Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa
File: ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa (raw, json)
Hash identifier: Sp1WWuVOsyI0f3R89RfX8bIKLD4QJFq2VXEQonK1Mjo=
Subject key identifier: 64:CE:9A:1E:76:54:1E:00:B1:2F:82:C1:DA:00:7E:84:41:C5:FD:56
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 021F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa
Signing time: Tue 30 May 2023 16:30:29 +0000
ROA not before: Tue 30 May 2023 16:30:29 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 16:30:29 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=64CE9A1E76541E00B12F82C1DA007E8441C5FD56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:d1:e6:a5:bf:be:5b:a5:b6:53:73:ad:89:
d4:18:c9:19:07:9d:3a:6f:5a:7c:6f:12:49:1f:87:
aa:1b:ea:41:ef:4e:c9:3c:10:6a:7c:cf:f8:52:49:
3d:10:a0:39:70:f8:e3:44:b5:86:1d:f0:40:c3:d9:
fb:5b:fd:02:d2:92:46:84:9e:a3:ef:33:07:4d:7d:
cd:8b:82:a5:8f:95:eb:a7:f5:f5:a4:06:f8:b6:65:
d7:73:f9:13:08:58:11:1f:2a:42:ea:ce:9c:01:fc:
ea:7f:59:f6:ff:f0:ae:1c:88:f9:1c:43:65:83:5a:
73:2b:c9:a9:9c:94:3b:cc:11:c7:85:cc:f0:f8:57:
b9:2a:c0:82:cc:6f:ca:78:27:b0:9b:db:09:15:3b:
86:63:f0:af:55:be:8d:5e:84:95:f8:d0:ea:d7:31:
7b:80:c5:1e:24:81:ee:8f:7d:35:5b:0c:ea:77:84:
0c:d1:59:84:ce:07:4d:f8:a8:20:c0:c5:94:e7:b2:
45:b7:54:42:2b:3b:cd:2e:99:c0:96:58:69:9d:e3:
17:21:43:87:fb:18:46:c6:7d:65:17:1f:28:4c:6f:
d9:b5:96:dd:ff:e2:f0:78:1b:41:6a:08:33:ba:52:
a4:12:03:19:1c:12:62:0d:7f:c5:ec:34:18:5d:77:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:9A:1E:76:54:1E:00:B1:2F:82:C1:DA:00:7E:84:41:C5:FD:56
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZM6aHnZUHgCxL4LB2gB-hEHF_VY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.128.0/17
Signature Algorithm: sha256WithRSAEncryption
61:1e:b8:bc:07:ea:08:8f:81:cb:fe:8f:90:71:69:b7:6d:e8:
ce:35:5c:c3:ec:ca:bf:14:c9:fc:a7:a0:39:2c:85:59:30:73:
d7:7d:ef:6a:85:05:88:30:ca:76:13:15:c7:b7:21:51:83:49:
42:c5:98:3f:75:a3:e7:4a:69:55:74:b1:b6:d7:ca:e7:28:c3:
4a:76:80:5e:fb:c9:f5:3f:76:73:69:0e:da:9f:07:c2:ef:07:
0d:93:9c:65:a0:45:a0:50:63:9b:4a:e7:21:39:68:95:bd:65:
cc:ff:35:1a:41:36:3e:95:22:a6:39:fe:a4:d2:fe:9f:65:49:
e0:e6:3a:f1:fb:4b:d9:b3:99:91:fa:7d:36:2b:47:1d:47:72:
aa:ac:cc:c3:3e:b3:78:66:ba:66:2e:d8:cf:d9:17:ae:8a:94:
26:ff:53:83:78:1a:2d:01:19:6c:f6:b9:cd:55:7e:cd:08:6b:
9b:e2:37:54:86:34:74:03:81:d8:22:13:cf:b2:b8:36:45:41:
c9:2d:1a:1f:96:3b:f2:59:12:03:47:b4:ce:11:79:85:00:20:
75:4d:90:2b:c6:21:1a:46:f8:4d:1f:e4:69:77:f1:4d:35:45:
47:52:96:bd:24:7c:be:2e:c8:80:0f:fe:56:25:d7:87:15:92:
9d:26:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:27 2025 by rpki-client