![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa
File: WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa (raw, json)
Hash identifier: V50mqnrVcAQC6kCgTPRiD7BgLPRmeBf9UHjR2LKfTt8=
Subject key identifier: 59:A1:87:1F:D1:07:A1:76:90:47:FD:6A:4B:49:29:E2:21:74:FD:56
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0198
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa
Signing time: Wed 24 May 2023 16:35:13 +0000
ROA not before: Wed 24 May 2023 16:35:13 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:35:13 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=59A1871FD107A1769047FD6A4B4929E22174FD56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:18:09:79:fd:7a:cd:d0:bf:18:17:b5:0f:
a2:fb:e1:47:4d:11:17:56:a0:ad:5a:05:c9:e8:cf:
da:b0:25:85:1f:eb:02:30:3f:62:20:06:65:d0:2e:
58:b7:a8:bc:2e:22:ed:0c:b8:75:dd:d7:29:50:e3:
9e:46:62:4b:d2:9c:1c:47:82:ec:4e:36:87:70:3f:
19:36:5c:4f:c2:7a:69:b2:cf:2e:00:cc:de:c3:26:
e9:f3:2a:74:68:be:15:61:95:35:08:64:e7:02:24:
0e:a9:7c:43:36:d9:73:05:96:74:07:47:59:a4:fb:
f1:2e:d9:4e:b0:77:bb:bf:1e:f0:87:51:61:c1:e8:
ad:89:b8:59:96:9d:a4:79:58:b4:c2:26:5a:13:b1:
dc:e3:3e:7e:30:44:d5:1c:bf:42:ad:61:d0:4a:58:
44:85:05:40:10:72:9d:a4:5a:c2:b2:5a:48:41:cf:
b9:a6:63:6b:1f:1a:1a:09:fe:c1:e1:2c:16:95:2f:
52:94:1c:8c:7f:b3:c6:c2:bd:d7:ab:e0:25:64:c1:
8a:df:f5:db:4a:9c:93:73:bb:25:ed:eb:87:6a:53:
8e:03:aa:d3:fe:a1:43:d8:38:6d:0c:01:5d:2f:5d:
f9:23:69:bf:19:08:5f:a2:fc:c0:a2:41:00:23:b4:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:87:1F:D1:07:A1:76:90:47:FD:6A:4B:49:29:E2:21:74:FD:56
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/WaGHH9EHoXaQR_1qS0kp4iF0_VY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.230.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a1:ca:5b:bd:10:2b:20:39:73:63:a7:81:57:fe:bc:7e:1b:
01:b2:02:71:eb:ec:06:ae:a8:cc:09:03:8f:8f:3c:5a:f4:bf:
d4:7b:87:1e:53:c9:ea:36:4f:a4:87:f1:00:30:74:98:b1:cd:
5b:b5:f7:69:0d:d0:35:d6:e6:33:cc:31:dd:15:16:d3:e5:d4:
53:3d:1b:64:07:a0:9e:da:60:ea:de:e5:5a:82:59:fb:93:2e:
89:b4:8c:f6:73:a5:68:fa:31:47:ad:71:e7:dd:c0:a6:b0:5e:
55:1d:b0:61:c7:4d:68:3d:a4:c3:b3:b8:1e:c8:03:05:fa:bd:
d3:e0:41:e0:15:09:67:18:81:48:6a:fc:ff:f6:67:b9:a2:6c:
b8:32:69:7e:ce:1a:de:b4:d6:26:43:cd:d3:06:f8:4f:7d:72:
9c:9c:8b:79:31:12:39:d5:b9:5c:cf:cb:53:77:1a:3e:59:c4:
b9:31:35:76:03:29:70:8b:57:9e:b5:0f:4c:c6:7f:6d:15:3c:
fd:cf:21:0f:03:aa:9b:0d:96:f1:5b:4b:4e:b1:f3:ea:4e:b9:
ae:b2:5e:dd:d5:52:8d:2d:fc:94:29:48:bf:3d:fc:c5:12:42:
72:a3:b4:37:40:19:25:7f:f7:03:a8:b7:77:89:fa:5c:e3:2a:
63:6b:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:23 2025 by rpki-client