Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/MOtnGB6gJcqIf9sv91MJj215yaE.roa
File: MOtnGB6gJcqIf9sv91MJj215yaE.roa (raw, json)
Hash identifier: hq9p9ZY0720aQ/LV82UjdA65gO8TrGOUR1IbOF6vveM=
Subject key identifier: 30:EB:67:18:1E:A0:25:CA:88:7F:DB:2F:F7:53:09:8F:6D:79:C9:A1
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 87
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MOtnGB6gJcqIf9sv91MJj215yaE.roa
Signing time: Wed 29 Dec 2021 09:13:37 +0000
ROA not before: Wed 29 Dec 2021 09:13:37 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 32787
IP address blocks: 203.180.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 29 09:13:37 2021 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=30EB67181EA025CA887FDB2FF753098F6D79C9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:03:bf:14:09:b9:ca:e5:0b:5a:3a:73:34:
1d:ae:a2:9e:45:e8:5b:25:2d:a2:fa:1a:89:fe:2f:
a7:d0:83:1e:e8:81:eb:bb:75:99:4c:ab:1b:cf:50:
1b:3a:74:d0:31:0d:ff:3e:0b:a4:59:e0:56:b3:50:
57:67:ca:a2:a1:0f:96:c8:52:3b:a9:03:53:10:e6:
22:ae:45:b5:92:4d:09:b6:39:61:4f:de:54:1f:69:
44:87:e3:f8:6a:a7:0b:1d:ab:e5:bd:55:3d:48:28:
80:f1:b0:ee:3f:ec:a6:26:60:63:76:16:0e:69:12:
bc:b4:17:a2:3d:91:19:3a:64:2e:57:1b:48:9b:1f:
9c:af:28:79:4a:71:64:88:41:43:bf:cd:36:1c:aa:
1d:e5:55:d2:94:ac:42:27:6a:d5:cd:e0:ee:e8:69:
2a:f8:b3:5d:76:41:16:bd:7b:66:0a:42:0d:e9:b8:
f8:b6:31:59:43:30:0f:d7:fb:08:3d:ec:9a:64:51:
ef:aa:89:78:b5:80:08:01:be:b8:97:91:91:e1:74:
c4:29:30:07:7b:95:81:b0:c0:43:04:e3:15:09:af:
ee:97:5e:71:b1:d2:94:27:d4:1c:00:c0:2e:20:7a:
c0:fc:9f:0a:61:5c:0f:6b:f6:88:03:d5:d5:b5:7f:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EB:67:18:1E:A0:25:CA:88:7F:DB:2F:F7:53:09:8F:6D:79:C9:A1
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MOtnGB6gJcqIf9sv91MJj215yaE.roa
sbgp-ipAddrBlock: critical
IPv4:
203.180.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b5:ee:26:ea:8a:fc:a1:59:55:b9:bf:62:10:8c:48:d9:77:
e6:fc:21:ea:f7:2e:4b:6f:58:fa:00:bd:2e:64:8f:6b:45:3e:
1f:2f:35:c5:9f:eb:3f:6e:45:f7:c1:8e:9d:d5:d4:88:0a:4e:
38:48:0b:4e:e6:3c:41:63:12:c4:da:78:b4:4c:6d:07:06:11:
7f:1d:bc:86:63:4b:c0:d8:7d:cb:b1:1b:a2:17:ba:56:14:1d:
26:a0:38:ab:cf:e6:b3:49:9a:03:f9:f4:29:b2:bb:e5:98:2e:
9d:79:97:6e:81:2b:49:17:2a:1f:96:00:a4:7c:85:1d:f9:38:
63:30:31:cd:77:15:f6:13:c8:6b:2c:78:20:c0:e8:15:63:02:
20:68:b8:38:61:1d:c6:d6:a4:d6:24:9a:c2:bc:6a:3e:84:2d:
df:84:a6:28:c4:42:83:31:47:a7:9d:f1:c6:71:e9:8c:6a:4a:
6f:de:1b:4c:8c:f9:10:9e:b1:71:27:7f:5c:ff:59:21:ed:e5:
1f:55:50:4d:84:d1:26:b0:fe:c9:10:c7:e5:2d:2b:f2:64:cd:
b6:66:d4:4e:ba:9c:04:66:f2:09:8b:76:7a:6c:ef:f9:fa:6c:
ea:65:98:19:c0:11:93:5d:a3:37:05:84:6a:6a:3d:c9:fb:3c:
73:bf:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:13 2025 by rpki-client