Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1TBMVLV8wHXxbh4lEVDQ5vbqb6Y.roa
File: 1TBMVLV8wHXxbh4lEVDQ5vbqb6Y.roa (raw, json)
Hash identifier: ij7DUalHvWrIjNwwxtry2GuuW5WAbp5k18vjVU72fV0=
Subject key identifier: D5:30:4C:54:B5:7C:C0:75:F1:6E:1E:25:11:50:D0:E6:F6:EA:6F:A6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 021B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1TBMVLV8wHXxbh4lEVDQ5vbqb6Y.roa
Signing time: Tue 30 May 2023 16:30:27 +0000
ROA not before: Tue 30 May 2023 16:30:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D5304C54B57CC075F16E1E251150D0E6F6EA6FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:57:d2:4f:b8:d0:63:b6:be:31:56:81:34:
d9:84:26:32:68:2a:6f:d8:93:0e:8f:7b:e7:79:90:
54:83:35:7e:f3:bc:25:20:81:3e:ad:d2:b7:98:01:
bc:0e:75:b0:bf:8a:71:90:10:4f:eb:03:1a:9b:63:
51:1d:ef:69:8e:ae:32:e4:06:62:c3:9f:76:53:55:
36:e4:64:37:79:1f:9b:24:d7:2b:fc:ca:97:a5:0c:
eb:72:f5:33:61:2d:45:dd:e8:f7:48:66:87:46:15:
29:88:84:fa:ef:25:22:a6:45:47:53:7e:ca:1d:2e:
b8:c8:ff:dc:be:59:1c:3c:2d:ae:8f:17:fc:7b:c9:
56:44:28:f1:e2:b3:d1:38:b8:e3:39:74:f8:8d:d6:
17:b7:a6:43:ca:21:45:69:a2:5f:ce:97:bd:d1:3c:
4b:f7:0a:85:20:62:09:8b:20:80:6a:6c:14:38:fe:
2e:c1:f7:79:e8:e9:8a:cc:84:0b:e5:22:20:7f:10:
00:77:6e:dd:1f:9a:53:45:53:7b:42:55:3c:11:e4:
0d:17:ee:d3:d9:54:49:98:9a:9e:85:df:5a:84:1a:
ed:1c:69:30:6b:b1:97:d4:63:d5:57:d9:ad:76:40:
c2:66:fb:fa:17:a4:0b:12:71:05:0b:0a:8c:a2:8c:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:4C:54:B5:7C:C0:75:F1:6E:1E:25:11:50:D0:E6:F6:EA:6F:A6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1TBMVLV8wHXxbh4lEVDQ5vbqb6Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.128.0/18
Signature Algorithm: sha256WithRSAEncryption
72:9d:ae:4e:45:47:ae:cf:69:03:7d:1d:76:da:a3:82:9d:b1:
d2:64:5c:8a:50:0f:56:34:94:3d:be:3d:ef:cd:2b:5c:b7:15:
84:df:9f:ea:46:bd:c0:27:22:c4:9c:cc:8f:4c:8f:b1:fa:92:
e9:03:27:4c:b8:43:9e:ed:9e:00:f9:51:43:82:81:65:99:76:
63:44:06:1e:3c:fe:dc:6b:8f:6e:c2:e6:aa:46:92:72:c5:9c:
92:6a:c3:9e:e4:af:aa:23:97:25:c8:d5:0b:26:68:c4:69:91:
a8:31:68:4b:b9:99:e4:d2:09:de:28:dd:79:0a:35:63:ba:fd:
7b:10:4d:93:95:cf:83:83:68:2e:e7:57:0c:3c:1e:00:15:9e:
98:b5:d3:af:25:c0:5e:84:5c:99:f1:aa:84:57:80:be:ff:2f:
e5:c2:c1:77:c6:68:2e:06:0e:a7:07:ba:35:81:76:c9:8e:7f:
70:7e:33:a0:e6:a5:27:d1:4f:12:23:e7:bd:b9:60:47:21:fe:
d5:f7:5d:7e:cc:95:59:61:87:32:0f:a4:15:18:db:53:f2:f5:
73:30:a4:d4:8d:60:a1:ac:6e:8e:a0:f6:14:ab:c9:09:ef:47:
f4:0b:ec:75:a2:b1:40:ac:31:7e:ba:2d:f5:df:77:ff:a7:f8:
7f:03:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:00 2025 by rpki-client