Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/7Kdpswl6K8NZ3nc9dZeT4KXWD_E.roa
File: 7Kdpswl6K8NZ3nc9dZeT4KXWD_E.roa (raw, json)
Hash identifier: wG3MwyB3KY8vr8CCfIF9ToFSxN1An9Q1Si/3W+bIBrw=
Subject key identifier: EC:A7:69:B3:09:7A:2B:C3:59:DE:77:3D:75:97:93:E0:A5:D6:0F:F1
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 87
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7Kdpswl6K8NZ3nc9dZeT4KXWD_E.roa
Signing time: Tue 01 Feb 2022 01:31:17 +0000
ROA not before: Tue 01 Feb 2022 01:31:17 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 123.198.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:17 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=ECA769B3097A2BC359DE773D759793E0A5D60FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:3f:9b:08:42:9e:d3:b7:8f:5e:4d:3c:eb:
b0:e8:91:67:53:3a:5d:a2:f4:66:06:69:04:54:ec:
e6:4e:fe:b2:02:0b:7a:3a:78:98:7e:30:31:cf:4d:
54:b0:66:6e:7c:b7:59:fa:46:d6:fd:c1:fd:44:e5:
ed:65:37:10:77:1e:87:ce:45:06:30:be:fc:b5:5f:
b5:98:af:05:e6:d3:e9:76:ed:2f:2b:87:00:8e:61:
c8:0f:3c:86:78:29:35:45:60:e1:84:ac:67:61:6d:
0e:04:3f:e1:10:a1:b4:03:79:f8:b5:87:04:5c:a8:
b3:53:f8:fd:b4:39:6d:29:35:2c:dd:87:c2:9d:dc:
36:84:df:0d:a6:3c:4e:b4:74:77:27:06:bc:4d:ed:
3b:e6:15:32:9b:ba:d9:07:67:9e:74:eb:e3:11:05:
19:4b:ce:d9:4b:89:40:35:a3:22:f0:9f:95:56:93:
81:57:78:bb:9d:f5:17:b2:e5:95:8f:7a:dd:76:72:
a4:cc:bd:08:03:42:39:2c:91:9b:d4:cd:5f:43:5d:
85:72:54:1f:a1:5a:a2:e0:4d:5c:8b:aa:88:07:01:
a7:a3:c2:b2:74:a2:08:63:a6:c6:59:a4:ab:ec:9b:
b4:39:1e:ae:98:d2:9d:dd:79:75:12:c2:af:29:48:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:69:B3:09:7A:2B:C3:59:DE:77:3D:75:97:93:E0:A5:D6:0F:F1
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7Kdpswl6K8NZ3nc9dZeT4KXWD_E.roa
sbgp-ipAddrBlock: critical
IPv4:
123.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:73:21:e0:60:c9:c0:ab:a4:f5:37:a2:cd:e7:4f:1a:c3:a0:
5f:8b:a8:e5:cd:aa:f0:45:38:9a:d9:60:81:93:e5:27:7b:8e:
72:19:0f:e1:d5:dd:69:e8:2b:f9:e7:63:b9:51:7d:f4:ec:62:
bb:4a:1e:e0:8f:57:40:02:e0:c6:81:44:76:b6:73:59:7c:a1:
7d:2c:48:20:65:97:6a:15:ad:a0:60:6e:b1:22:1a:9a:e7:71:
1c:e3:53:36:f0:05:cf:7a:c2:d4:d0:e8:cc:c2:91:a1:14:ae:
dd:48:8f:b8:1c:4f:6e:7e:12:89:33:f8:f7:3b:2f:df:77:0f:
66:01:0f:84:55:2e:56:b6:8e:8d:23:d1:33:0d:5d:74:e6:c9:
b3:f5:99:03:08:c9:44:d1:b7:a5:e5:a8:27:09:21:65:08:ba:
b5:27:8c:5c:6f:31:69:4f:5f:b4:d1:c4:98:38:0e:7e:6d:17:
de:05:a7:7c:22:83:e4:0a:9d:78:91:cf:ba:44:ce:58:9f:ac:
85:9b:c8:a0:10:49:c2:be:55:84:48:4e:c3:21:47:fb:f6:87:
50:4a:2e:d9:46:c8:ca:b6:6c:9c:9c:4c:c9:01:7f:0d:5e:aa:
86:09:80:71:8b:88:2e:e4:6a:47:c3:6a:8b:f3:59:9f:f4:bc:
12:15:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:25 2025 by rpki-client