Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/iO2a8dYkS9P1F1MruCfSECOpHe8.roa
File: iO2a8dYkS9P1F1MruCfSECOpHe8.roa (raw, json)
Hash identifier: xLKSwSI+z+pb5xC3b9HFrZQ9DdPWQ84VleY6FQ2UUA8=
Subject key identifier: 88:ED:9A:F1:D6:24:4B:D3:F5:17:53:2B:B8:27:D2:10:23:A9:1D:EF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 6A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iO2a8dYkS9P1F1MruCfSECOpHe8.roa
Signing time: Mon 27 Mar 2023 16:04:35 +0000
ROA not before: Mon 27 Mar 2023 16:04:35 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.73.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:04:35 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=88ED9AF1D6244BD3F517532BB827D21023A91DEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:1d:3c:bd:87:bd:86:c5:0e:6e:3d:79:90:
df:34:7e:c8:ac:2e:69:0b:ac:61:5f:31:99:cb:20:
2e:46:dc:44:30:7d:b6:88:1c:2b:47:e1:5c:80:d1:
45:cb:ce:6b:6a:36:0a:61:01:de:51:89:1f:e3:0d:
52:e4:4b:e0:78:f3:f0:96:5e:08:d0:c1:c2:4e:9b:
f2:bb:4d:48:0a:4d:24:dc:2f:fd:d6:9c:0c:06:ee:
d9:27:88:61:c7:1c:e6:e0:54:29:23:96:13:33:f5:
6c:cd:ca:45:cb:3c:d2:9f:fb:f2:1b:78:1b:23:53:
2b:b3:f0:c9:68:f5:05:1b:1b:0d:03:1a:6a:c2:e0:
3e:fc:cc:a0:bd:9d:df:4f:72:3c:26:ae:a3:27:8f:
d0:38:bb:dd:ff:97:5a:c0:71:74:27:26:c4:5b:d4:
95:8a:a9:5d:d1:0f:11:d6:ba:29:90:2e:ee:ee:1c:
10:ca:7d:57:42:25:50:d7:e4:78:16:dc:59:07:6d:
7e:7a:f2:29:2d:34:49:3c:9b:4f:f1:a2:9a:86:c4:
41:95:8e:0f:c6:8d:b2:22:14:73:9d:90:f6:31:27:
9e:f4:aa:e3:be:a6:74:e5:65:79:9c:ca:87:a1:49:
6a:17:30:40:0b:f4:59:2f:5e:87:09:da:a3:9d:22:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:9A:F1:D6:24:4B:D3:F5:17:53:2B:B8:27:D2:10:23:A9:1D:EF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/iO2a8dYkS9P1F1MruCfSECOpHe8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.192.0/20
Signature Algorithm: sha256WithRSAEncryption
03:dc:ab:7f:84:02:45:7e:f3:a0:07:b7:f1:37:8a:f3:7e:63:
1e:32:ba:96:68:20:a5:dc:73:82:7e:67:fb:08:e2:7c:57:64:
59:a6:0c:88:26:fc:67:96:75:59:ad:92:7e:b2:84:e7:1c:b3:
05:42:f9:a2:6b:bc:c4:d9:d0:21:cd:96:b0:4a:80:c7:6f:4a:
ff:98:1b:d7:9d:4d:5b:4a:99:f8:ff:64:10:de:e6:cc:ce:cd:
07:5e:69:d5:1f:93:51:c4:81:f0:4e:d7:2a:c0:2f:bb:e3:dd:
e9:b9:b6:0a:57:46:54:e6:76:9d:74:17:7e:48:ba:a1:68:a6:
48:73:b3:27:15:f9:fe:88:b4:75:89:66:76:6b:44:71:6a:10:
7d:8b:53:c2:95:2e:e4:a7:4b:36:41:0e:cb:4e:b1:1b:bb:84:
75:5c:e8:fb:12:d9:7e:bc:4b:51:e7:15:96:7d:4d:77:af:0f:
79:a5:07:b1:0c:8b:03:87:17:73:ee:61:68:4a:b1:5b:c9:5f:
53:14:1f:8b:47:94:f3:f0:79:19:5a:01:99:0c:17:27:be:91:
10:61:41:7c:78:ba:f3:cb:c1:ff:a6:39:88:6f:e0:7e:8a:b9:
aa:38:17:f0:81:06:71:d7:dc:66:cc:97:ef:c6:3b:f2:32:d6:
c7:ee:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:27 2025 by rpki-client