![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUyf9e9sgu7J-QOplTLdI6WuHSk.roa
File: fUyf9e9sgu7J-QOplTLdI6WuHSk.roa (raw, json)
Hash identifier: 4sYYTcEfL8Cy9FBlJDQrkV6F2axqUMEp/wlevercpgI=
Subject key identifier: 7D:4C:9F:F5:EF:6C:82:EE:C9:F9:03:A9:95:32:DD:23:A5:AE:1D:29
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0398
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUyf9e9sgu7J-QOplTLdI6WuHSk.roa
Signing time: Thu 01 Jun 2023 17:59:28 +0000
ROA not before: Thu 01 Jun 2023 17:59:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:59:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=7D4C9FF5EF6C82EEC9F903A99532DD23A5AE1D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:2c:b0:6f:a9:56:9c:94:5f:63:b4:8d:ce:
f9:6f:86:48:c4:56:95:22:1c:c9:ef:2d:d0:1d:aa:
2b:52:c8:4e:fe:4f:85:44:91:fc:51:be:5f:a0:3e:
b2:03:43:a8:16:15:00:bf:52:61:46:9b:00:5b:57:
b9:67:ea:d2:74:b7:f8:55:13:89:fd:bb:1d:98:99:
db:e4:d0:9d:4f:59:3a:02:db:23:80:6a:95:b5:36:
0e:7e:57:f2:d2:bb:71:f0:8d:dd:91:ee:05:d7:c5:
50:12:f3:78:a2:2d:e9:d8:be:b6:43:dc:17:cc:f1:
8c:c0:82:f9:19:76:1b:55:5b:3f:b7:10:a0:88:69:
ee:80:fc:6f:09:ad:84:8f:c7:7b:34:f2:cc:6f:04:
13:5a:e5:bd:f6:be:0c:e1:22:43:96:b0:b4:c6:f6:
3b:0e:c7:98:1a:ff:15:91:d9:af:36:d1:aa:16:a8:
15:f9:60:9e:38:e0:01:70:93:97:63:91:57:08:a0:
22:1c:48:4a:7d:83:fd:a3:9a:be:fc:c3:fd:8a:16:
77:df:35:8e:7b:1c:52:eb:e3:7a:12:57:2c:0d:35:
64:ec:ce:71:c5:b6:3f:59:e5:f7:97:70:2a:46:fd:
15:a5:ce:2e:bc:de:18:91:13:bd:df:d6:1e:09:f8:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4C:9F:F5:EF:6C:82:EE:C9:F9:03:A9:95:32:DD:23:A5:AE:1D:29
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fUyf9e9sgu7J-QOplTLdI6WuHSk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.9.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f9:ed:ce:80:b4:23:10:12:13:88:06:a1:40:4d:b8:58:6e:
4b:cd:0e:c1:5e:66:86:5d:5e:51:5a:d8:19:d2:e2:0d:2d:ab:
14:08:0a:8c:5c:4c:40:ac:8d:a9:67:a7:45:65:69:ae:f5:2e:
35:d3:e8:29:40:94:1a:06:1d:44:f6:a7:ff:9e:de:42:e7:1f:
38:af:9a:44:eb:a7:64:40:c2:da:ae:bd:1f:67:81:4b:eb:1a:
a1:57:a7:99:2f:60:78:eb:7a:ef:81:a5:37:82:f4:5a:84:4b:
e4:86:a5:73:51:16:fa:ea:98:44:c6:f0:fe:e4:cd:ac:72:1e:
be:f0:5d:92:0a:a9:de:46:71:f6:a6:f3:ef:5c:ea:08:38:22:
3d:a2:ed:10:76:94:1c:eb:5c:f2:f6:d6:57:23:a4:fe:87:81:
fa:77:03:3c:ca:72:05:0b:70:b3:39:f7:40:c7:4e:64:dd:99:
2e:75:75:ab:60:3e:37:27:3e:f0:34:30:6d:a9:c1:6d:31:36:
b3:d9:6e:64:f7:c6:3d:0d:d5:f3:93:43:2c:51:b5:d2:01:dc:
7f:be:90:29:a9:c5:6f:9f:6e:fc:63:ac:b5:a0:bf:cd:2f:90:
51:89:33:ed:02:ae:75:9f:07:df:b8:0c:c2:2c:37:7d:6a:6c:
c1:da:52:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:08 2025 by rpki-client