Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa
File: Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa (raw, json)
Hash identifier: EtTO0AxavJVRTxfMoUL+U98eLUehheyiJ0KUlurawEY=
Subject key identifier: 43:70:84:12:CC:EB:E4:62:18:9C:AC:BE:C0:D3:2C:DC:82:F4:A9:B8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0488
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa
Signing time: Thu 27 Jul 2023 16:44:13 +0000
ROA not before: Thu 27 Jul 2023 16:44:13 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:44:13 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=43708412CCEBE462189CACBEC0D32CDC82F4A9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:7d:46:d1:8a:f3:83:04:08:f1:9a:4e:1a:
e3:a1:1e:c1:45:e3:96:d8:9b:c5:84:91:a2:13:d6:
6a:e5:9d:f8:0d:ab:54:8c:b4:21:b6:30:f6:c8:59:
2c:de:af:79:b5:8c:6b:ba:e0:90:51:09:e5:51:90:
84:dd:99:1c:f2:1e:df:55:eb:73:81:95:92:0e:3a:
13:64:29:1a:f4:b6:0b:8c:6f:e2:96:46:17:af:80:
6a:56:98:4e:bc:9d:df:73:d2:5a:db:ab:b1:8a:25:
39:75:34:00:65:91:52:61:4d:77:18:16:0e:cd:ff:
38:85:0d:9a:f5:de:0f:7c:70:d2:dc:5f:ac:7d:35:
b3:bb:c1:2f:bb:b5:be:03:a3:f1:22:1d:36:9c:7e:
d4:9e:9a:30:ad:3f:a9:a8:84:72:e9:a1:05:6d:6c:
d0:d7:a1:f0:80:5d:85:6e:a7:30:b3:76:48:14:3c:
68:43:d0:56:83:8d:69:8f:4f:9b:83:eb:1f:87:78:
ca:ae:ec:9b:c4:c7:b7:65:3d:3b:14:b9:d4:65:2a:
13:b2:d5:74:8a:8b:e9:3c:a9:5d:43:a2:d1:db:f0:
b9:1d:6c:c4:2d:f1:86:68:0e:f4:7f:2a:2f:95:f9:
4c:70:2d:6d:9d:b0:77:b6:5a:22:4a:35:3c:ef:27:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:70:84:12:CC:EB:E4:62:18:9C:AC:BE:C0:D3:2C:DC:82:F4:A9:B8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q3CEEszr5GIYnKy-wNMs3IL0qbg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.108.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f9:17:78:5c:b1:3d:5e:20:3e:7c:bb:34:52:d2:15:2d:f5:
46:93:a4:38:ed:e1:32:fc:41:30:f4:15:1b:f4:3c:04:d6:d1:
ad:97:06:a8:71:5e:1d:c2:6a:8c:14:de:f6:ba:5b:96:ef:28:
0a:28:f5:91:09:b9:da:ec:51:d6:da:97:d7:a2:eb:5b:f2:2a:
d3:e7:88:71:10:a8:be:a2:e3:10:9f:d5:17:7e:d0:d0:05:9c:
79:ba:88:92:31:0b:f1:0f:b7:c0:bc:f2:35:f0:dd:f1:0b:0e:
31:ef:f1:aa:88:92:54:4d:6d:6a:de:82:f1:5e:d3:17:1c:7c:
cc:c1:48:9d:12:f3:9d:8d:57:ed:fb:00:3b:35:37:76:f7:1f:
df:2e:6d:79:fb:38:24:ad:ed:5c:c4:79:a4:75:fe:9f:56:81:
13:2c:57:0d:31:04:14:ef:3f:91:55:21:09:3e:45:2a:2c:a9:
7b:8e:3c:44:e6:9c:28:af:c0:27:7b:d4:22:b5:39:7f:1b:b0:
70:e2:d2:09:e2:93:8d:2d:65:25:b0:fb:02:93:06:44:2c:e7:
9b:30:8d:6b:40:e6:d1:35:2a:af:a3:73:f5:cb:d3:dd:ec:85:
0b:fb:19:09:51:81:fc:eb:86:09:c4:3a:aa:b9:45:69:4f:30:
20:4f:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:58 2025 by rpki-client