Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/_iMpjL5unPvL_lUkcddVoHqjamI.roa
File: _iMpjL5unPvL_lUkcddVoHqjamI.roa (raw, json)
Hash identifier: zoVvBIaUvr7a9cWL5xBGFe0IzsODldio7kv178PcIGc=
Subject key identifier: FE:23:29:8C:BE:6E:9C:FB:CB:FE:55:24:71:D7:55:A0:7A:A3:6A:62
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 6B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_iMpjL5unPvL_lUkcddVoHqjamI.roa
Signing time: Wed 01 Dec 2021 05:34:21 +0000
ROA not before: Wed 01 Dec 2021 05:34:21 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 202.7.105.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:34:21 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=FE23298CBE6E9CFBCBFE552471D755A07AA36A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:11:90:a3:be:4a:9b:33:2b:df:38:ff:cc:
4a:a1:98:2f:f9:ba:2d:ed:41:9b:7d:87:e5:63:68:
a4:fb:ac:44:db:a0:f6:7c:64:02:aa:8f:ef:9b:07:
3c:41:76:4a:a9:e3:d6:e2:68:3f:be:c5:2b:43:88:
b9:90:e3:1a:c8:dd:57:cf:0d:ca:7d:9d:ac:fe:a3:
99:3f:2e:de:69:bf:78:92:48:22:b8:25:7e:af:6a:
b6:85:6f:15:c7:03:5c:9e:21:48:49:0a:02:2a:db:
f6:33:35:30:09:66:60:1b:57:49:af:72:ce:07:2b:
d4:10:5f:9b:39:9e:bb:c7:fa:3d:ba:90:3f:d8:d2:
d7:79:d6:60:46:a8:3f:56:97:39:4c:ae:36:20:7c:
17:c0:e8:0f:09:ab:f4:90:6e:57:25:71:91:ff:04:
33:84:8d:8b:f2:df:1e:78:52:8c:9a:67:a8:55:8e:
a5:91:d9:9b:68:0d:c6:ac:99:1b:93:7a:5a:46:06:
2c:f6:b0:05:ea:be:c8:90:7a:76:ae:38:83:47:ef:
20:37:a9:bb:c7:51:97:66:c7:d9:c7:5d:5c:9f:e8:
85:f2:a2:16:cc:ef:cb:34:cd:95:d3:3e:1f:0d:bc:
64:df:c6:1b:4c:0b:17:8b:8e:22:12:b1:54:01:4f:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:29:8C:BE:6E:9C:FB:CB:FE:55:24:71:D7:55:A0:7A:A3:6A:62
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_iMpjL5unPvL_lUkcddVoHqjamI.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:b9:2a:83:eb:5f:f2:31:d9:86:04:8b:fa:be:73:b4:74:ab:
34:52:11:2f:ef:94:8d:8a:74:39:5b:fb:8a:af:32:27:c2:65:
d8:be:a1:fb:3d:5e:60:fe:91:c2:96:29:ac:f6:c2:06:3c:e2:
8b:8e:b2:50:4e:02:d4:d4:5b:26:12:7e:44:eb:3b:e0:ef:bd:
72:cd:b2:6a:15:e7:a9:92:5c:19:e3:e8:1d:37:f2:81:20:5e:
f4:2f:71:c5:58:5b:df:08:18:d0:58:ef:ba:a0:a9:18:79:5e:
bf:64:32:5b:69:e7:58:b5:a1:64:a5:26:b3:7c:8c:a2:14:1b:
fa:f5:bf:d6:6a:d0:30:d3:bd:9c:15:b4:f3:34:40:bd:22:00:
4a:75:fc:8a:80:71:e3:3d:1c:73:4a:60:a6:c6:75:ec:6c:71:
51:d0:a2:eb:a6:99:d0:8c:a4:c9:cf:29:7d:4e:b0:bb:66:e7:
1f:dc:85:a5:2e:7b:1a:e3:3d:c1:0b:20:b1:2a:3c:1c:b6:09:
c2:59:62:a2:36:8b:10:d3:e7:42:eb:ee:33:0a:c3:bf:23:4e:
8e:1e:02:c6:15:75:3c:6f:a4:97:46:45:c9:35:ad:19:ab:71:
b5:01:a3:76:ab:de:0b:10:8f:0f:cc:c4:a0:92:1f:72:6b:a1:
38:25:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:49 2025 by rpki-client