Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/0q8oEtShHXHODqA_6i2w0tRq-20.roa
File: 0q8oEtShHXHODqA_6i2w0tRq-20.roa (raw, json)
Hash identifier: OzEV9Qapd2SRsnrjOkcsholMfQq/nJK0d5IR8iAgSrs=
Subject key identifier: D2:AF:28:12:D4:A1:1D:71:CE:0E:A0:3F:EA:2D:B0:D2:D4:6A:FB:6D
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: A8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0q8oEtShHXHODqA_6i2w0tRq-20.roa
Signing time: Tue 01 Mar 2022 01:33:07 +0000
ROA not before: Tue 01 Mar 2022 01:33:07 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 2527
IP address blocks: 211.2.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 1 01:33:07 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=D2AF2812D4A11D71CE0EA03FEA2DB0D2D46AFB6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:ed:ee:65:61:d3:26:df:47:51:ca:44:bd:
0c:e6:b9:c0:60:09:85:16:e5:cd:b8:fd:3f:45:b9:
a4:21:33:d6:59:1f:1e:ac:8e:9d:72:94:7e:a6:a8:
9b:a1:d5:33:c2:da:03:de:da:fd:64:15:e5:c0:64:
1d:ec:36:5b:4c:2d:e9:98:ae:46:3a:1a:29:9f:cc:
03:18:ad:fa:f0:ee:f7:b7:80:70:4f:9c:f0:ab:70:
0e:23:80:1e:c4:7a:bb:e4:81:4c:ac:c2:05:1a:57:
ea:bc:e8:fe:74:74:4b:06:2a:4b:35:5e:f4:f2:e1:
a9:7f:fd:b5:04:50:ae:f7:7e:d4:ee:09:af:56:9a:
3c:59:0d:e3:84:8a:af:62:52:3a:ef:95:a3:51:93:
1b:b6:80:23:f9:94:3b:09:e7:98:11:fd:34:a9:71:
61:28:80:e4:5b:e6:6d:fd:9a:26:d8:b2:75:c4:d5:
4a:6c:54:a8:e0:d6:53:9a:69:2d:4a:1c:fd:5d:a0:
e0:3f:72:fe:f0:74:2b:c5:08:76:2d:7e:d3:74:b3:
67:61:f3:70:26:dd:09:d3:4c:82:57:a5:6a:b9:28:
d0:53:6c:97:15:af:f3:86:39:40:b9:4c:f0:8a:f3:
53:5f:54:1a:e7:2d:4f:84:fc:f1:0c:73:2e:22:eb:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:28:12:D4:A1:1D:71:CE:0E:A0:3F:EA:2D:B0:D2:D4:6A:FB:6D
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0q8oEtShHXHODqA_6i2w0tRq-20.roa
sbgp-ipAddrBlock: critical
IPv4:
211.2.0.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:74:43:e6:71:03:32:1f:66:e7:6a:d5:7d:69:7e:ea:34:f8:
9c:6e:8a:d2:bd:37:c8:f0:d7:0b:af:2a:f0:6f:ea:de:1a:64:
42:36:e6:a5:a8:fa:88:da:94:75:d4:0b:2f:83:38:13:f9:b9:
db:29:bf:43:93:32:03:c5:ad:77:69:99:94:b4:23:ee:de:8e:
14:95:7f:f5:87:f4:a3:69:6a:88:f1:a5:30:a0:2b:ae:05:0b:
56:33:96:ae:b2:79:69:1e:1c:bc:3b:0d:61:82:02:af:7a:12:
3c:13:f8:13:50:65:be:c9:ea:d9:65:c7:77:d0:d8:35:19:dc:
85:71:f5:98:6c:f6:7f:96:98:2e:a3:2a:19:32:25:79:2f:7e:
8b:5a:a0:02:6b:c5:67:b9:d5:06:07:6b:64:81:9b:d3:f5:9e:
64:cf:0d:65:d4:82:56:51:92:55:78:1a:6b:07:39:0a:37:bb:
ee:0c:e9:58:5c:b4:a1:5b:5c:ba:24:18:31:9d:af:06:75:db:
e0:fe:02:d6:ca:3c:16:53:3b:08:af:47:e7:a7:c7:ce:37:e1:
6f:2d:be:66:76:81:d9:de:61:3c:f8:82:3b:bf:e5:0a:84:f6:
a0:07:3b:f4:0f:5a:4c:b3:e0:ac:8a:ac:ec:8b:01:ae:73:07:
f4:df:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:07 2025 by rpki-client