Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/PH6crnZ6PX9eymRf4DXxdWyErOU.roa
File: PH6crnZ6PX9eymRf4DXxdWyErOU.roa (raw, json)
Hash identifier: OVQnnpQxi9HwkOXcfyeJNP+u2qW0NcBwyJ/D/RhCgaY=
Subject key identifier: 3C:7E:9C:AE:76:7A:3D:7F:5E:CA:64:5F:E0:35:F1:75:6C:84:AC:E5
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 9D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/PH6crnZ6PX9eymRf4DXxdWyErOU.roa
Signing time: Tue 01 Feb 2022 01:31:51 +0000
ROA not before: Tue 01 Feb 2022 01:31:51 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 220.211.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:51 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=3C7E9CAE767A3D7F5ECA645FE035F1756C84ACE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:23:78:c7:5f:c9:8d:28:10:d6:05:86:c1:
12:4c:a2:67:60:a8:92:89:38:83:0b:a3:3b:d2:af:
b3:18:d3:2d:24:8d:3d:59:4e:ee:2b:c6:a1:c3:a1:
fa:31:6a:52:99:c0:3a:db:19:78:5c:b7:f2:d8:47:
97:d8:d7:28:13:18:40:d5:e3:55:69:0e:66:c7:00:
d3:13:6e:77:3f:01:a6:be:85:4f:f4:c0:80:67:84:
01:36:2a:3e:e7:72:b2:d9:2f:ba:c9:a0:94:b2:45:
d0:b4:b6:bd:fb:7b:24:1c:9c:e2:ce:87:28:8f:03:
01:64:4a:5a:d7:6e:44:ea:50:3a:e0:58:f5:32:69:
a5:c0:21:40:64:43:5a:9c:21:bb:42:7e:34:41:7a:
75:49:e4:87:dd:cf:a6:a8:67:e5:bd:0d:50:49:d9:
46:8a:4d:cf:20:80:8d:b0:cc:e7:72:ee:f1:f0:23:
e8:40:84:53:42:b8:f3:fc:43:1d:a3:5c:11:3b:7a:
ed:b6:d8:a8:44:a8:c4:9a:9a:9c:f1:e2:13:58:05:
f9:8c:c4:01:4c:71:48:e5:fe:a1:99:71:74:6b:7b:
4b:89:c0:ea:3f:62:f7:31:23:56:65:a6:cd:f1:07:
ac:b6:e5:f9:c5:e4:46:9d:6d:0f:48:46:37:12:d5:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:9C:AE:76:7A:3D:7F:5E:CA:64:5F:E0:35:F1:75:6C:84:AC:E5
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/PH6crnZ6PX9eymRf4DXxdWyErOU.roa
sbgp-ipAddrBlock: critical
IPv4:
220.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:f5:5f:61:6c:f5:4f:49:b8:15:8b:c9:80:42:c5:15:ee:e6:
dd:28:06:9f:f2:7e:96:de:76:67:94:2e:21:5f:34:54:e5:c2:
83:fb:a4:3b:65:72:a1:c7:85:47:ac:36:81:02:b3:e0:a5:cb:
26:c6:b0:3a:4f:5b:50:6f:0b:f5:2a:c9:f7:f0:fe:b8:ee:af:
5c:db:f1:29:f4:55:74:9e:9e:56:78:08:dd:1c:3b:7e:d0:82:
2b:95:15:e1:f7:65:af:0a:17:ae:e3:9f:32:39:13:a6:7f:b1:
ec:e7:ae:28:e6:ec:f0:6d:20:5b:8f:b8:f3:59:c5:75:e9:59:
ea:e0:62:70:ed:9c:f7:b1:15:ba:02:fd:05:47:2e:41:7e:a7:
04:02:0d:ed:c0:8f:36:77:f2:6e:db:84:8a:24:8b:22:67:4d:
9d:a7:d8:38:bd:4c:ed:99:02:2c:42:e6:59:80:26:90:42:5d:
59:4d:7c:2c:d4:ce:a3:d2:5c:1c:43:55:d2:79:22:a2:e0:f1:
53:71:94:66:8a:f6:5f:b5:45:14:f5:45:5a:68:70:52:a2:f6:
fd:b2:50:a9:0c:7e:3f:6b:44:b5:11:18:17:fe:7c:8f:fb:a6:
77:16:a2:e6:e9:17:c7:84:ab:52:e7:cb:eb:f7:66:51:a0:3d:
44:d8:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:53 2025 by rpki-client