Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/aIXD1rrQny5JYc42I8WromZR434.roa
File: aIXD1rrQny5JYc42I8WromZR434.roa (raw, json)
Hash identifier: tf69gYKrsaDiRROWLRWHoNsxFV7c6Q8pg5s8HLj1kVA=
Subject key identifier: 68:85:C3:D6:BA:D0:9F:2E:49:61:CE:36:23:C5:AB:A2:66:51:E3:7E
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 27
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/aIXD1rrQny5JYc42I8WromZR434.roa
Signing time: Fri 29 Sep 2023 06:36:54 +0000
ROA not before: Fri 29 Sep 2023 06:36:54 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 10000
IP address blocks: 114.134.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Sep 29 06:36:54 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=6885C3D6BAD09F2E4961CE3623C5ABA26651E37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:f0:79:4f:af:c4:f0:12:53:21:75:f9:00:
5d:35:d6:73:f8:fb:c6:5e:9b:ee:ee:ad:1c:26:a9:
e6:29:e4:72:1d:68:90:57:f2:7c:66:9c:f4:68:68:
00:b8:62:9b:e3:65:89:7d:38:74:58:20:cb:aa:d7:
4b:ea:03:b3:46:9f:f3:91:17:0a:c0:47:e1:40:c0:
f5:7d:7f:dc:8b:a0:00:14:6d:e3:5b:66:de:9a:9c:
21:be:58:7b:b9:ef:b2:7a:c2:da:4f:8d:95:80:3c:
43:9f:c9:d4:c6:6b:af:0f:4e:3d:80:39:e8:ef:49:
d5:73:8b:1f:3e:06:5e:4d:5d:87:ba:36:30:0a:4b:
04:6c:71:b9:57:0e:69:95:ab:44:12:94:4e:a3:a5:
45:46:90:16:1e:00:d5:96:67:cd:8c:d2:eb:a1:38:
76:cf:df:8e:aa:0a:13:ce:3a:48:58:da:a1:06:22:
6d:2e:27:b7:4f:07:d8:6f:0f:b8:db:4e:96:14:c3:
21:55:17:c0:be:d8:94:94:21:3d:fc:80:9d:6c:cd:
cf:0a:a7:4e:5b:0f:71:81:ba:67:97:87:cc:e7:1f:
b7:89:ae:99:d8:e0:c6:dc:35:27:65:bc:30:d2:07:
d4:9a:d2:f6:6e:d1:75:5b:0c:2f:95:62:14:e8:e7:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:C3:D6:BA:D0:9F:2E:49:61:CE:36:23:C5:AB:A2:66:51:E3:7E
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/aIXD1rrQny5JYc42I8WromZR434.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.134.128.0/19
Signature Algorithm: sha256WithRSAEncryption
c0:d8:22:55:87:48:1c:1f:53:d7:59:37:3a:00:3f:b8:b5:73:
c1:4a:8d:e6:8e:c6:cc:60:a4:3d:70:fc:fa:64:85:21:27:0c:
82:98:c1:4b:f7:37:a2:48:b3:cd:6a:df:35:ee:d9:db:0a:65:
9c:fd:b1:74:f5:a5:16:ef:1d:1a:01:5b:d9:16:a6:65:ba:d6:
a0:93:0a:16:4c:3e:f9:00:84:e3:39:d5:48:70:35:6f:b0:17:
b2:f3:05:a6:5c:8a:77:a4:78:88:4b:ab:6e:c0:16:95:e8:ae:
76:1f:9f:7c:f5:be:4b:5f:99:61:34:b7:4c:e7:1d:23:79:b0:
98:6a:26:2f:a1:99:64:70:e0:bb:02:c7:21:45:9a:a2:8c:be:
84:df:e2:d7:07:4c:1a:92:a1:13:9d:0b:11:e9:b4:79:de:71:
67:ad:81:3e:f7:07:20:ba:55:6a:6e:00:ca:4f:7a:95:a0:55:
e5:f7:da:7a:94:71:76:b5:a2:50:12:e1:54:65:83:02:42:fc:
36:55:2f:e0:17:33:6d:d3:2a:b1:c3:95:1c:e1:8e:52:59:f4:
30:4b:c6:bd:8a:cb:4b:f0:5d:2e:d7:8c:56:45:36:51:08:e4:
c9:ec:78:98:59:40:c9:0d:24:21:f8:9a:9b:05:ac:3f:69:9f:
59:56:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:44 2025 by rpki-client