Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/J_tEYdQNynbmFGHc5zTnnfWL89k.roa
File: J_tEYdQNynbmFGHc5zTnnfWL89k.roa (raw, json)
Hash identifier: xpa+bu2E0NLKus7gEMrTRigvLVTPJW2xxijEsk2CRvQ=
Subject key identifier: 27:FB:44:61:D4:0D:CA:76:E6:14:61:DC:E7:34:E7:9D:F5:8B:F3:D9
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 1D
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/J_tEYdQNynbmFGHc5zTnnfWL89k.roa
Signing time: Tue 23 Feb 2021 08:57:34 +0000
ROA not before: Tue 23 Feb 2021 08:57:34 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 207.65.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:34 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=27FB4461D40DCA76E61461DCE734E79DF58BF3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:9f:9f:a2:53:39:04:34:30:d7:8b:f4:a3:
42:08:f3:2b:37:b3:ce:92:69:84:e1:d0:0a:11:54:
b1:0d:9c:cd:fa:e3:8b:7f:e3:d5:12:d3:97:d3:3b:
38:9c:79:34:a6:0d:c1:97:d3:ea:d3:2e:2f:8c:68:
73:a9:2f:89:72:e4:b9:cd:7d:4b:e3:a3:65:9c:25:
6e:b4:16:d5:08:35:09:fe:7b:96:e9:95:94:c9:0c:
7c:d8:43:ea:56:7c:10:11:1e:07:0b:2c:e3:24:f3:
39:fa:3d:7a:a7:55:78:02:46:f7:47:61:ca:4c:1a:
f4:26:b8:e5:04:2f:38:d7:a5:75:92:e8:48:cc:4a:
1f:57:14:00:33:14:ae:6d:35:05:2a:45:5e:32:0d:
5e:ee:0e:e4:42:9d:cf:86:35:75:05:ee:33:e0:8e:
17:8c:83:7a:3e:8e:31:a9:35:38:cf:6b:60:ea:29:
e8:ec:cd:fb:6d:31:c0:a0:46:72:a6:0b:0b:81:03:
01:a8:c1:45:9c:af:a9:fd:25:78:7c:cb:63:5c:73:
2c:fa:15:e9:f7:bb:ec:77:28:f5:c9:3e:83:80:4b:
9b:ec:6c:d3:00:9c:ff:eb:95:9a:6b:f8:bd:1a:ce:
0e:08:1e:65:30:e3:f0:2d:bc:98:4c:da:34:78:d9:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:44:61:D4:0D:CA:76:E6:14:61:DC:E7:34:E7:9D:F5:8B:F3:D9
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/J_tEYdQNynbmFGHc5zTnnfWL89k.roa
sbgp-ipAddrBlock: critical
IPv4:
207.65.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d9:ac:e0:3e:06:2f:60:b5:1b:c6:3f:f5:19:47:4e:ba:ee:b1:
c8:b1:2c:cf:bf:20:56:97:4a:88:0a:a9:4a:9e:d9:68:07:35:
9e:2f:5a:6e:19:5b:32:e0:fe:bd:2d:05:1c:eb:a9:d6:cc:52:
c2:57:11:24:e4:df:2b:a2:c6:3b:ef:ee:b5:74:ce:7f:4a:74:
1e:36:43:fc:84:a3:33:53:be:f8:88:ef:d6:d8:40:fe:7e:9e:
e0:2a:41:61:93:8a:b3:37:d9:be:94:b1:f0:5b:8e:fe:12:df:
94:37:e7:4e:0a:41:7e:cd:c4:df:35:9b:5f:21:30:a2:87:09:
39:b7:f7:56:ad:35:03:c2:5a:ee:a4:f6:70:15:7f:a9:7d:92:
da:f5:d9:2f:4e:43:31:aa:05:36:9b:ed:ad:6d:50:0f:e6:1f:
ae:7a:0a:1e:b4:8a:66:b5:25:7d:08:19:db:99:33:68:be:a0:
ad:0f:90:07:26:66:d0:0e:cc:99:95:2e:33:60:1e:d3:e2:c4:
57:07:19:d0:b6:26:6d:1c:68:a5:f8:a5:8e:fc:d6:05:c3:c1:
b9:8b:cd:5c:a7:58:39:bb:0f:91:44:be:16:d6:24:55:60:63:
16:a0:1c:87:57:88:ea:de:3d:6b:a2:26:aa:35:d6:68:b3:db:
eb:b6:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:12 2025 by rpki-client