Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/COn_1ylDaJA5IhW2aFfzLomVDKk.roa
File: COn_1ylDaJA5IhW2aFfzLomVDKk.roa (raw, json)
Hash identifier: N0XXKCyoS5PyCjbh053D32pE0nkNRnIV9xoYdHvFtyk=
Subject key identifier: 08:E9:FF:D7:29:43:68:90:39:22:15:B6:68:57:F3:2E:89:95:0C:A9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 01DC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/COn_1ylDaJA5IhW2aFfzLomVDKk.roa
Signing time: Wed 24 May 2023 16:40:37 +0000
ROA not before: Wed 24 May 2023 16:40:37 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:40:37 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=08E9FFD729436890392215B66857F32E89950CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:42:17:c1:17:4e:0b:88:13:17:20:72:5c:86:
c0:25:21:18:5a:0e:74:13:68:45:c1:8b:c2:fb:6c:
9a:90:36:7b:ec:2c:c2:6e:dc:f8:80:4d:18:e4:f2:
91:f7:91:ae:cf:5b:49:d1:37:da:09:29:46:43:89:
e3:6f:f5:38:17:ab:c6:7f:5a:66:5e:6d:d7:0f:96:
1e:ce:31:11:50:d3:f8:93:7c:0f:04:e1:d5:aa:be:
b4:30:02:3b:78:97:2e:04:ab:80:00:5c:85:b3:1d:
b8:9f:25:f1:a9:7a:98:31:f3:f1:a4:c1:ab:6f:28:
a4:01:fe:3c:8f:66:eb:0d:05:8c:11:29:e4:21:66:
4d:89:92:78:b8:53:68:f7:d2:91:d9:58:2f:be:55:
75:b8:e8:f2:ee:7b:d8:a9:8b:51:56:28:fa:33:44:
d7:58:67:cf:4b:17:d7:ae:93:99:f3:f1:56:2f:34:
ae:34:b6:e7:69:15:f9:3f:92:b8:18:29:57:8b:10:
a7:bb:a2:5a:49:b8:f3:56:fb:c4:d3:69:1d:4e:b8:
c8:9e:81:9e:c4:05:3f:bf:9c:0e:47:dd:06:b8:d5:
36:43:ba:55:f1:b1:c5:07:a1:af:55:f4:5f:e1:98:
55:f6:29:47:81:81:bd:35:9f:70:df:82:af:6d:66:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:FF:D7:29:43:68:90:39:22:15:B6:68:57:F3:2E:89:95:0C:A9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/COn_1ylDaJA5IhW2aFfzLomVDKk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:df:bc:d4:61:fb:84:b7:e8:cb:07:6d:80:f7:48:41:c3:e3:
2f:80:17:8e:ec:c2:06:2a:3f:b7:12:a8:b3:f9:c5:9d:8d:43:
c2:de:72:eb:0f:16:ff:71:ff:8b:32:ae:62:6e:a4:35:75:e1:
38:36:dd:e2:88:a9:f7:36:c8:9a:dc:12:f9:a4:ac:21:30:c1:
9c:4c:43:e3:90:58:fa:f4:f1:37:60:78:8c:08:ff:a1:91:0a:
7c:89:85:45:f5:f2:f3:fc:37:a7:a9:5d:7a:27:ab:17:ab:67:
30:7e:28:f2:55:b2:90:cd:2f:c3:1d:58:4b:5f:c4:36:d8:16:
67:ca:e2:a5:35:74:0c:7e:8e:2f:b6:e4:99:d7:cd:58:b3:96:
a9:65:06:ad:22:94:02:02:61:c6:d9:76:a3:62:20:ba:64:5a:
36:59:41:30:9f:3e:bf:de:f2:6b:40:7c:be:27:ba:31:76:c5:
79:aa:43:46:90:90:13:a0:db:03:b3:61:da:2b:50:30:e5:25:
00:9e:11:99:21:7d:71:9c:df:cf:a7:7a:9d:40:d6:89:06:de:
18:05:a4:84:49:00:3b:4f:e5:23:a1:72:93:58:13:99:0a:49:
14:80:e3:d2:ce:fb:b6:60:41:e0:31:26:54:00:04:03:2d:c9:
de:a6:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:26 2025 by rpki-client