Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/babrckd8XJRmEhP9QtyVVJzdHVs.roa
File: babrckd8XJRmEhP9QtyVVJzdHVs.roa (raw, json)
Hash identifier: UQIoFBB505kxzEfOVBhXVQS2e4Tk4bwZmClI/QQx+rE=
Subject key identifier: 6D:A6:EB:72:47:7C:5C:94:66:12:13:FD:42:DC:95:54:9C:DD:1D:5B
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 58
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/babrckd8XJRmEhP9QtyVVJzdHVs.roa
Signing time: Fri 01 Sep 2023 01:28:49 +0000
ROA not before: Fri 01 Sep 2023 01:28:49 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2497
IP address blocks: 157.65.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Sep 1 01:28:49 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=6DA6EB72477C5C94661213FD42DC95549CDD1D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:7c:e3:1d:ae:67:09:bf:4e:68:fc:05:b8:
5d:7f:18:dd:a7:37:b7:47:c6:79:69:d6:35:2d:ae:
0b:7c:77:23:c3:3e:ce:87:f5:10:c2:8c:dd:03:68:
a7:db:50:fd:3d:3d:12:7c:4d:fc:4e:7a:32:88:cd:
d1:23:87:96:65:03:07:36:ff:fa:10:b4:02:00:87:
5e:f4:f4:f1:89:91:e9:0e:7b:cb:89:42:7b:b8:81:
0b:21:01:7c:62:91:1c:10:f8:88:94:1d:33:94:65:
53:30:8c:97:e8:03:28:75:8a:56:a5:bf:f8:7d:72:
dd:15:aa:a1:3d:cc:3f:61:0e:eb:a9:ba:e5:0a:a3:
94:fc:9c:22:e4:b0:40:2a:ff:ba:41:b4:7f:92:63:
96:57:1b:cc:9e:39:0e:a4:0e:e8:49:3a:da:50:a6:
ea:c5:8c:1a:b4:ce:6b:7a:7c:eb:83:67:4e:37:1c:
d7:9d:0a:9c:29:23:46:f4:57:02:f6:93:13:5d:f6:
22:de:d7:79:dd:86:8c:88:1d:ea:dc:82:5b:8b:ae:
8f:8a:02:17:e4:cc:16:11:f6:b2:ac:a9:3e:94:2d:
cd:52:d4:98:d5:7f:f2:ac:14:d6:61:83:24:0b:db:
7c:55:22:90:d5:4f:fe:c2:65:b8:5b:bd:d3:c2:31:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:EB:72:47:7C:5C:94:66:12:13:FD:42:DC:95:54:9C:DD:1D:5B
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/babrckd8XJRmEhP9QtyVVJzdHVs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.216.0/21
Signature Algorithm: sha256WithRSAEncryption
26:9c:fb:4d:c9:0d:64:34:a6:ab:83:46:d9:7d:e9:cb:5d:17:
a8:9d:cc:2e:74:36:39:6b:c1:47:2f:75:3c:08:62:98:33:cb:
f9:90:32:83:28:20:42:f6:92:ba:75:26:d0:f8:f8:ed:2c:25:
32:f0:45:92:98:bc:e7:2e:fc:f2:10:e1:94:61:35:a4:68:0e:
fd:ac:a3:8e:85:41:13:e5:71:c0:dc:4d:81:39:1f:35:82:6d:
60:46:70:38:c6:fc:0d:6b:e8:e7:02:e2:d0:aa:2a:d7:c5:78:
88:ad:48:6a:26:47:c9:10:eb:4e:96:b9:69:04:c9:b4:31:16:
78:13:e1:d7:cd:a8:8b:2f:7c:32:9d:18:36:1d:11:d8:05:1a:
c6:bf:63:1e:8b:43:5c:ef:4d:6c:3e:6d:22:f6:51:1d:e0:8d:
cc:67:41:4c:b1:20:9a:eb:d2:5a:ae:55:c1:8b:77:47:be:69:
c7:74:d2:1e:50:3d:2e:f9:4c:a8:bf:62:98:c7:28:04:26:df:
22:c2:1c:33:6e:3c:7e:d1:1d:bc:ba:42:58:fd:73:fa:08:5b:
0a:7c:05:6f:7d:9d:c5:b8:93:bd:d4:2b:36:88:0a:cd:ad:ca:
d2:64:28:9c:ab:ee:f3:2e:2d:59:18:93:26:93:d0:ad:83:a8:
b4:c3:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:28 2025 by rpki-client