Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/C_isFIQKGjnky19eAAA3vMIdiAo.roa
File: C_isFIQKGjnky19eAAA3vMIdiAo.roa (raw, json)
Hash identifier: VAWIKtqPamTzulB9gMgRVgUzh+87n5a7imYemFnnYg4=
Subject key identifier: 0B:F8:AC:14:84:0A:1A:39:E4:CB:5F:5E:00:00:37:BC:C2:1D:88:0A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 50
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C_isFIQKGjnky19eAAA3vMIdiAo.roa
Signing time: Mon 27 Mar 2023 16:04:25 +0000
ROA not before: Mon 27 Mar 2023 16:04:25 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.66.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:04:25 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=0BF8AC14840A1A39E4CB5F5E000037BCC21D880A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:23:66:da:4c:76:7e:7f:57:ec:76:4f:0a:
25:79:a0:66:6e:11:dc:c6:6e:7f:cc:96:31:7e:e6:
c0:a8:fc:21:d5:52:c9:ac:73:0a:d7:7a:6c:62:14:
1c:2d:7c:d7:b8:f7:8c:ca:29:05:10:a6:88:5d:3a:
78:fc:c2:df:62:44:34:2a:10:c8:67:4b:de:89:c7:
19:12:f9:d6:fe:5f:54:3b:72:1f:c5:ef:24:d0:ef:
2c:23:a6:ef:77:c8:13:60:df:71:93:77:d9:26:00:
e0:37:fc:44:6e:d0:84:1a:98:5a:c4:69:a4:d5:e9:
4a:91:cb:ff:9a:ee:a3:f8:d2:6d:47:63:a1:02:cf:
47:ae:24:bf:f8:2f:b0:43:c2:26:43:1c:ed:ef:28:
e4:19:b9:d2:c9:72:ac:9c:91:3a:54:86:8b:dc:e5:
25:c4:fa:84:c6:00:42:5b:89:18:39:e1:c0:a9:61:
db:ea:ae:19:63:3e:f1:2b:ad:5c:4b:68:d3:9d:8d:
78:9c:3b:7f:35:b0:26:50:46:28:7c:10:71:de:e7:
e7:5f:85:52:b7:79:01:e2:ca:d3:ef:92:a0:89:8c:
e5:89:46:1a:c9:d9:aa:7e:09:e4:3b:85:84:05:e5:
a7:f3:95:42:b1:c5:73:e5:41:0c:5a:77:38:ea:3e:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F8:AC:14:84:0A:1A:39:E4:CB:5F:5E:00:00:37:BC:C2:1D:88:0A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/C_isFIQKGjnky19eAAA3vMIdiAo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e8:6e:88:0f:22:9d:1e:73:1f:71:c3:d2:92:3a:13:30:86:
f2:38:38:18:8d:69:b9:8a:d8:93:2c:9e:ca:5c:4c:7b:87:14:
41:f0:48:05:a2:7a:0e:3a:9c:0e:05:cd:e4:90:1f:53:85:3d:
67:25:55:ce:63:f5:1b:db:ca:ba:fb:fa:fb:c4:5c:a2:e7:e6:
4a:42:86:a9:79:b4:88:42:07:06:d7:55:93:0f:ca:da:0f:4e:
94:bd:42:62:05:7b:0c:b7:a6:b7:d0:0d:b1:70:23:90:cc:f8:
a0:50:ef:42:e3:7f:03:8b:1a:0f:28:f4:3a:46:c8:b1:0a:f3:
c3:3d:68:20:7b:d2:11:6e:6c:8c:69:ce:c3:cb:5f:1a:74:5b:
97:06:4b:04:27:7d:a2:77:6f:6a:ea:b8:62:27:0a:63:cd:bf:
3e:b6:1a:ad:6e:76:20:cd:15:dc:ea:99:08:5c:c0:45:3d:a3:
7b:bb:3b:87:7c:1d:3d:4e:79:ef:ff:74:e9:5c:b2:d9:47:70:
aa:38:56:2c:f4:4d:c7:6c:9c:e8:07:0d:c1:9a:e4:ee:08:03:
c6:6b:dc:79:22:32:4a:70:a5:43:fe:c7:b4:26:a7:b4:f8:99:
46:ab:1d:9a:3a:cc:07:d6:64:6b:19:2d:5f:64:65:2a:2c:de:
d0:ad:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:47 2025 by rpki-client