Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/R-HeWOh_fVHx2QenQnBiubfAN8M.roa
File: R-HeWOh_fVHx2QenQnBiubfAN8M.roa (raw, json)
Hash identifier: 9xpqE30QUOkfQdLGY8c2/tcUMgB4hek+8NdYeulK9xA=
Subject key identifier: 47:E1:DE:58:E8:7F:7D:51:F1:D9:07:A7:42:70:62:B9:B7:C0:37:C3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04C9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R-HeWOh_fVHx2QenQnBiubfAN8M.roa
Signing time: Thu 27 Jul 2023 16:48:18 +0000
ROA not before: Thu 27 Jul 2023 16:48:18 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 220.210.64.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:48:18 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=47E1DE58E87F7D51F1D907A7427062B9B7C037C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:8a:4d:8d:4a:2a:40:b2:0a:34:39:e5:b4:
95:d0:10:11:0a:44:14:29:81:44:4d:f9:50:eb:44:
94:b9:e2:ee:e4:46:40:97:5c:99:82:5a:41:7c:89:
11:fb:51:f8:83:cc:48:37:4c:46:35:75:c6:6e:9c:
b6:54:cc:4a:7d:70:09:0e:b8:96:94:ed:79:bf:63:
61:44:ae:3c:3e:31:17:8e:a9:65:4c:4a:ea:52:fb:
e0:c3:a6:96:b0:af:dd:59:08:1c:07:bd:76:55:b7:
43:52:24:57:0c:d3:a5:55:d9:3b:93:f1:42:4d:f5:
2c:17:6d:b6:6f:61:c9:46:2e:5d:13:f7:04:85:55:
c2:b1:cf:95:1c:25:0b:64:86:a7:4d:48:93:af:e7:
89:bc:80:22:8e:ca:1a:5d:08:3d:1c:d4:ed:14:45:
c9:68:c5:d5:4f:81:47:81:48:f0:80:60:7d:3c:80:
fb:e3:0c:6a:31:de:15:e7:aa:e1:09:77:ae:5e:92:
42:c1:ce:9b:c5:d5:ce:46:9a:a7:b1:ab:32:40:c7:
d7:79:d9:5c:fa:a9:6c:94:18:50:93:65:06:43:ac:
b3:0d:3e:a6:b5:55:44:3d:8d:e7:ba:e2:3e:c7:f5:
16:5d:af:dd:d7:dc:e7:fa:1f:64:b4:98:b7:54:bd:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:DE:58:E8:7F:7D:51:F1:D9:07:A7:42:70:62:B9:B7:C0:37:C3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/R-HeWOh_fVHx2QenQnBiubfAN8M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.64.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:80:a1:95:b5:35:14:d1:e4:13:cb:82:d2:01:af:63:a8:dd:
da:47:b9:e1:a7:65:93:7f:b4:40:05:bd:2b:1d:fc:29:63:0e:
94:8c:5a:93:1e:81:16:37:b8:f5:26:8d:88:19:5e:63:6a:92:
dc:8f:19:83:21:c8:82:5d:62:2b:85:d2:c8:0f:df:bc:a9:0f:
3b:d9:ac:2e:da:79:b5:9d:f5:f8:7c:e5:3b:72:ce:71:1e:40:
9b:0d:e3:1b:0d:d3:7f:0d:66:38:11:eb:23:d2:7b:7a:67:3a:
0c:e4:34:93:53:cc:eb:0c:06:6a:c1:87:b9:fe:50:4f:a4:0b:
b9:bb:4f:d5:7c:74:3f:ba:1c:ff:0b:c1:59:92:7f:b0:98:36:
e0:39:f6:9c:8e:81:12:21:3a:69:43:e6:25:14:2f:35:3a:f9:
e9:99:8b:79:ef:9f:aa:54:66:89:cb:4d:b9:86:bb:10:30:ff:
54:30:f2:8e:d8:e5:3a:ad:de:ee:53:d7:85:52:d6:5e:a8:61:
ef:23:3a:d2:2a:7e:63:cb:76:b5:b4:78:e1:a3:ab:49:93:4e:
86:ee:43:c8:4c:17:41:43:41:e6:49:d8:26:25:be:4e:0c:e4:
df:6a:17:56:36:03:72:9a:da:b2:65:90:cc:d8:7e:83:46:74:
17:78:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:17 2025 by rpki-client