Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UTyVFThxLKnXzxrY86xifaGFV00.roa
File: UTyVFThxLKnXzxrY86xifaGFV00.roa (raw, json)
Hash identifier: 5d9RjU05CDGgjfW+EwOP30Zcb14WuB66++n8iYbHuIo=
Subject key identifier: 51:3C:95:15:38:71:2C:A9:D7:CF:1A:D8:F3:AC:62:7D:A1:85:57:4D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0295
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UTyVFThxLKnXzxrY86xifaGFV00.roa
Signing time: Tue 30 May 2023 16:36:29 +0000
ROA not before: Tue 30 May 2023 16:36:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.74.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:36:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=513C951538712CA9D7CF1AD8F3AC627DA185574D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:16:14:b9:f7:b4:cc:75:25:ae:53:66:f2:
2a:c2:30:e0:ee:7d:a3:2b:9b:53:54:81:7b:02:8a:
f8:3f:9e:02:9b:08:cd:0b:45:c3:5c:8d:32:f2:82:
22:cf:ca:38:da:54:42:56:99:73:5c:0e:5e:7f:40:
4d:44:6d:69:c5:b9:60:c2:d7:18:ad:d9:e1:d1:7d:
84:fe:36:e3:f7:0d:02:b4:38:3f:ef:48:59:3d:79:
25:12:e1:62:60:bf:33:5f:ce:99:33:65:30:c5:7f:
94:aa:4d:5b:7a:61:8c:db:42:3f:8d:ef:ec:aa:2e:
3c:18:95:c0:4d:a0:76:7b:bd:69:e9:d9:27:a9:57:
a7:f9:41:15:a5:53:b0:b3:81:8a:e4:06:af:08:fd:
51:22:f0:6e:43:16:8c:de:4a:77:73:e0:10:b1:22:
ef:d2:08:9d:e7:48:1a:c4:92:4b:57:d8:04:f1:52:
96:82:6e:5b:b3:b5:ae:34:5d:bc:b4:ae:95:d5:d7:
85:bb:49:4f:b2:e3:0d:fe:d3:b6:3a:ae:9c:23:c9:
db:24:34:2f:56:34:31:97:a1:9f:93:f9:b7:3f:33:
3b:7a:23:0e:75:5c:cb:4a:b8:10:af:f1:d4:ca:24:
a2:38:58:04:b0:7b:2a:d0:45:2b:9e:00:0e:c1:73:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3C:95:15:38:71:2C:A9:D7:CF:1A:D8:F3:AC:62:7D:A1:85:57:4D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UTyVFThxLKnXzxrY86xifaGFV00.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.74.208.0/20
Signature Algorithm: sha256WithRSAEncryption
46:7d:62:81:aa:59:c7:be:37:54:55:91:7c:cd:ce:da:36:df:
d7:d3:b3:15:d9:db:dc:97:7c:67:76:b5:bb:39:d4:90:86:07:
14:cd:b9:ec:d9:b8:df:71:7a:fa:30:f8:ac:d2:f1:90:f6:f6:
c3:ee:54:26:04:15:05:17:41:a1:fc:59:fb:c5:0f:06:3d:78:
70:5f:80:ba:41:64:d4:3b:50:b1:b8:0d:a5:32:8c:de:af:1b:
26:d3:45:40:63:01:e5:47:02:a9:29:1c:73:d6:5c:f4:cb:0d:
d1:d8:14:f4:e2:e3:14:99:7d:65:64:01:62:b5:0f:c7:95:19:
e8:6b:a1:72:77:fa:c9:7d:82:1d:23:5e:f2:30:2c:28:90:29:
29:2c:73:fd:8c:98:ff:6c:95:01:ce:f0:4b:e0:aa:e1:28:14:
26:e7:29:1a:70:4d:06:34:24:e6:7f:b0:b5:7d:48:7f:56:cd:
bb:bd:89:3b:2f:d5:da:76:a2:44:f2:54:04:84:65:40:84:3d:
06:5f:86:cd:36:3d:c9:1b:90:46:79:ea:5b:d2:06:42:ef:cb:
7a:25:a6:69:f4:98:72:68:19:16:bc:40:ff:8e:09:b5:af:de:
9d:c0:a1:2a:23:3b:72:20:46:5b:c3:39:47:d8:85:be:b8:e3:
2a:52:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:47 2025 by rpki-client