Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LbnbjWXRQHv1vGg_3qtl885XNno.roa
File: LbnbjWXRQHv1vGg_3qtl885XNno.roa (raw, json)
Hash identifier: CEwjm/xcDdYgWUE63NpOSXum6aGWMrsL1Bb0BPtWnGU=
Subject key identifier: 2D:B9:DB:8D:65:D1:40:7B:F5:BC:68:3F:DE:AB:65:F3:CE:57:36:7A
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0125
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LbnbjWXRQHv1vGg_3qtl885XNno.roa
Signing time: Fri 07 Jul 2023 04:06:01 +0000
ROA not before: Fri 07 Jul 2023 04:06:01 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 119.150.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:06:01 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=2DB9DB8D65D1407BF5BC683FDEAB65F3CE57367A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7f:3c:5c:e9:01:58:e7:1f:64:25:3d:d2:db:
a3:b2:95:9d:a2:9f:4f:47:02:49:b3:cd:51:10:65:
9d:f9:49:ae:b4:53:3a:64:03:bd:30:b3:0d:af:24:
cd:8d:5e:c9:10:97:a6:81:30:f5:d6:56:b4:20:a6:
de:c3:64:97:c0:22:db:35:98:6c:a2:36:a4:8c:dc:
98:01:7e:ff:89:9d:37:76:d7:36:e2:c8:7c:00:3c:
71:04:4b:a8:6a:87:7c:71:b4:ef:74:e2:cf:df:f9:
7f:5f:f6:3f:20:80:31:3a:06:26:c2:30:03:d1:bd:
a7:bf:b1:6c:0e:48:6b:66:d0:b6:4c:bf:47:9b:a9:
d8:f2:a2:10:24:1b:b0:fe:03:b2:c6:6b:1f:f1:91:
fa:1c:f7:94:1d:bf:40:9b:df:36:05:e2:32:ce:40:
ab:af:09:91:9c:52:38:f6:d6:fa:15:5c:cb:c7:04:
19:f0:f4:35:22:b9:83:90:ab:26:e3:c7:e9:bb:6e:
6e:e5:a5:b0:09:bb:02:66:c5:00:35:67:01:49:1c:
45:2e:ea:57:bc:fd:99:c2:88:5b:27:63:d2:cb:52:
27:c2:4c:96:bd:ee:35:8d:9e:59:f0:9e:03:1e:44:
8b:ec:3b:97:59:35:51:85:04:87:27:17:74:65:dc:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:DB:8D:65:D1:40:7B:F5:BC:68:3F:DE:AB:65:F3:CE:57:36:7A
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LbnbjWXRQHv1vGg_3qtl885XNno.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.150.239.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fa:2d:c4:76:68:0c:08:dd:d6:7b:b6:a2:43:48:a0:0b:38:
4b:da:65:10:a6:20:67:47:f2:bb:ae:13:5a:16:a0:52:10:cf:
61:b5:2d:f1:4f:bf:79:9e:df:1d:9b:52:17:4b:6b:50:53:89:
04:d9:c8:21:06:dc:66:03:a8:c1:37:22:b5:bf:9d:7c:53:26:
73:98:25:f5:dd:57:8b:e0:35:08:7b:f6:3b:69:da:f9:96:fa:
51:8f:65:bf:c2:72:ce:6d:2f:92:71:75:bd:f5:45:a0:9a:b3:
f5:83:6f:2d:c3:49:f2:4a:33:d8:77:34:bd:68:b5:bd:fd:c0:
72:14:ad:66:6d:91:27:1f:0e:96:29:b8:12:14:1a:c9:0d:33:
d9:f1:9b:9d:dd:9c:6e:32:5d:49:11:15:43:24:47:de:26:39:
16:67:23:1c:5b:10:3d:c1:c1:1f:c0:90:ca:f5:ce:10:dd:cb:
cd:14:00:6f:1a:dd:e0:a8:f9:68:37:b5:62:b6:b9:92:fe:32:
66:80:22:00:5d:80:db:e6:23:ed:49:37:77:53:fd:4b:1b:09:
65:40:69:1b:fe:7c:bf:a4:61:7a:c4:66:08:e5:8c:94:09:fe:
5c:f7:21:95:24:84:13:bb:27:80:07:65:78:2f:9d:f2:f9:35:
7f:63:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:18 2025 by rpki-client