![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yUlle9dxhjk0fL_h41kpNgYzWa0.roa
File: yUlle9dxhjk0fL_h41kpNgYzWa0.roa (raw, json)
Hash identifier: YfU9Z0atwUfJx+nBJK7l55YutuGdDkswe/IIV0tIfs4=
Subject key identifier: C9:49:65:7B:D7:71:86:39:34:7C:BF:E1:E3:59:29:36:06:33:59:AD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05A0
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yUlle9dxhjk0fL_h41kpNgYzWa0.roa
Signing time: Thu 27 Jul 2023 17:00:15 +0000
ROA not before: Thu 27 Jul 2023 17:00:15 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 211.14.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 17:00:15 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=C949657BD7718639347CBFE1E3592936063359AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e6:f2:9a:6d:f7:53:6f:e3:80:95:a7:2e:8e:
ec:ca:4d:a5:93:d7:8d:17:62:22:60:b3:75:27:4a:
33:de:da:24:92:3a:6f:a2:37:03:67:1b:c5:a1:30:
51:20:2e:af:b7:42:65:40:2a:2c:bf:2c:79:c9:44:
63:d5:da:17:16:85:5c:c3:cd:ad:1f:1c:ec:df:f7:
ca:ff:8d:8a:09:57:d0:52:56:3f:db:9e:96:05:61:
9f:4a:00:14:34:ac:7a:8d:1a:54:bd:79:ea:a1:ac:
1d:91:52:6e:72:5c:6c:00:a0:ea:47:43:e6:7a:75:
96:58:dd:0a:c8:39:df:6b:47:75:60:2a:88:39:c5:
d2:21:45:79:1b:d8:61:fc:d3:8b:8f:33:83:a5:c8:
2c:a8:54:56:8a:52:37:ad:73:22:7b:f6:9e:b3:4d:
34:e2:86:d8:07:bf:4e:ed:19:11:6e:89:77:33:6b:
f9:ea:d5:e6:5a:2b:38:b0:15:0d:bd:ad:7b:70:5f:
c1:35:52:9d:e7:3e:eb:9a:a2:66:f6:ac:e2:b9:94:
86:f6:4b:fe:22:46:90:fc:56:6c:5f:7f:9e:f4:84:
dc:fd:9f:33:a8:7d:4f:c6:33:90:0d:b2:ec:1f:62:
27:68:59:08:d8:4e:8b:df:bd:5d:2c:47:15:a0:2a:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:49:65:7B:D7:71:86:39:34:7C:BF:E1:E3:59:29:36:06:33:59:AD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yUlle9dxhjk0fL_h41kpNgYzWa0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ea:89:1c:16:a0:31:86:15:76:49:a4:a6:85:40:3e:e3:96:
32:f6:49:ad:9a:0a:19:b4:f7:f6:55:a0:55:44:be:3d:91:10:
ae:0a:b0:dd:68:78:3a:23:51:5f:a1:89:88:5b:c2:d9:b5:2a:
8e:44:c1:22:46:71:ea:5b:5f:04:92:ad:4a:2d:9c:86:d9:9b:
e7:a0:7c:7c:8b:eb:e9:9f:82:c5:4b:8a:a6:74:93:00:a0:eb:
c7:34:d4:7f:1f:7f:7c:0e:72:f0:ce:a1:25:7d:28:b2:5e:5b:
59:04:86:0f:1e:7f:fe:39:d3:5e:ea:f6:a5:0f:51:af:5f:65:
4f:7c:23:a2:5e:fd:18:b6:d3:d3:37:10:56:47:99:c1:52:bc:
46:8d:c3:a9:9f:9a:69:40:f5:29:1f:ac:fb:9e:f9:2b:d7:b9:
c8:1a:8e:90:04:55:63:53:c4:86:cd:50:e1:4b:6f:28:80:71:
d8:ee:98:d3:64:70:14:0b:ac:ba:70:21:3b:31:d3:c7:69:30:
51:42:ed:12:66:f3:98:03:ba:b3:0a:6d:3d:3c:a2:98:94:be:
01:c3:d3:7b:b3:e1:e6:22:0a:05:ee:31:a3:91:f0:56:2e:43:
3b:8a:13:07:29:cc:41:2a:28:46:71:8f:5f:5a:e3:b0:37:90:
1d:dc:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:10 2025 by rpki-client