![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/m_OX2mg9-ZSE89ZY9nh3-REWeXE.roa
File: m_OX2mg9-ZSE89ZY9nh3-REWeXE.roa (raw, json)
Hash identifier: XdmTvDswcPppgTqDndJMFSSiVXf9wfbMYTyWvz9cEYc=
Subject key identifier: 9B:F3:97:DA:68:3D:F9:94:84:F3:D6:58:F6:78:77:F9:11:16:79:71
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 011E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/m_OX2mg9-ZSE89ZY9nh3-REWeXE.roa
Signing time: Fri 07 Jul 2023 04:05:58 +0000
ROA not before: Fri 07 Jul 2023 04:05:58 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 27.133.8.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:05:58 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=9BF397DA683DF99484F3D658F67877F911167971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:03:74:62:18:c5:72:b4:6e:71:14:0a:29:
07:d3:3f:a6:07:b3:33:8a:3c:df:d1:44:2d:b7:f5:
23:4d:85:c1:26:53:a4:24:ff:90:ae:71:92:58:54:
00:f7:17:56:97:a9:36:49:36:68:cb:77:ef:30:39:
4f:31:70:4a:8d:32:7c:0f:cc:fb:7c:df:5a:48:64:
1a:ec:1e:cd:ec:d7:24:e9:ba:6f:60:34:0d:ca:1e:
48:09:0d:d8:b2:6c:21:2c:b6:d8:05:4c:4d:e8:83:
b4:b3:f6:b3:25:b9:09:48:68:6e:1f:17:90:cf:93:
30:24:d4:c5:ec:31:ed:44:2c:da:bc:c5:70:d5:25:
b6:b4:f5:52:dc:b7:23:49:34:b4:2d:95:1c:2b:54:
a2:a7:27:96:7b:9b:5a:25:24:46:ca:a4:7c:1b:06:
e6:33:9c:2d:90:c8:ed:a8:d9:44:c0:fa:9c:7e:b3:
a8:01:7e:b7:1b:17:1b:19:bc:ff:61:76:f1:d5:fd:
fc:61:5a:df:9b:64:81:ac:c1:a5:bd:34:a4:7d:90:
aa:6f:81:5f:43:06:c6:53:45:93:83:8a:91:8b:f4:
78:69:17:c9:6b:2d:5b:f6:5f:5a:7e:d3:21:a2:13:
4f:a6:7e:f3:e1:d3:cd:8d:1f:cc:d2:42:c2:03:80:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:97:DA:68:3D:F9:94:84:F3:D6:58:F6:78:77:F9:11:16:79:71
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/m_OX2mg9-ZSE89ZY9nh3-REWeXE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.133.8.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:08:3e:c3:61:b9:80:62:e5:44:f7:72:dd:6e:d6:26:78:4b:
da:c1:14:21:0d:6b:2f:e7:e8:68:b3:5d:ac:c7:7b:45:26:16:
42:0e:0c:84:9b:5c:92:45:93:e3:8d:d8:bb:d2:a1:50:86:9e:
1c:38:c0:5c:54:f3:bc:32:fb:48:38:8c:79:b1:41:07:80:c8:
68:0c:69:58:0b:63:b1:4c:3c:07:59:e4:b0:44:48:c3:a2:26:
a0:4c:e9:81:bb:71:cb:d0:52:2b:05:a0:64:e2:b3:94:bd:66:
71:22:54:85:d9:6a:51:dc:4f:a9:62:15:3c:46:08:b8:68:97:
06:1a:40:bf:89:d3:28:62:15:40:6a:00:ea:89:27:47:7b:85:
08:fd:28:d9:36:f6:ac:17:16:e4:1e:08:de:02:fc:5d:6a:a5:
f9:90:6b:da:e7:08:68:f2:5e:c6:cd:b5:68:00:95:74:13:73:
f5:93:b5:01:90:12:7e:f5:29:e3:df:01:f3:04:b1:3e:fd:a0:
5c:e7:08:93:b1:5d:a1:6b:6b:00:a9:b1:5e:a4:a7:79:7a:21:
56:66:69:7b:5c:04:dc:7a:41:94:1c:3f:3d:48:17:c7:12:37:
a9:45:ae:db:00:66:8d:1e:d8:1c:fe:a9:fa:8a:d3:ef:72:90:
b5:29:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:03 2025 by rpki-client