Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/g7f8yeVNru8ghdpTK3yoRhpcIlk.roa
File: g7f8yeVNru8ghdpTK3yoRhpcIlk.roa (raw, json)
Hash identifier: lw6VCcCdeTmSRVZSRkgEL3UHdaorLJJe15YewD6x+Pw=
Subject key identifier: 83:B7:FC:C9:E5:4D:AE:EF:20:85:DA:53:2B:7C:A8:46:1A:5C:22:59
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04E0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g7f8yeVNru8ghdpTK3yoRhpcIlk.roa
Signing time: Thu 27 Jul 2023 16:50:11 +0000
ROA not before: Thu 27 Jul 2023 16:50:11 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.67.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:50:11 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=83B7FCC9E54DAEEF2085DA532B7CA8461A5C2259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:6c:25:c3:7d:c2:1a:be:f3:69:41:c4:95:
c2:03:5c:48:45:55:c8:b4:6c:65:e3:f9:62:f7:88:
d7:f7:d1:9a:64:b6:c6:c7:66:f6:4e:6f:2c:bf:33:
97:bc:a9:99:93:cf:16:62:7b:38:00:28:37:99:34:
3f:20:2b:b0:45:76:0a:92:5f:05:8a:fc:34:a0:b8:
0a:bf:82:8d:b6:4f:a2:3b:d2:6e:2d:08:27:22:2e:
9d:d6:ab:e0:8d:ae:7f:bb:43:3c:91:4f:36:5c:35:
86:cc:1a:cb:70:33:bd:55:f7:51:35:c6:7c:fe:8f:
0f:19:02:0d:7b:7b:d2:32:f5:73:17:a1:3f:5c:f9:
0d:2b:27:9b:66:b8:60:7e:34:15:01:5d:ca:28:e9:
fa:69:12:44:be:41:fe:d0:55:5e:9e:78:4e:69:2d:
b9:0f:e9:e6:97:d0:cf:89:ef:19:08:1d:85:a7:ed:
32:95:ea:ce:74:81:c8:d3:c6:67:da:ec:46:8a:ce:
05:50:62:a5:12:a9:00:31:6d:f6:88:5b:2d:4b:82:
a3:b8:4a:15:05:0b:a5:2b:d5:53:cc:c8:ba:c3:eb:
31:fc:ca:3d:5a:53:16:7e:51:b6:9e:ee:15:d2:dd:
c7:a6:f9:47:40:5e:a0:77:75:e2:08:50:e5:60:09:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:FC:C9:E5:4D:AE:EF:20:85:DA:53:2B:7C:A8:46:1A:5C:22:59
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/g7f8yeVNru8ghdpTK3yoRhpcIlk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.64.0/18
Signature Algorithm: sha256WithRSAEncryption
91:20:d3:03:26:69:78:26:f4:59:de:77:dd:8a:c7:bb:bd:30:
6e:b8:29:f0:14:62:c7:e4:8d:8f:03:56:85:82:90:9d:64:3b:
65:07:48:4e:95:b2:44:cb:6b:56:b8:9f:16:6d:19:21:95:7d:
30:a0:6e:e0:29:4f:82:43:32:68:76:30:63:27:6e:7c:c8:67:
e1:0b:d7:5f:3d:8c:ef:3d:a6:9b:57:43:6e:59:31:a5:30:da:
10:93:3f:70:ca:18:b0:d1:1e:db:7c:ae:d3:b9:4f:9a:f6:98:
e4:d1:d1:dd:9d:18:d7:f0:c6:22:af:09:94:dd:7f:c8:e1:9b:
b2:31:69:55:d3:52:bc:8e:ef:b1:cb:5f:ee:82:bd:a8:55:08:
de:b0:d2:8a:cf:46:06:41:03:8d:94:2f:b0:20:17:31:c2:4a:
27:7f:e4:55:bb:c7:6c:48:65:42:d0:59:16:55:42:75:a2:cc:
89:1e:28:af:c1:4e:4e:3f:65:ef:43:c9:d9:b6:60:cd:8b:30:
5b:24:31:4d:af:9c:e0:8a:24:62:02:07:d0:97:57:d1:f6:77:
9d:02:64:f2:3f:eb:e4:cb:5c:12:bf:3d:8e:b8:5c:0b:3c:53:
78:8d:b4:ae:bc:a0:5a:57:24:cc:36:3a:aa:76:e6:2e:06:38:
9f:25:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:04 2025 by rpki-client