Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Ufu8FQTDrDwiLtDz4GI1Y2Gix0.roa
File: 3Ufu8FQTDrDwiLtDz4GI1Y2Gix0.roa (raw, json)
Hash identifier: Z1+DHVwt78AZTwwDNis9GNXG6Z8uCW/xby5fnRFKJsE=
Subject key identifier: DD:47:EE:F0:54:13:0E:B0:F0:88:BB:43:CF:81:88:D5:8D:86:8B:1D
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 92
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Ufu8FQTDrDwiLtDz4GI1Y2Gix0.roa
Signing time: Tue 01 Feb 2022 01:31:22 +0000
ROA not before: Tue 01 Feb 2022 01:31:22 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 59.146.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:22 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=DD47EEF054130EB0F088BB43CF8188D58D868B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:d0:e3:af:7a:a3:de:58:6f:60:08:55:b6:
6f:27:f0:91:db:bd:67:92:ab:1e:88:85:17:08:7a:
9d:85:43:37:ac:b4:5e:20:1a:64:54:3b:a7:65:69:
87:32:4f:6e:37:22:2b:0e:cf:15:30:e1:d2:75:65:
8b:32:b3:57:d1:71:7b:05:3d:fa:76:d7:e5:aa:47:
92:ed:14:4c:07:d2:b7:87:2d:93:5a:1b:05:b1:79:
6d:6f:ec:4c:73:53:9c:49:00:28:bb:55:44:89:1f:
d2:12:76:23:c8:bc:01:70:cc:08:41:06:44:d9:d2:
70:a5:7d:d8:40:77:23:6b:6e:72:80:81:c3:96:75:
2b:6d:87:80:85:4a:46:bd:28:99:6b:a8:b2:d9:28:
4e:2e:e1:1e:03:c9:5c:cd:fe:1f:10:5e:c8:7b:0a:
09:38:d8:7c:55:ed:eb:b7:d7:48:98:e0:ba:0b:1b:
7c:0c:7c:f5:1d:30:ca:5c:b8:c6:c9:a0:50:ab:8f:
65:71:2c:f6:41:80:2b:f0:fe:cc:f1:47:5b:d9:42:
19:13:0f:ea:4b:5b:3b:71:3c:11:78:6d:03:df:74:
58:21:c8:63:04:bc:d1:32:61:2f:61:99:2a:61:65:
0e:5f:78:d7:4c:ed:41:e1:da:a7:7b:9c:8e:b0:2e:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:47:EE:F0:54:13:0E:B0:F0:88:BB:43:CF:81:88:D5:8D:86:8B:1D
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Ufu8FQTDrDwiLtDz4GI1Y2Gix0.roa
sbgp-ipAddrBlock: critical
IPv4:
59.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
49:7e:d0:f4:e8:aa:74:bc:4a:91:7a:ed:23:36:81:ce:16:65:
28:38:a1:36:48:ed:35:30:e4:d4:cb:4d:98:32:aa:9f:65:98:
5f:13:f4:b0:c3:ca:ee:34:c3:8e:8f:66:30:9d:3e:e5:f0:d3:
2e:49:ed:79:97:e4:e7:50:51:ba:a8:76:db:87:6d:2d:39:4c:
ff:bd:9b:25:e5:85:6e:be:fe:08:bd:ed:04:8f:06:51:3f:cf:
27:cd:81:d7:e4:f9:cd:e5:f5:8e:8f:fb:c9:74:e0:5a:0f:12:
2d:fb:67:44:8f:02:18:2c:4d:82:79:b0:c2:71:2b:97:3d:60:
b9:2c:06:92:73:45:c6:b8:bb:41:6f:06:3c:25:11:9c:72:50:
5e:c8:2d:9b:f1:26:79:58:6d:15:44:d6:17:82:94:37:27:21:
33:c4:c8:69:16:d7:4d:9d:26:b5:8a:a9:49:2a:2f:4d:33:11:
46:76:76:fd:59:3f:12:38:50:72:11:ec:7b:01:6a:a5:b6:ea:
93:65:13:11:ec:47:9d:d9:bf:47:43:9e:ea:ee:2f:2d:d8:99:
8a:b3:91:80:fe:9e:16:bd:2e:59:99:eb:00:97:61:32:a3:5f:
13:5f:79:e9:03:00:4c:6b:38:41:36:b3:83:f6:45:bc:9d:09:
4b:d7:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:59 2025 by rpki-client