Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/y81w7xmNZj2tomjEAQPI8glRmG8.roa
File: y81w7xmNZj2tomjEAQPI8glRmG8.roa (raw, json)
Hash identifier: eE88QiA0MVdVD8HWz35Z2d3fOS5ODA7VCJXcVaY3OTU=
Subject key identifier: CB:CD:70:EF:19:8D:66:3D:AD:A2:68:C4:01:03:C8:F2:09:51:98:6F
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 52
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/y81w7xmNZj2tomjEAQPI8glRmG8.roa
Signing time: Tue 25 May 2021 02:42:12 +0000
ROA not before: Tue 25 May 2021 02:42:12 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.24.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 25 02:42:12 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=CBCD70EF198D663DADA268C40103C8F20951986F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:a0:27:2c:30:ae:55:02:c1:5f:22:9d:ad:
5b:ce:2d:56:aa:b0:e5:09:a7:c1:92:c1:29:b1:16:
51:c7:16:65:80:0a:2d:2a:b9:14:97:f6:c8:b4:42:
ca:5e:40:e6:a7:ab:93:b5:37:d2:6c:ae:c3:84:60:
3d:c1:e3:9a:64:d1:e9:a4:17:26:da:37:49:11:b0:
62:e2:46:7e:c0:21:60:63:ed:0e:a0:71:b3:71:e3:
c7:ff:fa:7a:39:b8:b9:fa:3f:13:15:35:d7:87:32:
90:34:fa:ee:57:36:21:a2:a5:14:4f:8f:fa:ed:58:
82:d9:21:c2:f9:c9:ac:01:07:10:ba:cb:a0:92:90:
12:83:10:91:2f:55:a3:be:93:a3:90:55:c9:57:2d:
a8:74:b1:d9:a2:1c:f8:32:be:80:fa:29:35:ac:67:
1f:e5:3a:0b:52:02:3c:18:db:2d:79:06:b9:00:b0:
bf:5b:4f:f2:25:9d:fd:2d:e2:0f:d8:90:92:13:31:
87:f4:c5:91:f0:38:73:9d:e0:21:57:3b:5b:68:9f:
dc:4c:47:06:93:41:ae:7b:22:c0:45:30:fc:cc:b9:
f1:bd:1f:b0:1f:cc:2f:51:66:6a:28:88:c1:43:e5:
f0:87:40:86:d7:51:76:2f:16:59:5a:24:3c:60:1d:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:70:EF:19:8D:66:3D:AD:A2:68:C4:01:03:C8:F2:09:51:98:6F
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/y81w7xmNZj2tomjEAQPI8glRmG8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.24.0/23
Signature Algorithm: sha256WithRSAEncryption
44:34:e8:23:48:ab:bf:83:c4:fe:37:a5:e9:74:7e:26:b9:6b:
72:d1:47:71:d5:12:e5:68:42:a1:31:2f:52:e8:48:16:24:15:
12:ca:e1:09:3b:64:c3:ff:ac:d1:9d:a1:ef:c5:26:0a:59:ea:
6d:75:ef:8b:37:30:ba:6d:56:e9:91:74:1a:36:f4:ad:c1:27:
0a:0d:1b:43:fd:af:12:ec:6f:eb:96:5e:9c:4d:26:c3:7a:01:
95:46:34:42:a3:9a:71:8b:25:8f:3a:e9:8e:37:43:74:45:1d:
a1:2f:13:cd:c9:a8:6c:f0:34:da:13:89:10:ff:66:57:69:4f:
ba:35:aa:fe:4f:eb:57:9d:a0:7f:db:20:7b:8b:88:ad:07:87:
79:90:f6:a6:51:ed:de:cf:de:d5:da:0c:31:66:8b:24:4c:95:
83:dd:ca:e4:c7:c9:df:44:33:45:cf:5d:15:7a:a1:3b:d3:59:
2f:f9:a6:a6:75:cf:2b:32:a7:80:fe:7d:21:62:ad:1b:a1:77:
a4:24:da:1c:39:41:4e:ad:08:07:17:b6:90:2e:57:a1:0c:fa:
71:75:ac:c1:87:b0:71:b1:0d:6a:34:f8:ce:49:b2:78:68:30:
1f:52:62:2c:ff:3b:e5:17:25:d9:b6:71:42:a2:67:47:38:32:
1f:1f:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:16 2025 by rpki-client