Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/NYWuWKJiu4svYAdme3ihQJtqfcc.roa
File: NYWuWKJiu4svYAdme3ihQJtqfcc.roa (raw, json)
Hash identifier: VVaTUqdHAAdIjFxhGaenr3qfj9nOEg+qEkmbpnIs2LQ=
Subject key identifier: 35:85:AE:58:A2:62:BB:8B:2F:60:07:66:7B:78:A1:40:9B:6A:7D:C7
Certificate issuer: /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial: 20
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/NYWuWKJiu4svYAdme3ihQJtqfcc.roa
Signing time: Fri 03 Sep 2021 11:46:44 +0000
ROA not before: Fri 03 Sep 2021 11:46:44 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9607
IP address blocks: 2001:370:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Validity
Not Before: Sep 3 11:46:44 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=3585AE58A262BB8B2F6007667B78A1409B6A7DC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:66:6f:37:27:15:dc:ed:f4:29:94:a8:d2:
c7:bd:7d:67:d1:d1:9f:72:a1:a6:89:09:02:7e:9f:
c8:ed:e1:dc:33:42:d5:10:ae:74:86:6d:25:59:f7:
8d:0a:79:77:fc:9b:81:a1:e5:12:66:a8:1f:9c:67:
d9:d8:ef:be:c8:ef:5b:d5:a6:f0:92:f1:5a:a8:d3:
83:d0:aa:3c:6f:36:50:11:ac:b5:e3:ee:65:0c:a0:
b8:d0:08:5f:29:d2:0f:91:7f:9c:b6:2d:68:6f:2a:
43:82:75:4f:8e:51:b5:db:b6:f9:0d:e5:05:a2:a3:
29:63:37:af:dc:a0:cc:55:f6:8d:88:f7:a1:ae:8c:
20:26:06:e9:1c:08:6b:90:92:98:70:4d:eb:c6:90:
fe:d3:19:8f:d6:80:06:2d:fc:61:ef:2e:bb:35:79:
8a:44:9d:fa:0b:fd:53:db:7f:60:2d:9f:33:33:03:
8f:cd:72:95:ac:40:14:41:98:d7:06:db:81:7a:15:
85:14:44:4d:d9:d1:ac:c2:81:b3:c8:b2:4d:1c:df:
6d:ae:fa:cf:d2:d8:ce:ef:f4:17:62:e0:44:d6:ea:
c7:a7:7b:2a:1b:46:ec:ce:e7:d7:c9:05:33:33:60:
ee:59:1f:95:44:a7:a7:d3:15:f5:fd:d0:ab:b1:f8:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:85:AE:58:A2:62:BB:8B:2F:60:07:66:7B:78:A1:40:9B:6A:7D:C7
X509v3 Authority Key Identifier:
keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/NYWuWKJiu4svYAdme3ihQJtqfcc.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:370:a::/48
Signature Algorithm: sha256WithRSAEncryption
32:77:c6:e4:fb:48:36:60:02:10:21:89:04:ae:c0:d5:66:c7:
47:ad:ec:e1:00:1d:f9:cb:32:67:58:45:cc:17:0d:ed:78:92:
f9:28:09:e7:21:a5:0a:2a:96:24:66:06:06:6c:c4:1b:ff:ae:
d9:2f:bf:84:de:60:8f:e3:2d:11:73:39:b7:8b:c9:89:ae:d4:
a1:9b:02:51:e2:a6:7c:9d:c7:db:f3:d6:36:ac:93:d2:87:33:
07:c1:23:b0:e1:44:07:b9:b3:de:99:80:57:ed:d8:c1:dd:73:
e3:91:be:ff:57:00:55:ce:c8:73:46:d4:0b:8e:35:71:1a:83:
6b:b6:98:f8:b3:0f:0d:e1:b2:8d:ca:80:b6:d8:cb:b9:9f:50:
e9:d6:5f:00:3a:f1:8a:26:19:f0:4a:90:f5:eb:fb:f3:f7:96:
1c:7f:7a:3f:cd:e0:77:81:7c:2d:23:71:81:5e:ef:bd:a6:c9:
b2:8d:70:31:9c:34:4e:6f:c9:b3:6f:17:f3:93:23:09:20:0c:
db:36:d9:f7:cc:15:13:9b:34:64:9e:bb:bd:47:48:c3:dc:e5:
20:6d:3a:b1:33:62:ad:80:a7:f8:04:b3:eb:7d:85:dd:bc:4b:
5d:5c:00:ac:9e:cf:d6:33:d4:1f:4e:09:3b:34:0c:0c:1e:ad:
3e:e9:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:53 2025 by rpki-client