Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRmRBZuX19uD1izBPCzDFHnytfg.roa
File: TRmRBZuX19uD1izBPCzDFHnytfg.roa (raw, json)
Hash identifier: SnoqCDZ0WyzXj5/9d8qf0EHK7zX2gFXLqqaNJG7hyRI=
Subject key identifier: 4D:19:91:05:9B:97:D7:DB:83:D6:2C:C1:3C:2C:C3:14:79:F2:B5:F8
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0546
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRmRBZuX19uD1izBPCzDFHnytfg.roa
Signing time: Thu 27 Jul 2023 16:56:09 +0000
ROA not before: Thu 27 Jul 2023 16:56:09 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.108.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:56:09 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=4D1991059B97D7DB83D62CC13C2CC31479F2B5F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:5a:5f:ab:a4:e1:79:5d:39:1e:c2:ab:01:
0c:19:28:bf:f0:e8:93:a7:8b:3e:c5:28:2a:35:0b:
22:b9:cb:94:e6:70:e5:05:24:b8:47:22:0e:0c:20:
f7:d9:60:38:34:ef:1d:48:14:9c:f8:07:a1:ec:ed:
7d:2b:a7:76:e4:ff:cc:14:0b:0f:9f:e7:e5:7a:89:
c5:68:05:1e:28:09:f1:2f:d1:ef:e5:eb:bd:8a:74:
95:67:d0:6e:ef:fa:20:7a:a2:98:53:85:33:f1:39:
f8:38:41:30:ba:e3:98:ba:b5:7e:28:94:db:03:59:
f6:00:90:9e:91:36:16:98:e2:e5:3b:79:5e:5a:1e:
c1:f0:67:a4:3d:64:5f:cf:9c:0c:42:a4:45:09:79:
14:0a:66:42:4f:0b:0a:eb:4f:c5:c6:5b:94:32:08:
19:b9:6d:27:dc:20:35:ec:95:64:c9:8f:79:64:56:
d5:b3:f0:b7:31:4c:3e:37:ab:cf:f6:10:21:67:1d:
66:2b:e8:d8:e6:5e:94:f6:e2:d3:8e:74:52:a1:83:
a1:2d:7d:0b:86:1e:26:37:bc:b7:26:38:73:46:58:
9b:4f:e1:a6:4e:ca:e5:83:7e:b0:0e:24:da:2b:b6:
11:a2:bf:b9:01:46:43:c0:15:fe:d7:5e:b8:63:77:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:91:05:9B:97:D7:DB:83:D6:2C:C1:3C:2C:C3:14:79:F2:B5:F8
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRmRBZuX19uD1izBPCzDFHnytfg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.225.0/24
Signature Algorithm: sha256WithRSAEncryption
37:22:1f:14:64:bd:ea:54:56:e9:97:e4:29:4d:b7:bc:49:1a:
2a:ec:67:21:de:a3:7b:d2:93:ad:0e:0f:67:d7:0e:26:de:4e:
08:64:23:ce:03:2c:13:1d:76:c0:97:af:27:ca:bb:f4:ef:6d:
26:65:65:bf:60:7a:ec:f5:63:fb:6b:a9:dd:f0:6b:98:61:2c:
54:08:ba:e1:55:5f:63:40:d2:4f:37:63:13:2a:e2:fb:dc:4e:
20:b0:44:ca:8b:1a:bd:4b:74:70:c4:da:34:f7:07:df:c5:72:
6c:12:46:6b:b7:3d:1b:57:d2:fb:67:72:7e:b9:2e:00:03:22:
28:aa:f0:f6:19:73:51:52:49:49:a4:34:c7:1b:90:6e:87:ad:
d7:c6:0d:40:74:45:74:68:89:1b:99:30:f3:50:fe:11:35:8b:
3b:85:5c:3b:df:05:6c:3e:2b:df:a2:07:c1:97:1d:04:2f:78:
eb:22:60:8d:7f:df:1b:1a:74:10:f6:f3:56:a3:2b:dd:7c:c9:
3b:9a:79:5f:19:04:e2:ba:f4:f1:d2:f3:0d:e7:11:b7:e6:34:
db:ba:2f:a0:cf:83:12:8a:84:b0:61:d5:92:0a:50:ef:8e:07:
e0:8d:94:74:9e:41:29:49:3e:2e:c4:e9:71:ed:8c:2f:84:48:
52:fa:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:06 2025 by rpki-client