Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/GdnyuwT5Bdxrn2RwMHe9s8RAylM.roa
File: GdnyuwT5Bdxrn2RwMHe9s8RAylM.roa (raw, json)
Hash identifier: D6l+AP1Dmh9vrXg8GP8ZWZ2v2LXt65tDAN9gC4KQUFs=
Subject key identifier: 19:D9:F2:BB:04:F9:05:DC:6B:9F:64:70:30:77:BD:B3:C4:40:CA:53
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 97
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/GdnyuwT5Bdxrn2RwMHe9s8RAylM.roa
Signing time: Tue 01 Feb 2022 01:31:23 +0000
ROA not before: Tue 01 Feb 2022 01:31:23 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 121.2.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:23 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=19D9F2BB04F905DC6B9F64703077BDB3C440CA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:1f:3c:b5:30:39:dd:a0:d2:0d:d6:b0:0c:
92:97:87:1d:bf:cf:ad:56:03:9f:62:a7:09:3c:53:
ad:b2:54:21:1e:ac:8e:6e:ce:10:85:b4:19:3d:10:
ab:5a:78:ac:d8:c1:7c:4d:79:ae:51:19:c3:33:c6:
7b:f6:54:ac:76:f6:09:81:0b:c3:87:2b:f1:0f:d8:
fd:0e:cf:d5:a2:28:b7:fb:ec:e0:49:f2:13:b7:57:
1e:0a:4c:f7:4f:9b:1f:c9:ce:c1:33:46:5a:08:f8:
1d:ed:4c:49:dc:0b:76:ef:11:c6:40:7f:0f:57:6a:
5b:0e:f3:55:3c:5a:9d:22:ac:10:7c:f1:e3:6f:0f:
3d:34:2f:50:89:c3:b3:dc:e6:73:da:2d:ff:90:9b:
96:19:cf:f8:12:7d:b0:37:36:f2:8a:f1:d0:a9:60:
45:20:ea:f8:35:25:b7:9e:a3:02:f5:00:38:55:46:
a8:fd:e2:3c:0a:5c:49:a4:d2:24:04:54:05:6f:69:
77:e1:e9:34:bc:40:1d:20:02:3d:46:29:ab:6d:a7:
41:8c:de:1f:8f:47:45:90:bb:76:32:5d:e9:af:dd:
b9:e8:8a:c8:23:aa:e6:54:77:93:e2:da:23:a4:e1:
73:52:2c:29:ec:d0:9c:0d:6e:9d:5d:81:04:db:c4:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:F2:BB:04:F9:05:DC:6B:9F:64:70:30:77:BD:B3:C4:40:CA:53
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/GdnyuwT5Bdxrn2RwMHe9s8RAylM.roa
sbgp-ipAddrBlock: critical
IPv4:
121.2.0.0/15
Signature Algorithm: sha256WithRSAEncryption
98:41:0d:6f:38:f4:70:8e:d6:8b:8d:3e:c5:c5:41:0f:fd:05:
0f:8b:b3:46:ca:1a:1a:f8:40:1d:f5:9b:26:2d:ca:a5:96:9d:
f3:1a:c0:c7:27:44:be:c6:4b:c6:45:1d:36:f3:2d:3e:96:af:
d0:65:04:60:88:f1:5d:95:f0:d6:5a:33:33:ce:d1:55:39:15:
17:1f:35:45:84:24:11:61:63:60:8d:e1:ad:09:47:67:c1:e8:
61:dd:b7:28:69:ec:f0:ff:f9:88:76:7d:76:b7:1c:35:57:fc:
00:d3:aa:22:1c:fc:52:8c:a7:d6:24:38:e9:2f:1e:a7:04:e1:
7f:9d:53:27:ac:88:05:68:4f:4c:a4:ef:29:58:f2:1f:be:c9:
68:fd:ea:41:c9:03:da:d8:56:b3:40:c0:84:c8:44:c9:92:92:
36:cd:31:bd:59:19:18:e4:f6:98:c0:8f:46:71:6c:95:03:6b:
a5:82:8a:e1:f2:e5:12:b2:d2:ac:c3:67:a9:b2:8c:19:aa:c4:
d8:fb:6b:70:24:9d:c7:4b:c9:c9:d0:01:01:42:51:7c:b8:a1:
ef:5a:3e:bc:0f:95:75:57:7c:80:c8:06:d9:7a:58:3d:76:f2:
fe:fe:f5:ec:c1:57:66:60:24:7d:71:ef:83:c0:5d:07:16:82:
3e:53:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:55 2025 by rpki-client