Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/cIoSysQoWOku6OueOTwAnolWrtc.roa
File: cIoSysQoWOku6OueOTwAnolWrtc.roa (raw, json)
Hash identifier: +XGDACyed3A51WsknJs99eA/zmfTUxeq2AjMf6SWhmQ=
Subject key identifier: 70:8A:12:CA:C4:28:58:E9:2E:E8:EB:9E:39:3C:00:9E:89:56:AE:D7
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: CF
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cIoSysQoWOku6OueOTwAnolWrtc.roa
Signing time: Sun 01 Jan 2023 01:29:40 +0000
ROA not before: Sun 01 Jan 2023 01:29:40 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 120.74.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:29:40 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=708A12CAC42858E92EE8EB9E393C009E8956AED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:e8:80:9e:17:a7:2e:5c:8e:ed:1a:2a:fe:
76:12:d1:bb:89:a6:71:d2:05:39:3e:8c:ce:0d:f2:
08:03:84:bc:f5:ce:c7:0b:73:6c:d2:15:8c:83:b4:
d0:bc:99:3f:12:f4:ba:21:da:25:2a:67:23:37:5e:
81:9e:36:6f:2d:99:b5:1e:f7:3d:56:b9:e3:f6:ac:
18:f2:d8:c9:0d:59:2b:39:16:94:a7:23:1f:ba:5f:
67:14:f6:5c:34:15:e4:67:68:3c:0d:9a:ce:04:64:
3e:ea:61:e9:0f:7d:43:7b:f6:05:6d:67:12:41:b8:
d6:e4:3f:11:8f:0d:55:e9:1b:a0:a1:4d:8b:41:71:
02:4a:05:3e:de:78:fe:e0:70:bd:6b:a3:9d:56:43:
e4:41:9e:0c:3b:5f:eb:84:2d:f5:90:88:b8:a1:93:
47:94:51:37:09:d7:fd:2a:60:4c:55:5e:5a:83:7c:
49:01:45:e7:37:3e:e3:96:4e:84:c5:cc:96:3c:7e:
28:5d:9d:d9:9e:15:71:6d:6d:51:3f:c3:71:85:c5:
d1:4f:a6:d5:43:b3:5f:52:20:25:36:43:5f:2d:b7:
fd:24:0b:d3:43:1e:d8:6c:c5:fe:0a:00:11:4f:29:
90:4c:0e:43:5c:28:19:06:7c:35:7c:0f:41:0c:0a:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:12:CA:C4:28:58:E9:2E:E8:EB:9E:39:3C:00:9E:89:56:AE:D7
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cIoSysQoWOku6OueOTwAnolWrtc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7a:c7:f7:11:4c:2a:36:8b:d6:9b:c5:92:49:b4:2c:83:fa:a1:
40:d9:9b:4e:72:34:2e:d9:37:06:b0:c9:04:4f:c2:5b:75:2b:
f5:66:e6:a1:48:c7:43:b5:2a:9b:22:10:58:7e:55:1c:02:6a:
71:2c:e6:74:58:c8:82:8b:03:31:ee:7a:1f:cb:df:0c:97:bf:
d8:ac:36:be:34:3f:f8:4e:50:67:74:05:1e:6d:12:e1:f9:76:
5f:be:21:7d:4c:78:15:1d:15:e7:51:e8:7d:59:2c:ab:3b:94:
51:9b:2a:a1:af:61:1a:99:03:bb:e7:c7:b8:22:2c:14:4e:5e:
f5:7f:1a:2d:c2:80:f9:72:29:30:4a:54:44:11:7b:99:fb:4a:
e2:8c:fd:7c:a9:c3:91:58:87:7c:d0:49:78:61:e5:f0:52:2d:
b3:aa:47:99:7c:4c:35:b3:0e:91:60:59:99:b1:90:90:f8:0c:
0a:81:ef:84:00:cd:f6:ed:b5:2e:6d:0d:c5:cd:29:96:89:a9:
dc:de:a2:18:4e:ff:0d:fb:c2:1b:a7:be:44:69:c6:7f:85:ce:
7c:e5:7c:1a:8b:77:c4:bf:49:05:d8:3e:2e:81:df:e8:16:6a:
9c:cc:60:dd:f4:fe:e4:52:36:02:0c:60:b5:42:0c:2a:35:91:
65:23:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:22 2025 by rpki-client