Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYKi1ICQjN1INr_wHpLUaY1yT7Q.roa
File: BYKi1ICQjN1INr_wHpLUaY1yT7Q.roa (raw, json)
Hash identifier: QfEhDrW9Xb+QS6xLK33WK9Ysd38S/spuzFW4HqIQlQg=
Subject key identifier: 05:82:A2:D4:80:90:8C:DD:48:36:BF:F0:1E:92:D4:69:8D:72:4F:B4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04D7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYKi1ICQjN1INr_wHpLUaY1yT7Q.roa
Signing time: Thu 27 Jul 2023 16:50:04 +0000
ROA not before: Thu 27 Jul 2023 16:50:04 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 211.14.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:50:04 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=0582A2D480908CDD4836BFF01E92D4698D724FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:8f:e3:7f:b3:e9:30:56:05:66:98:44:06:
68:98:f6:21:47:a6:9f:16:50:95:86:bc:d7:c3:03:
a7:19:b2:2f:ce:bb:24:9b:0a:b2:88:8c:69:13:7e:
0d:3b:84:97:81:d2:24:ff:73:36:77:26:b8:41:b5:
36:5a:4f:a2:91:c3:a1:0e:39:bf:3c:0a:68:89:d3:
4f:d0:d0:6f:5f:ff:4c:80:a6:1d:32:0c:a4:a6:0e:
d8:1b:40:3b:a9:ae:a4:da:8c:46:9f:f8:85:1d:10:
4f:6e:4d:f0:87:88:18:d8:1d:2d:48:b9:31:8c:63:
c7:6c:e2:c6:6f:d4:4c:1d:3a:f5:c7:7d:39:f5:43:
86:c1:37:86:06:4d:ad:c3:15:37:b9:d0:62:64:e3:
c4:7a:2f:86:b9:f1:7d:f3:0f:e2:30:57:32:05:a3:
03:f2:9f:b4:84:0a:c7:6c:aa:32:ec:93:3f:1c:96:
a0:34:80:00:37:b9:ba:cc:96:8e:19:7d:4d:97:dc:
e7:19:63:17:54:39:74:b5:80:fd:00:b5:6e:31:6a:
66:ac:5f:bd:a7:88:52:4a:be:d9:e3:d6:a3:fa:61:
d6:29:78:e9:69:d9:26:81:2f:03:31:80:8b:15:41:
a6:ab:9e:fd:e9:1b:41:9f:2f:1f:3d:70:d6:b3:b0:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:A2:D4:80:90:8C:DD:48:36:BF:F0:1E:92:D4:69:8D:72:4F:B4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BYKi1ICQjN1INr_wHpLUaY1yT7Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.96.0/22
Signature Algorithm: sha256WithRSAEncryption
37:f9:32:42:8e:4f:77:78:36:86:5b:e9:41:e7:47:94:e9:ed:
f3:6e:ba:b6:50:80:88:95:ea:40:9e:c2:fb:56:de:f6:73:5b:
63:18:6b:76:bc:88:a0:ca:32:2b:09:ec:42:f1:ea:c7:f9:cf:
86:c6:a7:e8:e5:3c:9c:9c:ba:a2:f0:07:ee:f0:d9:28:af:4b:
52:fd:18:6c:fc:96:9d:15:6a:e7:2b:1c:ea:9f:67:76:eb:6b:
13:c0:84:79:b1:d9:f7:85:8b:0c:fa:12:d8:3e:7e:1e:cb:d5:
32:4d:47:5e:86:65:90:5e:ff:d3:4c:80:f9:3a:00:75:9e:f6:
54:ff:2a:3c:f6:34:24:8a:5c:4a:17:f5:47:ff:c6:f8:57:a1:
a6:3e:ca:70:4f:c9:e9:be:47:dd:cb:fd:76:5a:46:ba:f3:da:
67:3c:5b:5a:e2:8a:32:03:88:8a:ba:d9:d5:a8:cd:dc:a5:5b:
71:a4:47:ed:e9:19:01:52:55:e9:fb:44:67:30:8c:d7:64:4e:
4d:3e:af:fa:2f:53:53:fb:4c:1d:d7:72:b2:86:26:9f:63:22:
1a:b5:f7:c0:42:45:55:b3:6f:f0:8f:1b:ea:55:ac:53:c5:af:
74:68:46:fc:02:c9:be:95:aa:e3:6d:fb:d0:1b:de:47:44:e9:
b4:3a:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:24 2025 by rpki-client