Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zo7qiI1uWYfb8V4Ev-O9LDw17F4.roa
File: zo7qiI1uWYfb8V4Ev-O9LDw17F4.roa (raw, json)
Hash identifier: 2Qmmgm2N+M0l9SRyz8n7/oj70Uubeu/fPRwHQP6L1Gw=
Subject key identifier: CE:8E:EA:88:8D:6E:59:87:DB:F1:5E:04:BF:E3:BD:2C:3C:35:EC:5E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 8D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zo7qiI1uWYfb8V4Ev-O9LDw17F4.roa
Signing time: Tue 01 Feb 2022 01:31:20 +0000
ROA not before: Tue 01 Feb 2022 01:31:20 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 115.162.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:20 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=CE8EEA888D6E5987DBF15E04BFE3BD2C3C35EC5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6c:ca:96:23:e3:54:60:7c:1b:fd:1d:18:f9:
d6:33:77:99:76:a3:c1:47:44:70:7b:db:00:9c:cb:
ac:2a:d4:2b:94:82:34:d2:7c:34:d6:8a:b7:5e:75:
84:58:8b:09:b2:53:56:4c:2f:3f:55:6c:25:f2:96:
fa:a5:83:d5:56:bd:04:f6:aa:66:ea:07:01:aa:29:
00:05:a4:88:f4:29:41:54:54:74:70:c7:7a:6c:d9:
55:4b:24:2b:a7:20:22:86:9d:04:88:d8:b3:e3:7e:
87:d8:66:07:05:ed:6a:73:c8:33:de:10:f7:06:26:
af:e1:17:ea:5a:bf:b5:81:b6:be:06:0f:27:d8:94:
5b:46:b5:f6:78:7b:69:04:7b:32:52:6b:7c:ef:48:
8f:22:c2:bb:86:01:cc:0c:09:26:e9:06:7e:1d:79:
95:d1:e2:84:db:b8:fa:46:aa:b8:28:eb:d3:d7:dc:
d6:c7:b0:9d:2f:d9:ab:b8:55:0c:e3:9c:4a:38:69:
38:b5:b9:c6:47:6b:43:21:c9:df:a1:01:06:59:66:
7a:03:ee:c8:04:7e:d1:a9:3a:85:14:15:4d:92:11:
c5:21:9d:c9:7c:d9:50:ee:f6:da:89:39:b3:6d:d9:
e3:69:56:b2:b0:bf:1a:79:e7:68:c9:98:06:f6:da:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8E:EA:88:8D:6E:59:87:DB:F1:5E:04:BF:E3:BD:2C:3C:35:EC:5E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zo7qiI1uWYfb8V4Ev-O9LDw17F4.roa
sbgp-ipAddrBlock: critical
IPv4:
115.162.0.0/15
Signature Algorithm: sha256WithRSAEncryption
85:92:9b:d7:a4:5e:b8:64:85:34:59:eb:d0:dd:4d:d9:65:40:
3e:5c:5b:9d:5a:2a:cf:08:2d:51:b5:dc:2b:6b:23:cc:f7:c6:
d7:fd:d7:96:88:06:36:f3:38:ab:ee:84:f1:5b:02:75:df:72:
e6:d1:08:e8:1d:e4:51:b7:00:4f:bf:0f:8c:fa:22:49:c6:47:
86:99:f8:f8:52:1c:fa:33:fc:75:d9:01:da:26:16:66:c4:07:
46:9d:ec:02:ac:5f:c3:21:e6:6c:72:86:e3:2f:45:ce:bf:04:
f0:41:76:c9:2d:59:65:b3:dc:ea:f1:c0:ea:93:8a:78:10:c0:
33:d2:29:42:37:58:3b:13:07:f6:86:03:d0:7c:d7:f3:86:b5:
00:f6:83:8c:9d:b4:48:ed:f5:bd:05:73:6a:9b:45:2e:bd:b5:
cd:53:ea:f9:18:ab:55:c4:3e:24:69:57:86:2f:03:de:78:02:
09:7e:73:61:8a:e4:cb:d4:f8:09:6a:3b:e9:72:79:e0:a1:1e:
f0:78:55:94:1c:43:e9:b7:a4:98:d2:03:06:a1:6b:a9:2f:c7:
c1:c4:e4:71:15:77:9c:8e:77:47:94:7d:a5:f6:19:f2:89:dd:
38:96:be:98:18:68:9f:6c:bf:ae:af:91:25:f1:cf:75:a6:ba:
6e:cc:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:11 2025 by rpki-client