Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XOoJ3_oq3oOIVlnM-aD0CzDJgcI.roa
File: XOoJ3_oq3oOIVlnM-aD0CzDJgcI.roa (raw, json)
Hash identifier: ZXQrtrLR8G1cQ7d5d1/pdvRFode+yMyqAHsmNW/su6g=
Subject key identifier: 5C:EA:09:DF:FA:2A:DE:83:88:56:59:CC:F9:A0:F4:0B:30:C9:81:C2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0189
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XOoJ3_oq3oOIVlnM-aD0CzDJgcI.roa
Signing time: Wed 24 May 2023 16:33:27 +0000
ROA not before: Wed 24 May 2023 16:33:27 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.180.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:33:27 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=5CEA09DFFA2ADE83885659CCF9A0F40B30C981C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:14:74:b0:da:ae:b0:c3:26:ee:af:d1:c5:
d7:ae:79:4f:7d:ee:7e:b4:4a:73:3b:44:06:f3:a5:
a5:a4:e6:ff:50:55:77:ea:ef:ec:41:a6:f0:d0:b6:
00:2c:71:22:39:82:74:59:48:f8:10:33:f1:19:f0:
85:78:f7:39:fc:15:71:2a:e8:e2:c7:3c:6d:50:a9:
af:e4:e1:40:59:7c:6a:14:19:de:ee:96:01:4b:55:
f9:ce:ed:7e:af:f3:74:bc:a8:ec:81:44:e9:10:1e:
99:6f:51:73:88:37:2f:d8:49:58:50:14:08:db:89:
01:75:51:bc:ab:6d:d6:02:c7:b5:db:d9:52:1a:7e:
3e:73:c4:10:5a:e1:a7:1f:fb:ba:b9:29:ce:96:c3:
1d:69:b2:f1:bf:61:67:a7:73:a8:24:88:76:7c:59:
bc:cd:cc:1b:c5:a2:37:7f:e2:26:81:e8:5d:1f:8f:
67:69:bd:fe:6d:36:94:e6:9c:35:22:b9:78:7f:ec:
c3:23:06:61:29:0f:ca:de:24:03:ca:92:a0:a3:e7:
b0:5f:62:4d:9c:03:57:e1:aa:f1:20:2e:6d:c7:15:
7f:9d:9b:d6:2b:a5:5d:76:88:49:91:b8:27:4d:43:
d7:af:b8:9b:dc:d5:6a:3a:fd:0c:a1:9d:08:3c:5a:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:09:DF:FA:2A:DE:83:88:56:59:CC:F9:A0:F4:0B:30:C9:81:C2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XOoJ3_oq3oOIVlnM-aD0CzDJgcI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.180.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:c9:7e:66:9a:32:1d:6c:e5:c9:04:0e:97:30:94:24:fb:26:
d7:00:3d:45:87:32:e1:eb:c3:23:a8:be:f2:3e:e6:38:4e:25:
5c:77:d9:04:f7:2d:c5:ee:be:54:33:76:43:50:91:56:5a:07:
ef:1d:ba:0f:0e:2a:54:7f:b5:d3:b5:82:df:9d:c5:9c:11:be:
3a:1f:d0:de:ca:2e:c9:06:8a:19:85:5c:cb:f3:17:c3:7f:89:
05:be:39:25:b3:08:ed:70:61:51:6b:cf:e9:30:03:aa:b3:22:
f4:5b:34:a5:ca:66:06:73:55:13:4e:74:ad:35:0c:5c:ba:2e:
a3:8d:11:73:6c:d0:c1:ab:78:6b:fa:5c:2c:02:b8:c1:c1:c5:
c5:55:3a:69:4b:23:51:9e:2b:3a:7b:b3:7e:34:f4:73:7a:fb:
0d:e9:4f:b4:0a:99:6d:d8:1b:4a:76:a1:95:48:b2:47:0f:2d:
fa:cb:a5:c9:8f:31:1e:fe:09:45:d6:9f:7b:4c:d5:58:68:d5:
42:ad:51:bd:95:11:a1:08:11:a0:dd:91:05:84:ad:f4:54:87:
fa:08:ce:6b:1b:04:9f:e2:f8:30:12:96:95:1f:d2:9b:3d:f1:
de:8d:22:0e:5f:44:9b:87:54:f5:40:0c:42:d8:cb:c8:3a:a8:
d6:fc:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:43:17 2025 by rpki-client