Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa
File: Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa (raw, json)
Hash identifier: E3zjs01DmPDkM9CMM/pDYdwJnyhnpmDPkrCzd/P4wig=
Subject key identifier: 63:F7:52:A3:27:64:69:7B:E0:D5:DA:49:19:8A:A9:8D:B3:AF:FA:14
Certificate issuer: /CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
Certificate serial: 0E
Authority key identifier: 79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa
Signing time: Tue 03 Oct 2023 08:30:27 +0000
ROA not before: Tue 03 Oct 2023 08:30:27 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 131988
IP address blocks: 2407:b0c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
Validity
Not Before: Oct 3 08:30:27 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=63F752A32764697BE0D5DA49198AA98DB3AFFA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:48:09:bb:4b:f2:2e:e3:3c:b0:12:8f:b7:
9e:93:5d:4d:9d:04:5b:2c:53:1a:40:c3:93:56:c1:
8d:8b:d3:fb:35:0c:f7:4a:97:40:ed:e8:73:b0:49:
98:d5:0b:42:c0:b3:c8:8d:4b:eb:ae:73:55:f1:67:
52:90:f9:9c:5f:db:8e:00:17:36:8e:a0:78:ba:d2:
c2:31:a6:4d:a2:d4:b0:93:5f:fb:63:2a:0f:0f:da:
e1:00:40:7d:05:4f:c5:56:99:ac:24:9a:c2:23:66:
2a:2f:62:41:b3:09:f5:ae:cf:ff:6f:62:76:de:a9:
f5:f4:0b:aa:83:e7:6a:bd:60:83:3e:6a:8a:64:d1:
20:a9:51:96:4a:ba:5e:5c:34:e7:2a:e6:e7:67:b7:
16:52:08:3c:48:6d:c9:7e:9c:f7:0a:10:27:87:0c:
1d:5b:31:f4:fe:b4:af:be:c1:b0:f8:c8:c1:7b:0e:
cc:ed:0a:2e:96:7c:d3:2b:17:3b:0a:1f:73:d9:4e:
aa:1d:7e:8f:72:54:59:71:c7:df:33:0a:59:0f:54:
01:90:b1:98:a1:1d:70:0e:da:d8:78:b9:38:d9:17:
3a:2f:0f:ff:20:c2:97:b1:90:28:3d:6b:7b:86:15:
f7:1e:da:22:26:e7:7f:7a:20:24:92:bb:24:7c:a4:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:52:A3:27:64:69:7B:E0:D5:DA:49:19:8A:A9:8D:B3:AF:FA:14
X509v3 Authority Key Identifier:
keyid:79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:b0c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:99:72:c9:86:27:27:66:eb:aa:66:22:7c:bf:a0:56:c5:2e:
ed:90:25:e6:66:fa:d8:b3:f6:7b:b1:07:43:cc:a0:e4:86:b8:
3b:65:81:f6:ff:1a:c3:83:fe:e3:bf:84:4c:02:86:07:0c:40:
5d:e5:17:ba:71:ea:c8:08:37:38:49:a0:48:ee:fb:6f:58:89:
96:b0:f2:50:57:3a:48:96:3e:d0:dd:3d:59:7c:3d:bd:0c:e9:
f3:96:67:de:de:b5:3d:02:30:4c:f2:ad:b1:03:b2:5b:03:0a:
31:25:c8:a6:98:16:3d:41:c2:06:f8:4d:aa:16:b3:e0:46:f6:
d6:2a:8b:62:36:d9:af:01:21:9c:f9:ae:d4:42:e8:fd:12:67:
c1:a0:b2:ed:f3:54:db:1f:26:08:87:cb:63:53:52:4b:5f:9f:
6d:cc:b7:62:2b:46:ca:46:e7:1e:94:28:e5:36:8c:cf:46:4e:
31:91:1a:98:d1:94:2a:1f:89:d9:52:9a:66:79:a8:17:45:b6:
4a:c0:9e:48:d5:95:b9:82:2d:24:dc:9c:e9:28:1e:ad:7c:c7:
6b:bf:25:9b:34:72:13:b6:ac:d3:38:b6:61:6f:2e:c0:02:6f:
91:a8:c9:32:3a:81:95:e6:de:b7:df:b3:bf:a3:5f:4c:38:94:
87:43:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:12 2025 by rpki-client