Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UG2QyAiwKFpYuqYx_f6qysU1of8.roa
File: UG2QyAiwKFpYuqYx_f6qysU1of8.roa (raw, json)
Hash identifier: 9svtmHw2rZql5RArrdPKKN8xEkKTJysudAYphYvwsjI=
Subject key identifier: 50:6D:90:C8:08:B0:28:5A:58:BA:A6:31:FD:FE:AA:CA:C5:35:A1:FF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0541
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UG2QyAiwKFpYuqYx_f6qysU1of8.roa
Signing time: Thu 27 Jul 2023 16:54:18 +0000
ROA not before: Thu 27 Jul 2023 16:54:18 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.76.150.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:54:18 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=506D90C808B0285A58BAA631FDFEAACAC535A1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:23:e0:0f:6b:46:ea:55:57:df:f8:2c:63:
85:70:0c:6d:13:71:99:66:14:60:b0:24:c5:26:58:
eb:1e:40:f4:ec:f0:b7:a7:3d:3e:89:89:88:11:4a:
10:2e:30:78:c0:94:5c:b9:c6:14:17:7b:9c:30:29:
a4:7a:86:b3:67:e2:77:f0:29:ea:2c:0d:62:b3:f0:
d7:94:87:19:28:d6:e5:17:f0:8a:f3:fa:82:1b:d7:
ad:26:1e:b2:30:bc:56:41:2e:ef:fc:99:1a:33:6a:
14:ac:c3:7c:d3:82:9e:75:01:90:86:c6:74:bd:2f:
e1:15:da:3b:be:d4:55:17:ed:29:c6:23:ef:05:7e:
61:21:2e:0b:56:0b:7f:e6:90:46:4c:f8:65:c2:6d:
e5:55:a6:13:48:03:ac:b1:66:cb:e0:f0:33:71:f9:
42:2e:80:9c:d9:f0:86:5e:60:5b:75:be:fc:8a:43:
0c:52:54:80:11:ab:2a:d4:de:a0:5a:b9:e8:37:8e:
5c:41:1e:99:9a:9c:fe:b4:0c:13:cd:9f:9b:67:b0:
fd:93:ae:58:62:99:d5:3d:4e:ed:a6:a4:8e:eb:71:
dd:cf:a3:91:8e:31:4f:b5:50:ee:dc:c8:0d:f2:db:
54:5d:b7:77:ea:01:71:83:0a:39:6a:31:4f:e3:84:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6D:90:C8:08:B0:28:5A:58:BA:A6:31:FD:FE:AA:CA:C5:35:A1:FF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UG2QyAiwKFpYuqYx_f6qysU1of8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.150.0/23
Signature Algorithm: sha256WithRSAEncryption
14:dd:27:b4:50:59:05:82:53:34:97:07:f5:7a:4f:1f:4d:36:
2a:e3:15:7d:3d:e1:12:09:28:1f:64:d4:b0:b7:fa:13:ea:c3:
d4:0b:58:5f:1f:97:56:ff:cc:b3:95:ee:3d:bd:31:f8:99:aa:
d4:bc:a9:07:5c:58:5c:db:13:76:0a:07:31:79:3c:bf:66:15:
4e:f5:f4:18:7f:1e:fb:45:bf:69:39:63:77:fd:c4:88:76:2a:
1d:5c:7e:95:d2:b4:ba:e1:53:69:4c:e7:87:c1:99:a3:59:b4:
ae:76:88:12:94:05:bd:d4:94:ec:c3:17:48:ba:a9:ba:65:2d:
7d:c9:dc:24:59:b6:45:98:9b:65:c6:e3:8c:b0:42:c3:c2:b1:
ca:10:a1:17:e2:80:cf:69:02:1d:e5:a2:ed:21:7d:13:90:64:
cb:b1:6b:97:95:2d:06:f3:d7:51:e5:84:c4:f6:54:70:74:6d:
af:88:e7:78:08:ed:00:1e:6d:32:de:db:71:22:24:fd:da:fb:
7c:61:b9:c0:44:91:6e:38:79:22:25:da:a8:ca:6a:9a:07:83:
61:72:8d:61:a7:32:48:57:43:d1:33:ef:6c:01:a1:fb:2b:66:
b7:78:f5:29:2f:40:96:dc:d2:9d:98:fe:6f:d0:24:c1:f7:a9:
0a:f5:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:21 2025 by rpki-client