Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa
File: qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa (raw, json)
Hash identifier: WTNqN5l1k9P9FVb7YkJHNYFb832gcDOYxTrlNDhoirU=
Subject key identifier: AA:B2:2A:A5:99:51:B2:24:0B:E2:BD:BF:47:9F:DF:AA:56:18:62:D4
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 71
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa
Signing time: Fri 01 Dec 2023 01:30:12 +0000
ROA not before: Fri 01 Dec 2023 01:30:12 +0000
ROA not after: Thu 14 Nov 2024 01:30:03 +0000
asID: 2527
IP address blocks: 207.65.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Dec 1 01:30:12 2023 GMT
Not After : Nov 14 01:30:03 2024 GMT
Subject: CN=AAB22AA59951B2240BE2BDBF479FDFAA561862D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:0f:d9:de:3e:c1:39:f1:d8:a8:eb:6e:e1:
17:d6:41:dc:13:7b:e7:96:81:57:ad:a8:ac:d2:76:
d9:94:b8:7d:1a:08:8b:ca:51:90:b8:92:72:db:81:
ef:30:cb:e1:78:54:d2:4e:7f:2e:b1:ab:0a:8f:a3:
6f:76:b8:a4:58:1c:ea:0e:30:d4:d1:e3:28:31:f8:
47:8e:ef:96:3b:c9:75:ea:db:d6:4a:39:38:63:6e:
d3:7a:9a:9b:cc:71:cb:af:e9:bb:14:ca:8c:25:3c:
a5:63:e1:22:f4:95:27:8f:0b:95:58:09:67:40:81:
49:31:df:c3:6f:07:7c:52:92:7e:2a:d0:67:13:65:
e7:71:cb:00:55:47:45:4f:9c:62:6a:24:3c:ca:1b:
2e:ab:f9:ac:5f:ed:e7:cd:4a:e2:61:f6:05:4d:9a:
8f:0e:e3:e1:af:21:6c:75:01:14:46:09:50:ac:60:
de:d5:a3:d4:35:e8:b0:ab:d0:52:e1:c9:c5:23:a9:
25:37:4a:43:33:5a:41:0d:6c:28:47:b8:df:a1:54:
3f:e6:77:07:df:22:39:6e:dd:ab:dd:91:a4:44:8d:
1c:8b:75:7d:0d:0e:1e:a2:d1:8a:d0:57:5f:17:d2:
dc:17:df:e2:32:ac:9a:fa:af:4b:49:b1:a2:7a:a6:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:2A:A5:99:51:B2:24:0B:E2:BD:BF:47:9F:DF:AA:56:18:62:D4
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
207.65.128.0/17
Signature Algorithm: sha256WithRSAEncryption
05:b9:b1:82:6f:24:d0:c2:49:43:69:fa:d3:a7:c2:91:54:36:
1e:6b:29:fa:51:9c:9d:18:ee:8c:69:26:5c:4d:5b:2e:3b:fe:
d2:42:e0:e2:75:a3:d6:cc:e1:7a:b2:82:d9:ea:86:00:9e:2e:
95:91:f1:55:53:7d:3d:c1:3e:72:4e:2e:87:1f:90:b2:7b:5e:
81:1f:ec:71:c7:07:38:2a:15:19:b7:75:27:4a:bd:cd:8c:c8:
56:6f:3d:84:72:a6:e0:cd:bf:35:79:ea:aa:e6:ab:ca:3f:e1:
20:71:a6:42:63:1f:c3:45:8f:bb:f2:2a:a5:62:24:23:dd:38:
03:b0:a1:83:88:df:0c:fb:53:dc:67:be:65:97:4c:b9:de:83:
c0:ac:70:cb:64:56:36:68:d9:5d:ac:31:fd:77:02:1b:a4:cb:
20:17:f9:12:99:84:a9:1e:eb:41:1b:b5:a4:59:f6:52:34:2c:
fd:dc:14:8f:c2:86:1e:7f:83:3e:06:f2:a3:83:2f:79:cc:a2:
d8:2f:50:9b:43:14:ef:aa:da:ad:2a:aa:bc:29:b0:67:06:3e:
e1:1a:73:5b:09:e4:a2:1e:3b:91:d8:b2:f9:47:e1:c4:65:3b:
93:7e:ed:c0:e4:56:48:2e:0f:ec:5d:55:c4:f6:eb:62:4e:24:
64:ab:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:53 2025 by rpki-client