Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fF_YHr7sIq0BrS2_5oEOLOp4gc4.roa
File: fF_YHr7sIq0BrS2_5oEOLOp4gc4.roa (raw, json)
Hash identifier: ClUjMRqchlafmwDzNdOBpF4ywRKoP8Rw7le7yVDJBoc=
Subject key identifier: 7C:5F:D8:1E:BE:EC:22:AD:01:AD:2D:BF:E6:81:0E:2C:EA:78:81:CE
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01A8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fF_YHr7sIq0BrS2_5oEOLOp4gc4.roa
Signing time: Fri 07 Jul 2023 04:14:32 +0000
ROA not before: Fri 07 Jul 2023 04:14:32 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 111.235.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:14:32 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=7C5FD81EBEEC22AD01AD2DBFE6810E2CEA7881CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:d6:2d:66:31:48:00:9b:1f:e7:87:2d:4c:
0f:3b:8e:0a:91:d3:42:ae:0e:02:c3:b8:17:44:10:
24:c7:d3:18:c6:1f:e1:40:a2:d1:8c:93:29:ad:da:
21:33:75:0a:37:0e:98:54:c8:25:c3:ff:19:25:cc:
07:6b:78:b7:e3:fd:5f:23:20:76:9f:4c:78:25:e5:
b6:47:22:f0:82:15:d0:f3:01:eb:7c:a8:39:bd:3f:
41:42:b1:ca:18:2d:b2:5f:d8:b6:dc:02:2e:32:59:
1d:04:fe:41:f6:6b:6a:fd:b4:ad:fd:da:98:61:44:
00:e4:d1:46:c6:c0:01:c0:fb:ae:8a:e4:42:5a:84:
96:79:84:8e:b9:44:38:d8:fd:9a:24:18:d0:91:de:
5e:c7:6a:3a:73:f0:94:71:63:d3:34:43:b5:eb:0e:
b8:ac:51:18:2b:f7:94:f9:81:e0:24:b2:54:b9:92:
1a:c2:35:48:07:8d:c6:b9:79:60:4c:89:5f:5b:47:
54:4f:e4:f7:b2:fc:a4:bf:d9:32:3c:c6:86:bd:b8:
c4:a0:db:1a:73:c1:8c:f3:a7:89:0e:be:68:de:cf:
a6:02:8f:5e:65:ae:df:4f:60:a2:f9:82:0f:7b:ea:
f5:cd:07:cf:25:2a:66:29:df:38:61:e2:57:a4:62:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5F:D8:1E:BE:EC:22:AD:01:AD:2D:BF:E6:81:0E:2C:EA:78:81:CE
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fF_YHr7sIq0BrS2_5oEOLOp4gc4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.235.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:9e:7e:05:dd:2f:ff:f2:ed:60:c4:95:03:ac:60:44:0e:c2:
20:1a:ec:8e:fd:48:0e:03:d7:d9:db:4e:ad:ac:86:2b:71:f4:
35:74:2c:d1:39:77:fb:c6:43:61:d8:dc:04:97:85:b9:f8:30:
7b:71:3a:d9:ca:cc:f9:da:1f:e5:c7:6b:03:79:bd:3e:6e:86:
90:4c:93:90:f0:7f:4c:08:ed:53:8b:08:72:27:1d:25:16:0e:
01:ce:fc:b1:1a:de:4e:b2:4f:ad:ca:9b:1a:23:df:8e:f9:fd:
42:58:63:2c:1e:c4:9f:82:97:aa:96:42:6b:bb:7d:71:07:19:
b0:1d:ee:38:2f:23:9f:78:58:54:47:d4:46:1f:9b:e8:f0:3e:
1d:83:ac:e7:41:76:7b:dd:0c:63:68:2f:48:80:9c:78:5d:67:
cc:d5:6b:10:30:d3:93:61:a0:1d:f8:40:aa:57:48:6d:8a:7a:
8b:2b:88:8a:8d:dd:4a:c6:7a:ca:db:7b:a8:6c:90:27:9d:cb:
c5:3d:7f:40:4f:bf:c0:43:e9:34:92:fb:72:58:ef:92:b8:1a:
66:e1:9e:9c:89:b8:d9:db:36:42:96:ec:20:6a:90:f6:8d:46:
04:39:d6:1e:b6:cc:59:27:3e:51:41:7d:a1:54:2d:dd:63:68:
32:2e:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:20 2025 by rpki-client