Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/3Rree3Guwa7f-4LlMcjvEbb8KQA.roa
File: 3Rree3Guwa7f-4LlMcjvEbb8KQA.roa (raw, json)
Hash identifier: 6BUdRbeCn7QvUTQYRAGTuvPA8HwUKP97p7fruX+Cdvk=
Subject key identifier: DD:1A:DE:7B:71:AE:C1:AE:DF:FB:82:E5:31:C8:EF:11:B6:FC:29:00
Certificate issuer: /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial: 39
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/3Rree3Guwa7f-4LlMcjvEbb8KQA.roa
Signing time: Thu 01 Dec 2022 01:28:59 +0000
ROA not before: Thu 01 Dec 2022 01:28:59 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 131896
IP address blocks: 103.198.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Validity
Not Before: Dec 1 01:28:59 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=DD1ADE7B71AEC1AEDFFB82E531C8EF11B6FC2900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:4d:46:a3:eb:9a:22:22:6d:6c:64:c0:e3:
e1:2c:3a:50:91:d0:ea:4e:5c:e6:33:df:98:a8:5f:
de:e3:12:c0:dd:aa:cd:21:20:51:25:64:c7:88:6d:
30:46:41:0a:cd:03:3a:f5:9a:ae:91:5f:6c:31:75:
10:e8:ab:00:51:7c:e6:e8:a6:c2:03:30:7e:f7:ac:
20:ff:d6:fe:a6:57:e8:f6:a7:f5:b3:7b:39:b3:f6:
06:4a:bd:9d:d7:46:7d:3f:2d:16:d5:6d:85:3a:64:
d0:c4:45:4d:28:01:85:52:28:59:50:f3:e1:f2:a3:
d1:c8:58:09:86:df:07:bc:c0:a5:cc:4a:3b:07:6e:
38:8a:e6:94:57:1c:e5:9f:ff:ac:40:b4:fb:92:52:
a3:b5:24:fd:cc:59:9d:e6:9f:b2:c9:10:34:d9:f1:
fe:17:31:ff:b6:6d:01:da:1d:cf:56:54:7a:d6:8d:
26:97:1c:c0:37:1d:15:d8:65:39:23:40:c7:7f:e6:
50:90:6b:07:29:79:4c:2c:bd:e4:47:70:8e:12:92:
ed:14:9d:19:cf:f6:90:2f:1a:bc:b4:a5:c6:e5:fb:
87:4b:47:6e:68:5a:ab:e7:5c:50:73:2f:14:d2:e4:
7e:a0:2e:56:82:41:7a:ec:19:da:20:db:48:68:83:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:DE:7B:71:AE:C1:AE:DF:FB:82:E5:31:C8:EF:11:B6:FC:29:00
X509v3 Authority Key Identifier:
keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/3Rree3Guwa7f-4LlMcjvEbb8KQA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.108.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c5:f1:df:34:15:a0:83:ea:f6:69:72:57:25:cb:db:e7:d0:
15:d2:3d:c6:41:67:a9:06:60:ab:74:15:b2:a0:bc:f2:3b:ca:
68:7f:75:0d:9c:53:d7:b0:46:e5:67:3d:fa:38:bd:ea:96:5e:
98:8e:4e:72:41:74:53:4e:66:d0:18:d7:d5:fb:96:c9:01:dc:
fa:d3:8e:57:85:6c:ee:ff:94:fa:b8:17:1f:1f:7d:ba:4a:ca:
ba:89:e0:98:bb:66:12:de:d3:ec:b1:36:e3:a3:32:d9:fb:97:
3a:2c:7e:fe:bd:e5:b4:b9:64:80:54:d3:d5:52:c3:9c:bf:c6:
97:0a:80:d3:d3:c2:be:21:39:e1:6b:19:6c:88:95:cf:24:3e:
45:40:d4:c3:ef:82:06:95:b2:1c:bd:7d:42:a4:74:e9:77:c3:
e0:fe:7f:e2:1c:3a:36:7d:b7:73:bb:33:0e:2b:27:16:12:50:
b0:d6:ed:2c:8b:28:39:44:94:5e:d2:04:12:99:6b:9a:65:cf:
d4:08:35:a8:7b:30:f8:e2:e3:90:32:15:fe:d5:45:ec:06:78:
73:b2:d4:9f:5a:e2:a6:84:8a:2f:ce:0d:d9:e2:1d:9c:1e:de:
8a:b8:2c:3e:74:2e:d9:1a:a1:74:00:34:65:91:51:bf:25:81:
e9:1c:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org