![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYGN5NEq8okDF9c_LqlztbjF_n8.roa
File: cYGN5NEq8okDF9c_LqlztbjF_n8.roa (raw, json)
Hash identifier: D6+JMQF7vUEBjcseyc/XasBUo3ScUNx0u8nr/t/dxcY=
Subject key identifier: 71:81:8D:E4:D1:2A:F2:89:03:17:D7:3F:2E:A9:73:B5:B8:C5:FE:7F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 059B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYGN5NEq8okDF9c_LqlztbjF_n8.roa
Signing time: Thu 27 Jul 2023 17:00:14 +0000
ROA not before: Thu 27 Jul 2023 17:00:14 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.74.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 17:00:14 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=71818DE4D12AF2890317D73F2EA973B5B8C5FE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:4b:7d:6b:92:e8:b4:5f:f6:42:23:5d:b6:
96:12:b1:c6:f2:9f:0f:c0:5a:09:e6:78:57:36:c7:
88:2c:16:4c:da:41:54:1e:24:70:1f:69:35:a2:c4:
60:bd:d4:57:d6:1c:27:53:8c:e1:52:cd:8e:d1:7f:
85:6a:18:8c:94:65:8b:9d:27:6f:54:bf:32:cb:52:
45:19:a3:d7:3c:c2:7c:c8:cf:a4:eb:c1:f3:cc:f1:
32:e0:3e:7b:5b:48:f7:31:3e:be:73:1a:a2:7e:e5:
2b:45:98:07:32:cf:eb:21:94:4c:26:eb:0a:94:8d:
7b:97:d9:43:49:9d:fb:ac:4d:ed:ae:04:d8:40:3f:
3a:1f:ab:3a:bf:65:1b:2a:89:20:79:14:84:27:36:
7f:43:86:73:7e:c5:4c:41:d6:98:14:64:22:98:41:
f3:22:0b:03:b2:ae:0e:13:44:f7:1e:84:6c:8d:62:
c6:dd:79:86:e9:e9:91:8d:97:76:db:62:ea:5d:f7:
c6:5a:0c:a0:27:47:89:5f:3d:e7:12:cb:d8:4c:7e:
a5:89:3c:c5:4c:0a:af:64:b6:aa:48:40:fe:03:f4:
2c:38:af:ff:b2:ee:8c:f5:8a:dc:e5:cf:58:e8:d3:
51:aa:9a:8d:4b:37:52:77:d3:ce:85:a5:e4:5b:b3:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:8D:E4:D1:2A:F2:89:03:17:D7:3F:2E:A9:73:B5:B8:C5:FE:7F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cYGN5NEq8okDF9c_LqlztbjF_n8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.74.216.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:19:f7:76:aa:9f:a2:79:98:04:a3:c0:10:bc:10:1c:6a:32:
1d:1c:51:43:0e:43:de:c8:ce:b2:76:c0:d2:75:90:6e:53:c3:
cf:0c:26:70:b6:98:9e:a8:7c:59:75:a8:b2:33:51:ff:37:43:
c9:91:ff:d9:f4:d1:a3:31:1f:01:11:ef:1f:eb:1a:5c:d1:33:
71:cc:2a:19:59:3d:0d:cf:21:91:90:78:8f:71:cd:13:ac:8f:
e3:f3:42:25:9e:fd:86:f8:63:46:2c:63:bf:4e:c7:03:47:49:
a4:a2:9a:9f:51:2d:3a:af:c4:98:61:3c:b9:15:85:6a:d5:7c:
b1:1f:ab:f1:e1:fd:ec:ed:93:47:78:ef:ea:32:9f:2e:db:bb:
2e:40:15:44:31:50:ee:fb:6d:2b:8a:95:6d:ac:55:d9:12:c7:
73:3a:32:f4:71:00:6f:35:a9:b5:fc:6d:2a:6d:ae:f0:8a:3e:
fe:c5:2c:cb:cf:f6:da:5f:60:fc:1f:cb:c0:c4:28:c7:9a:b5:
c7:7b:ea:b7:a1:f6:49:5c:c4:26:e1:10:ef:5b:27:9c:8b:7f:
d6:7a:9f:ca:d5:b1:5b:62:3b:29:8c:9c:ee:68:a3:c6:a9:dc:
e1:59:81:e9:83:e5:27:e1:2b:62:a7:c9:0d:a9:0d:55:91:2e:
ef:3e:c9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:45 2025 by rpki-client