Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I4XczI7oGWI-1v5XWTn9JdhduLQ.roa
File: I4XczI7oGWI-1v5XWTn9JdhduLQ.roa (raw, json)
Hash identifier: jSWqGdsQD3DxKaib5dTrTZ7KzzgrkL9q+i3rezZ3nok=
Subject key identifier: 23:85:DC:CC:8E:E8:19:62:3E:D6:FE:57:59:39:FD:25:D8:5D:B8:B4
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I4XczI7oGWI-1v5XWTn9JdhduLQ.roa
Signing time: Thu 27 Jul 2023 16:50:13 +0000
ROA not before: Thu 27 Jul 2023 16:50:13 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.76.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:50:13 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=2385DCCC8EE819623ED6FE575939FD25D85DB8B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:89:39:01:64:9c:49:db:3d:33:2a:b4:3c:
43:a7:e2:f8:16:6d:d1:34:33:b8:57:72:cf:4c:32:
18:b5:0c:ef:c6:40:d4:f4:f5:96:ee:42:74:b7:67:
bb:a8:8d:21:19:87:ff:9e:bb:c4:df:69:21:34:81:
82:c9:c9:20:78:9c:16:89:c8:a5:e2:2d:c4:82:7e:
8f:34:5a:b6:25:b4:b0:90:7b:07:d1:78:d3:76:7c:
6a:60:d1:0d:a4:55:97:6c:51:b5:6f:dc:fa:8d:9f:
d7:4f:43:d4:27:23:96:8c:04:8c:1d:b8:e0:da:e2:
f2:c2:f2:8d:94:68:d5:a9:15:5b:17:db:ec:a6:8b:
64:ce:87:d0:02:2b:33:29:b9:71:db:5e:f4:6a:3f:
dd:c7:2c:a3:22:c0:5b:61:04:86:bc:96:a1:cf:c5:
27:6b:ce:99:b4:ad:9a:64:e3:e9:52:c1:a5:f6:e8:
57:21:0e:cf:1b:2b:b8:0f:1f:44:60:da:84:38:4c:
b4:c6:1d:82:1d:6d:66:3f:f8:b2:3d:46:aa:f4:53:
14:91:cc:45:68:45:90:de:04:68:fa:11:09:06:2f:
85:d2:6e:56:ff:75:73:ac:16:b3:4f:e1:bd:72:8b:
4e:88:13:9a:12:5e:4d:57:42:85:83:09:f3:cb:1e:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:85:DC:CC:8E:E8:19:62:3E:D6:FE:57:59:39:FD:25:D8:5D:B8:B4
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I4XczI7oGWI-1v5XWTn9JdhduLQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.226.0/23
Signature Algorithm: sha256WithRSAEncryption
16:3a:06:16:d4:cc:54:b7:cf:9c:ae:fc:f7:d8:d6:4f:ba:24:
39:7a:aa:d8:9e:75:8b:06:9c:37:43:08:47:46:bb:21:01:2f:
58:cf:95:34:76:3b:61:16:21:e3:0e:93:3b:87:b3:8d:d4:f1:
2e:f0:0c:25:e1:d0:fb:4d:8e:0b:02:53:b6:bd:49:a1:37:0a:
19:ac:9b:25:ed:f2:4f:5d:07:22:5d:a2:5d:ce:76:c8:5f:39:
39:76:6f:df:27:d8:db:e5:18:f5:65:a1:fd:55:1c:43:0b:e1:
0b:63:39:c6:f8:70:56:8e:47:15:80:43:4f:8c:11:b6:3e:b0:
90:58:3b:67:b1:97:55:86:4a:1e:3d:dc:ff:85:b7:45:1e:48:
25:c2:8e:fe:79:9b:2f:79:bd:9b:ca:5c:10:6d:b2:1c:81:55:
ee:c1:7b:39:5d:18:d0:12:da:b8:92:85:a9:bf:2c:31:00:bb:
0a:9e:c8:57:4a:4f:14:00:c5:eb:fc:7b:a8:3b:f9:77:5e:08:
19:11:96:64:cb:06:67:c4:ee:42:c1:91:ec:5f:84:37:3a:2a:
5e:ee:13:ad:37:15:bd:3d:78:55:c2:76:e8:0f:96:dc:2c:ca:
a0:11:f5:8f:c1:73:9a:1a:74:c6:18:5c:39:42:af:bb:35:d3:
e0:df:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:16 2025 by rpki-client