Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ne_9fBstWWseL-xFG-17_9kPOMk.roa
File: ne_9fBstWWseL-xFG-17_9kPOMk.roa (raw, json)
Hash identifier: ZCfYBHS6Wpkhkm9T/8E6x4vYwl8vA3FviLIbQ4YjA+s=
Subject key identifier: 9D:EF:FD:7C:1B:2D:59:6B:1E:2F:EC:45:1B:ED:7B:FF:D9:0F:38:C9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 2F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ne_9fBstWWseL-xFG-17_9kPOMk.roa
Signing time: Mon 27 Mar 2023 16:02:04 +0000
ROA not before: Mon 27 Mar 2023 16:02:04 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:02:04 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=9DEFFD7C1B2D596B1E2FEC451BED7BFFD90F38C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:9a:8b:b1:f0:f0:30:6d:7a:49:79:9c:2c:
3c:cd:61:ca:56:dc:10:b3:b1:4a:3a:e3:d4:f7:97:
31:90:57:f2:5b:9d:6f:f2:5d:1a:63:28:75:39:66:
a0:2b:4b:9c:14:c7:38:23:1f:ab:a2:1f:b0:de:43:
82:c8:ea:c9:3d:ae:24:00:73:7a:2e:f7:6f:a5:8e:
e6:67:a5:78:f8:05:8c:c2:75:ce:1e:e2:c3:a8:20:
e1:a9:25:e7:d1:61:81:ad:78:75:3b:79:1d:4d:d3:
83:b8:18:3a:89:f4:4e:c8:bb:6e:38:1a:e1:28:d5:
08:9a:1c:ad:3b:0b:f0:3e:07:8c:cd:47:a3:97:aa:
85:a3:41:72:af:12:84:2b:e0:6a:b3:39:8f:33:d0:
3a:85:07:05:10:03:91:92:10:87:08:a5:a6:96:50:
53:85:a2:13:d7:b7:83:8f:2b:f9:3b:08:c3:01:b0:
74:fe:a5:54:2b:bb:f1:59:2c:d9:1f:12:c0:d5:cc:
92:dd:35:f6:51:3a:3b:2c:9c:a6:91:fe:85:c0:cf:
dd:94:44:a6:4f:94:13:e3:35:aa:c5:85:ab:45:4a:
37:6f:57:75:84:a7:44:5a:a7:df:ab:1f:88:0c:b0:
d4:90:ec:e7:de:af:94:2b:de:3d:4f:3e:a1:1b:43:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EF:FD:7C:1B:2D:59:6B:1E:2F:EC:45:1B:ED:7B:FF:D9:0F:38:C9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ne_9fBstWWseL-xFG-17_9kPOMk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.28.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2c:b7:0d:e6:70:be:a6:c6:72:37:63:a3:4e:95:ba:e1:97:
59:ca:90:cc:18:5b:24:84:28:7a:8b:f5:f7:b9:ba:19:13:58:
35:ac:fb:ac:7b:d1:10:d6:48:f5:c4:88:07:5d:a6:ef:52:17:
90:ae:01:20:9f:25:82:cd:2a:a9:48:7d:fe:6a:fe:2e:e9:24:
a2:3f:12:ab:b6:cc:48:31:a5:93:ed:ba:e7:a8:a2:4c:4c:49:
38:a3:d6:b6:34:97:fb:a1:9e:87:fc:3e:c5:3e:09:f6:52:40:
f2:dc:80:fb:97:ad:bc:45:e7:1a:5a:40:d6:ad:f0:c7:6a:9f:
52:bb:98:57:3b:a0:7e:87:09:e9:df:1b:a2:5c:b6:87:25:69:
7e:8e:04:4d:dd:92:81:8d:77:23:43:8d:3b:c4:f9:8f:5c:58:
8a:31:58:b8:f1:2e:c3:fb:b0:e8:9d:a8:57:7a:30:e8:9e:25:
13:e7:d1:07:5b:52:bd:ab:99:63:32:8e:ad:31:b6:e0:95:3a:
9d:9a:5f:02:1b:64:a2:b6:de:c2:f0:f8:a1:e6:89:cf:a8:58:
ed:12:0b:df:ee:aa:b7:b3:ee:c9:bf:dd:d7:82:53:44:21:42:
61:a0:6e:36:43:3b:66:c6:81:07:ad:8d:71:45:43:6a:89:2d:
5f:ce:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:31 2025 by rpki-client