Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2ZIf6rfDvjnDXwOrmEaRKTQUf7U.roa
File: 2ZIf6rfDvjnDXwOrmEaRKTQUf7U.roa (raw, json)
Hash identifier: g+TnV+CH+/LJrVFQG3SvpedMKH+dyXJmVmBSA610e/0=
Subject key identifier: D9:92:1F:EA:B7:C3:BE:39:C3:5F:03:AB:98:46:91:29:34:14:7F:B5
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0432
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2ZIf6rfDvjnDXwOrmEaRKTQUf7U.roa
Signing time: Thu 13 Apr 2023 09:55:24 +0000
ROA not before: Thu 13 Apr 2023 09:55:24 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 59.85.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:55:24 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=D9921FEAB7C3BE39C35F03AB9846912934147FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:7f:2b:9a:6a:cc:9d:cb:51:39:bc:e5:00:
0e:78:3f:ec:9e:bf:60:44:2a:94:30:8b:ae:e0:43:
75:d1:9a:d5:1f:fd:e0:7f:af:3a:01:53:16:a9:9f:
60:bd:00:db:54:bc:3c:9c:46:39:dd:66:a3:1f:ab:
7a:c6:5b:88:f1:fe:a9:d3:de:fa:36:92:4a:5a:cf:
7c:22:16:13:67:ff:94:3c:e1:c6:a7:7b:c9:96:eb:
d0:97:1d:9a:68:1d:6d:73:0d:9e:cd:e4:c9:72:71:
87:8c:94:45:ea:b6:be:4e:49:e9:89:2a:b1:95:05:
fa:c9:4b:4d:84:71:ea:d7:97:3e:24:cc:26:bc:f4:
6c:85:16:fa:47:7c:2b:ec:0c:47:52:19:93:76:18:
20:50:3a:ed:b0:32:aa:f0:52:93:81:c9:07:e4:e6:
c1:d0:b1:2f:6d:2f:43:4e:b1:04:6c:00:2e:36:fa:
c5:0a:68:74:ef:dc:98:2b:1c:74:9f:a1:08:83:1b:
99:b4:de:e0:67:dd:1a:7c:16:09:d5:95:5d:7f:19:
03:56:15:34:67:37:64:72:18:1e:ae:8b:35:a5:7f:
38:c7:bc:c9:f8:da:bc:cb:30:99:73:82:c1:96:9f:
79:0b:1e:be:86:07:20:c9:7a:6a:d0:93:03:bb:13:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:1F:EA:B7:C3:BE:39:C3:5F:03:AB:98:46:91:29:34:14:7F:B5
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2ZIf6rfDvjnDXwOrmEaRKTQUf7U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.85.224.0/19
Signature Algorithm: sha256WithRSAEncryption
45:9b:26:62:da:3f:a1:74:ed:da:93:73:9b:8a:36:c9:c9:0f:
fb:d5:67:64:39:7b:f0:d5:33:94:eb:51:3f:31:4b:59:59:cb:
a0:0f:4b:3a:5d:9e:1d:36:c1:a4:84:2c:7f:71:1b:5e:14:f3:
3a:e7:fe:f5:8d:98:29:ef:c2:10:79:44:7e:31:27:72:98:e5:
1a:95:2c:29:1d:7d:07:79:7b:46:ff:fd:e7:ac:6f:2f:5b:e9:
7d:28:ae:9e:aa:2e:9f:47:33:f2:00:34:22:ca:4c:3d:81:90:
0a:fe:35:ce:7c:f0:1b:0c:72:cc:9b:3f:7e:2c:c7:86:95:ba:
db:e1:61:f0:89:37:06:c1:c2:e8:63:4c:33:bb:78:88:b4:8f:
1d:05:04:61:10:19:27:d2:8b:51:cb:b6:a1:56:8d:b1:82:6e:
47:d4:b6:b3:aa:71:00:46:a1:8e:99:9e:ef:e2:e2:f0:d3:08:
43:a7:c0:2b:86:98:e2:f7:fd:cf:76:74:b5:fe:e1:b7:c0:08:
c7:ad:d6:2c:04:20:a1:1b:7b:1a:3c:20:cf:ba:43:ba:c5:5b:
21:41:76:a7:a6:f8:be:1b:b7:93:7d:c3:38:83:01:37:2f:24:
c0:d1:70:74:6d:84:2f:f5:fb:71:46:84:cd:89:4f:8d:7a:77:
d8:c2:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:22 2025 by rpki-client