Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sfcOEI4c27wUXqHAhwf3KYhcxPE.roa
File: sfcOEI4c27wUXqHAhwf3KYhcxPE.roa (raw, json)
Hash identifier: WsTYs6hHI1TScD7k3xb9fDGcQyDyQiFN7lsNUwdGs/M=
Subject key identifier: B1:F7:0E:10:8E:1C:DB:BC:14:5E:A1:C0:87:07:F7:29:88:5C:C4:F1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0120
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sfcOEI4c27wUXqHAhwf3KYhcxPE.roa
Signing time: Wed 24 May 2023 16:30:17 +0000
ROA not before: Wed 24 May 2023 16:30:17 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.24.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:30:17 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=B1F70E108E1CDBBC145EA1C08707F729885CC4F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:50:29:49:07:97:92:3f:82:14:f9:18:e3:
5c:ec:6b:9b:56:4a:c7:d4:00:b0:22:91:59:ad:f4:
ed:99:49:df:24:9c:73:01:cf:e4:9e:24:d1:0e:6e:
57:42:29:6f:90:62:c8:ba:9e:bc:29:5a:0e:f1:21:
09:4e:2e:c0:bc:1f:ed:f8:2d:2f:4c:aa:88:db:4a:
b1:2b:c2:34:c4:4c:32:38:3a:6d:06:7d:90:59:46:
a8:73:32:28:4d:0e:f6:34:07:b7:96:23:b8:89:ac:
bb:c2:07:73:36:30:1f:52:4b:b5:e0:43:e3:14:d6:
0a:0a:29:53:39:b2:ab:30:ef:c5:d6:2b:7f:a1:6b:
9e:ec:74:77:61:01:06:73:14:38:7a:5d:4c:d3:2f:
69:6d:69:8b:40:7e:36:e9:34:af:e5:4f:fb:f3:b7:
dc:28:6d:94:c7:9f:86:ea:05:95:b7:16:8d:fa:e7:
e3:ec:e4:46:36:ed:df:fe:39:a0:5d:2c:35:78:72:
89:28:af:e4:1c:48:cb:51:f0:73:a8:6e:c9:9b:c1:
11:a7:ad:08:74:6e:fe:f1:ce:ae:91:c8:f5:4a:72:
fb:e0:e7:97:39:a6:a9:84:e0:5d:dc:f4:38:ed:4f:
31:0f:9f:aa:67:5e:33:4f:20:8d:9d:63:16:78:36:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:0E:10:8E:1C:DB:BC:14:5E:A1:C0:87:07:F7:29:88:5C:C4:F1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sfcOEI4c27wUXqHAhwf3KYhcxPE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.24.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:88:e5:54:fb:5f:af:63:04:73:54:7b:7f:4f:39:5c:a4:94:
a7:28:51:ca:ad:8f:91:52:ce:f1:82:4f:eb:fe:1c:c5:bb:06:
3d:71:9b:71:bf:81:42:c9:ff:7d:6c:3c:77:3b:db:48:e8:3a:
e4:35:b9:87:43:2d:b1:ab:cb:af:6e:8e:a9:a5:1a:4a:29:f8:
05:57:eb:ec:1b:0c:f8:0c:bb:80:a1:43:3d:20:1f:ec:a0:be:
21:34:a1:be:b4:0f:f7:17:9b:f2:0e:6a:66:a5:e1:99:e4:37:
f7:a5:32:aa:53:3a:a7:41:1a:0c:54:a5:6e:3e:62:bf:ee:73:
ae:cf:6b:da:34:de:1a:2f:84:4b:52:4c:44:ae:eb:b6:50:5b:
89:ce:1a:46:cd:94:97:2b:39:19:b7:c0:24:9d:d5:bb:aa:fd:
55:41:f0:67:dc:12:a8:93:2b:6d:9c:8e:7d:9f:65:1f:83:96:
da:dd:d5:15:5a:b6:1b:58:d8:57:47:0d:50:4f:37:9b:1f:43:
b7:5b:9d:9e:46:73:5b:f4:ce:08:47:a3:f0:43:1b:39:6a:0d:
b0:42:0a:14:5f:27:76:62:6c:c1:94:aa:17:84:8c:33:9a:3c:
44:9b:8b:20:6e:50:72:51:f3:ac:5c:11:7c:f1:36:9d:fd:2d:
33:42:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:38 2025 by rpki-client