBlock: critical
IPv6:
240d::/27
Signature Algorithm: sha256WithRSAEncryption
10:63:29:22:25:12:ce:eb:e8:dd:e4:5d:7c:d8:e2:f6:6c:f0:
c8:95:17:58:fe:37:35:e6:00:75:92:57:be:68:14:60:cc:f2:
9e:23:6b:1c:ad:b2:fe:f8:de:7f:a8:20:1d:f3:17:06:8d:58:
21:fd:12:65:f5:fd:94:2f:8f:bb:b7:27:eb:01:45:23:76:28:
fb:31:d8:86:cb:c1:ce:7c:2d:12:85:3f:dd:dc:81:40:3e:b7:
6b:d7:37:00:0f:58:b2:a6:b6:6e:df:e2:16:64:48:84:e9:dd:
f7:61:38:82:16:0a:7d:09:7b:fc:06:67:9f:20:e5:5a:8e:e2:
95:6a:86:54:eb:1b:a4:29:07:9a:d3:d2:ce:a7:db:45:f5:f7:
81:af:47:03:05:ad:67:2a:da:0e:91:9a:2b:15:2d:27:5a:23:
7d:f0:d5:ff:9f:3b:17:57:c4:4b:33:de:33:d3:1a:09:11:cf:
fc:cc:c7:e9:4a:26:fb:e9:9c:ca:da:f0:3e:3e:80:82:fa:1f:
89:29:0f:e6:bb:a9:5e:60:f9:9e:8e:1a:3b:6c:c8:7a:1b:6f:
e9:14:f7:2e:14:c1:d7:99:ee:1e:8e:ed:c4:a2:c0:5c:cc:3e:
32:32:cc:01:38:14:6a:5a:14:b2:58:96:ba:92:6f:1f:8a:bd:
22:cd:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:24 2025 by rpki-client