![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/4Y5UROIGwlDji7Wkk0LuETA1VoU.roa
File: 4Y5UROIGwlDji7Wkk0LuETA1VoU.roa (raw, json)
Hash identifier: J4i0nOTaOgoOofrAgJdlAGuHIikluGqO7y8wKBZwgPw=
Subject key identifier: E1:8E:54:44:E2:06:C2:50:E3:8B:B5:A4:93:42:EE:11:30:35:56:85
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 0C
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/4Y5UROIGwlDji7Wkk0LuETA1VoU.roa
Signing time: Mon 20 Feb 2023 03:32:56 +0000
ROA not before: Mon 20 Feb 2023 03:32:56 +0000
ROA not after: Fri 16 Feb 2024 07:35:22 +0000
asID: 9619
IP address blocks: 211.125.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Feb 20 03:32:56 2023 GMT
Not After : Feb 16 07:35:22 2024 GMT
Subject: CN=E18E5444E206C250E38BB5A49342EE1130355685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:b8:dd:e1:b7:60:cd:2a:ae:7e:17:70:c8:
9b:11:b6:d2:bc:4e:57:82:95:8b:0b:c8:d3:7f:18:
41:b4:9c:83:af:38:94:6d:fa:6e:09:21:69:e9:20:
73:7a:75:de:86:3a:f5:50:51:29:b2:f4:6d:cb:96:
6d:2c:bd:12:d7:c5:f7:81:24:a7:74:10:c9:ba:bc:
3c:8e:3e:70:9a:f9:e8:c5:f8:2e:9e:8c:e8:fa:50:
6c:bf:e5:34:a5:58:db:4d:15:af:6f:04:3a:7c:aa:
af:23:f2:91:5b:36:1d:8e:a5:5a:04:97:5b:34:b2:
8d:0f:a5:44:62:34:46:01:35:02:e1:64:8b:af:a9:
0b:b8:50:ab:af:dd:8c:0a:e6:08:26:d1:63:07:0e:
98:8c:a5:6b:23:77:d6:94:53:39:86:c2:b2:73:e5:
d8:8f:34:be:13:c6:ea:bc:19:61:bd:05:76:45:8b:
fb:8d:06:95:20:6d:a0:90:2b:f4:e7:e5:52:93:ac:
6e:eb:d0:45:d6:3c:53:75:d5:93:37:55:12:fd:39:
6a:1c:7c:c6:7e:06:62:1c:80:76:dd:c9:d4:23:67:
93:e4:19:4a:80:e8:21:1a:c9:41:ff:2f:81:13:36:
77:27:fb:af:91:d5:f2:5a:2b:dc:fa:a4:21:4f:a2:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8E:54:44:E2:06:C2:50:E3:8B:B5:A4:93:42:EE:11:30:35:56:85
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/4Y5UROIGwlDji7Wkk0LuETA1VoU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e8:c1:cb:ba:01:45:02:5f:d3:e9:a7:28:60:76:80:0c:d0:
ef:23:fb:79:9c:16:17:80:6b:7d:f0:fb:7d:f6:77:5c:f9:69:
ef:7e:07:8d:b4:db:60:a6:e0:9a:17:48:d9:4e:6c:72:83:05:
33:b2:92:ad:2d:55:de:80:e5:c2:ec:5c:22:22:88:57:5c:71:
7c:1a:85:85:53:ad:47:02:43:0c:5d:0d:c9:15:db:fb:fb:b6:
48:bc:1d:e5:b6:a5:3e:ca:b8:12:8a:11:27:b0:08:af:0c:2d:
19:81:18:82:68:02:5a:d9:a3:14:bb:4f:d3:df:5e:b4:90:99:
dc:a5:20:16:96:29:5a:03:50:83:30:42:c3:b5:43:ed:02:95:
c0:90:0b:cd:24:b7:a1:54:57:0c:0c:31:04:85:08:5b:e3:46:
25:e3:97:88:05:0d:4a:8b:d8:a3:26:47:69:b0:9a:e3:8a:34:
f6:ff:b1:ee:2c:c2:4a:ab:98:91:72:e0:54:ef:4e:f9:32:bb:
ec:36:bc:8d:92:aa:a3:3a:88:da:d7:5e:0a:b3:50:08:3f:58:
69:3b:1f:31:81:3a:f9:7c:eb:ec:62:80:df:a9:52:59:49:07:
90:cf:2c:c0:cf:d0:d7:5f:ab:17:1b:e7:c8:ff:4b:f1:14:48:
5f:a6:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:39 2025 by rpki-client