![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDeTxJBqONMpmr46BGfU8N8K0u4.roa
File: yDeTxJBqONMpmr46BGfU8N8K0u4.roa (raw, json)
Hash identifier: y3CRcUAQJLBVMB6CcQaqgY7lcbBC+RSWUmT6l51itPs=
Subject key identifier: C8:37:93:C4:90:6A:38:D3:29:9A:BE:3A:04:67:D4:F0:DF:0A:D2:EE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0144
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDeTxJBqONMpmr46BGfU8N8K0u4.roa
Signing time: Wed 24 May 2023 16:31:13 +0000
ROA not before: Wed 24 May 2023 16:31:13 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:31:13 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=C83793C4906A38D3299ABE3A0467D4F0DF0AD2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:ca:94:39:83:3f:53:1e:20:4b:87:3d:e0:
1b:cc:4b:e9:8e:2c:2f:92:94:67:f4:b0:98:15:6c:
9c:66:03:95:45:01:8a:dc:d1:7e:cd:8e:fe:b8:96:
d2:ef:4b:39:19:3b:23:2b:71:25:e1:c0:a8:81:38:
64:3a:d5:0a:f9:05:fd:35:8c:89:62:6b:33:48:fa:
f9:07:cc:a9:75:b8:ff:40:d6:7a:6d:c2:c4:ba:a4:
01:1b:02:22:3e:a4:04:40:42:37:9e:a3:35:79:60:
a8:26:20:4f:1e:da:dd:68:3b:c3:70:3f:c8:ba:c7:
4f:4a:28:3b:dc:0d:ba:bf:9d:85:4c:05:0c:76:8b:
ec:f4:58:f9:7c:e2:2a:28:f2:e9:f7:d5:16:38:13:
ff:5b:33:bf:6e:5b:67:ce:5c:65:4f:d2:cd:a9:52:
da:5e:18:83:ac:ec:e2:34:b4:26:d8:85:44:63:56:
d1:ad:4e:cc:bf:04:d5:91:20:49:40:17:d3:c7:7c:
f3:7e:15:c4:f5:8b:14:69:4f:7e:97:92:48:3f:26:
0e:81:ad:3f:41:28:eb:02:a8:b2:d3:a3:ee:3c:e1:
9a:50:10:14:ed:a0:3c:d1:d9:7b:90:28:5c:42:9e:
80:79:62:bd:ef:3b:88:96:44:f0:58:5d:97:ef:be:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:93:C4:90:6A:38:D3:29:9A:BE:3A:04:67:D4:F0:DF:0A:D2:EE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDeTxJBqONMpmr46BGfU8N8K0u4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.81.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:a7:c3:d2:07:a1:c3:c0:a3:43:45:f1:6d:68:a0:21:49:df:
a1:bd:68:1f:a7:dd:4e:d4:43:4f:79:3e:c7:f5:b2:55:6d:23:
67:50:09:23:9c:25:83:22:64:18:0f:9d:a7:93:cf:b0:71:eb:
ed:09:d9:b5:ee:50:4a:45:91:04:ae:f2:9f:ed:50:3e:07:b2:
e5:a0:ef:c7:f4:ae:82:38:c5:57:db:32:97:fc:bc:8a:9d:79:
65:e0:5b:60:b3:00:ab:ab:61:f2:ab:4a:d1:19:f5:ad:bb:df:
23:2b:27:a8:60:8d:95:6c:96:ba:ac:35:2f:65:ba:f3:64:a7:
db:e3:ba:fe:3e:7e:a5:26:9e:6c:26:12:3b:72:c8:f0:fc:87:
45:ab:3f:39:0c:81:b1:cc:dc:ef:4b:c1:61:83:a0:01:ad:6b:
8d:07:e4:fb:e3:82:6e:04:72:58:7f:8d:f5:ae:53:db:7c:bc:
4a:eb:c1:f6:65:5a:3f:a2:78:4c:ee:f5:bf:10:94:26:a8:ff:
ff:14:bd:1c:df:3d:cd:ba:44:fb:cd:2f:1b:b3:31:b1:11:e9:
5b:cd:e2:4e:fe:16:4b:34:32:ea:b8:19:d4:07:5a:af:31:a5:
b5:7f:86:97:3e:ed:67:01:42:0d:48:6d:97:f7:32:77:c1:62:
74:6f:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:44 2025 by rpki-client