Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/-H8m5nZXMXWbCHOwodDuvVoPvzQ.roa
File: -H8m5nZXMXWbCHOwodDuvVoPvzQ.roa (raw, json)
Hash identifier: vRFf5vPxBcX7KJdxl5IVw63xCISD5lYmqPIu6Mvc2gg=
Subject key identifier: F8:7F:26:E6:76:57:31:75:9B:08:73:B0:A1:D0:EE:BD:5A:0F:BF:34
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 045F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-H8m5nZXMXWbCHOwodDuvVoPvzQ.roa
Signing time: Thu 13 Apr 2023 09:57:55 +0000
ROA not before: Thu 13 Apr 2023 09:57:55 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 42.125.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:57:55 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=F87F26E6765731759B0873B0A1D0EEBD5A0FBF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:e0:0f:07:02:b3:a7:91:fb:07:15:dd:e0:5a:
2c:9b:84:48:dc:4f:6e:85:c8:6e:21:63:2f:39:45:
f4:3f:13:98:69:a8:e8:8c:19:7d:6b:e3:f8:83:35:
4b:98:98:c0:c9:4f:2d:8e:68:c6:30:c9:0b:b1:e0:
c3:e9:1b:35:ff:2a:c6:d2:44:e6:b8:70:0e:17:2e:
e9:db:97:7b:ed:fb:ba:cf:bc:33:52:e1:98:af:b3:
33:2c:3b:53:e0:31:37:ac:6a:0a:fb:35:fd:f6:03:
62:6e:26:e8:8b:c5:c1:2f:81:7d:c6:ec:85:c9:5c:
96:cc:36:82:14:e2:6c:36:ee:35:7d:36:8f:7a:b3:
c4:38:d1:11:2c:e1:86:74:10:59:ba:85:10:c2:b7:
09:6b:2d:d2:27:ab:e8:47:0f:93:96:b7:c4:5e:ac:
b2:a0:ae:aa:55:06:3a:17:c3:14:a6:79:30:97:5f:
8c:2f:c0:18:a3:04:d2:85:4a:ff:9f:cc:e9:53:5d:
ca:32:03:15:40:c3:1c:fe:f7:13:10:25:fd:82:b1:
8b:80:5d:57:c6:44:37:31:54:8a:86:4a:4c:a1:11:
c3:d4:be:7b:5a:de:d5:32:9a:2d:2b:d0:a8:a6:f8:
3f:33:bb:d0:3a:f2:d8:96:73:08:ca:c2:f1:82:2f:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:26:E6:76:57:31:75:9B:08:73:B0:A1:D0:EE:BD:5A:0F:BF:34
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/-H8m5nZXMXWbCHOwodDuvVoPvzQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cb:47:b4:ed:7f:a8:b4:30:ff:49:ab:7b:33:ef:1d:66:56:
71:67:ad:d0:9b:c9:6b:d9:a4:6b:0e:39:5d:30:77:c7:9f:7e:
8b:96:63:db:9d:16:f8:e9:f7:70:a5:e0:3f:66:e4:c5:92:36:
5b:09:58:a4:08:af:1d:9f:42:05:20:f4:4d:d3:6e:68:28:21:
14:75:f1:58:f6:c5:fb:1a:4d:a1:76:ee:0a:87:65:ee:ef:01:
66:fb:27:c6:cc:7b:69:6a:c2:6b:ec:30:9e:6f:a5:6c:46:1f:
6b:4f:18:9a:69:79:aa:7c:22:d5:95:44:c7:d6:44:82:f2:18:
aa:7f:80:26:ec:b6:cc:1a:40:fb:ab:93:91:63:7a:38:f4:d3:
84:eb:14:3e:de:c3:0f:8b:14:20:a7:da:2f:4c:a5:18:21:75:
6f:3d:77:96:9b:cf:e7:4a:e0:10:a7:5b:eb:ff:81:9a:21:44:
6e:15:d1:89:db:dc:3b:d5:a3:9a:2a:80:6c:b2:3c:2d:8c:c9:
e4:81:7a:c3:5d:71:bb:5f:e8:b3:23:27:10:84:bc:e4:2c:17:
64:0b:db:d5:9f:c7:4d:12:cf:68:c4:fe:2a:36:58:3b:cb:37:
a0:04:75:10:e6:21:65:bb:90:1b:eb:e7:bd:9a:08:db:e8:99:
4b:b7:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org