Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/7Kg4t1CFaHUxzYqh8M_E4Ii32fo.roa
File: 7Kg4t1CFaHUxzYqh8M_E4Ii32fo.roa (raw, json)
Hash identifier: IdS0+Q7AYjG+fr6reITYsYrzUrh+VBzBWAwRCvpDLF0=
Subject key identifier: EC:A8:38:B7:50:85:68:75:31:CD:8A:A1:F0:CF:C4:E0:88:B7:D9:FA
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0463
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7Kg4t1CFaHUxzYqh8M_E4Ii32fo.roa
Signing time: Thu 13 Apr 2023 09:57:57 +0000
ROA not before: Thu 13 Apr 2023 09:57:57 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 210.4.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:57:57 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=ECA838B75085687531CD8AA1F0CFC4E088B7D9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:30:14:09:54:0d:52:d4:90:ae:98:5f:3b:
01:8f:8f:e8:9f:bf:dd:3e:43:ca:45:cd:c9:b3:68:
0d:d1:34:28:f5:bc:b6:1c:fa:43:ca:a2:70:c0:8c:
c6:03:a3:fd:17:62:51:48:c7:db:66:fe:2b:22:57:
43:fc:8b:dc:1d:ce:a4:0a:a3:79:2e:12:19:d6:a0:
16:63:1a:e1:ce:92:a8:e9:d5:47:9e:41:d9:f9:1a:
b6:36:67:4e:6d:9c:6f:87:e0:3e:d5:4e:1c:12:5f:
25:54:39:73:86:f9:f4:5e:a3:cb:0a:01:29:1e:6f:
c1:c2:9a:d3:1c:42:00:ad:75:ee:7c:59:69:23:cd:
6b:3b:d4:95:7f:63:a8:73:34:6f:66:7f:38:97:f1:
31:f8:ec:98:9f:17:8c:fe:90:e2:92:b4:88:40:40:
7b:42:64:cf:3f:16:f4:79:8f:08:bc:c3:68:df:83:
45:6f:d5:bf:a3:4c:b5:6c:15:82:82:0e:94:f9:58:
c3:cb:50:a0:4b:05:ca:5f:e7:7d:49:3d:b4:44:1d:
03:9d:09:d0:8d:0e:5c:7f:54:18:27:85:d9:5b:7d:
b3:ba:43:d3:e8:04:01:57:aa:67:7d:26:fc:50:e2:
10:f3:f7:e2:a7:11:e3:43:0b:14:48:3f:09:13:0c:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:38:B7:50:85:68:75:31:CD:8A:A1:F0:CF:C4:E0:88:B7:D9:FA
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7Kg4t1CFaHUxzYqh8M_E4Ii32fo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.4.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:16:c6:ca:20:6e:84:fa:60:3b:95:6c:c2:c4:19:17:97:13:
dd:a6:e9:1c:9e:61:1e:a5:02:2a:b9:dc:7a:9e:da:7d:76:0b:
3b:2e:71:92:36:94:c5:55:f7:c5:9b:6e:b0:4f:60:17:40:99:
45:87:79:d8:b6:a1:73:2b:a7:c8:40:4c:c1:21:cb:db:60:ee:
f6:8e:b9:55:db:85:9d:b6:9f:c6:cd:d1:0b:35:23:b9:3a:70:
05:ac:76:fd:31:57:3e:df:f6:7f:76:e6:7a:80:0c:5f:43:72:
2f:78:b6:fc:f9:bf:18:28:82:73:14:df:50:5b:d5:e4:fd:82:
fe:14:9a:6f:90:5d:e4:d5:95:fc:7e:40:ed:54:32:7e:eb:2c:
11:cb:0e:81:cf:05:99:d6:26:8d:ef:dd:3e:60:6f:51:f3:ac:
43:21:f4:a5:9f:21:4b:db:38:28:05:5b:be:76:1c:e8:36:27:
7c:a7:33:45:d7:d7:57:66:bc:55:9e:38:c9:6c:82:e3:6f:69:
dd:6c:68:04:1b:7b:13:94:95:eb:7f:ce:52:0d:e6:6b:bc:c3:
8b:74:1b:b5:fb:02:c4:d6:bc:2a:f5:37:81:a6:fa:f9:fc:41:
3b:78:56:4a:7c:ba:cb:05:71:ba:8e:8b:73:32:eb:85:84:c1:
61:f2:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org