Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/iXzU6MNOW2RuO78yV9a9Wh94mGc.roa
File: iXzU6MNOW2RuO78yV9a9Wh94mGc.roa (raw, json)
Hash identifier: mkwkNAehEgRmSKflVzglgOMc0L4v4GjrBCH2K3Z1Yrk=
Subject key identifier: 89:7C:D4:E8:C3:4E:5B:64:6E:3B:BF:32:57:D6:BD:5A:1F:78:98:67
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 013E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iXzU6MNOW2RuO78yV9a9Wh94mGc.roa
Signing time: Sun 01 Oct 2023 01:30:17 +0000
ROA not before: Sun 01 Oct 2023 01:30:17 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9378
IP address blocks: 180.131.152.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:30:17 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=897CD4E8C34E5B646E3BBF3257D6BD5A1F789867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:34:5b:ef:f0:fb:f0:98:b9:7f:69:7c:6c:
8e:92:c9:07:d0:5b:64:0b:a2:f3:0d:18:97:7e:00:
9c:f7:9d:83:66:c3:c2:1d:56:f4:22:ea:28:90:38:
47:e8:ff:ea:8e:a7:7f:d8:ed:07:61:5a:10:5e:5e:
00:ee:49:73:18:94:c9:36:ea:95:f5:53:59:96:a3:
bb:aa:33:64:bb:a3:53:f8:05:09:7c:c7:aa:53:74:
c7:ea:e1:31:50:34:09:8f:29:3a:b4:03:9d:21:b6:
7b:21:67:38:c8:b8:5c:1b:54:d5:58:e2:01:9d:71:
80:cf:3d:77:92:ea:88:98:6e:54:59:52:44:ca:50:
6d:16:2b:92:26:6d:8a:f5:b8:e4:ca:8a:7d:5f:4a:
9a:00:1e:a1:6e:34:21:6e:ee:91:48:aa:83:71:9d:
ca:5c:0f:f5:fc:f0:3e:c8:2f:51:d1:1e:65:e1:49:
43:65:fa:be:68:e2:11:15:c2:a5:7e:cc:57:9e:8e:
89:10:63:95:80:b8:dd:40:8e:88:91:3c:04:e2:1d:
6c:04:1e:d0:8e:4a:81:f9:08:e0:9d:35:4b:b3:b7:
a5:89:3e:cd:22:f2:3e:ec:17:35:f6:e6:5f:d3:85:
97:09:30:2c:e7:68:92:06:66:eb:cc:6f:77:7a:7b:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:D4:E8:C3:4E:5B:64:6E:3B:BF:32:57:D6:BD:5A:1F:78:98:67
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iXzU6MNOW2RuO78yV9a9Wh94mGc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.152.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:88:fc:b1:9a:67:5e:4e:c2:32:9a:81:34:98:6d:f6:2d:88:
ca:1a:f7:a5:6a:cd:43:87:f1:04:e7:0d:c9:15:f8:b0:8e:df:
8e:aa:24:7f:67:40:d4:76:c6:83:52:09:90:8c:5e:be:7b:9c:
7a:df:0b:ea:08:87:17:67:56:33:42:ba:b1:92:38:17:ac:38:
fb:96:73:f6:d9:cc:15:0a:49:18:bf:ba:20:4b:30:8a:72:f8:
c5:b0:11:26:7b:b7:68:36:fa:65:3c:2c:06:82:24:f9:fc:71:
a8:04:65:f6:72:0d:00:c6:30:79:5c:ca:e8:4c:17:99:78:5b:
8b:55:3f:28:ea:30:2b:60:21:9b:d0:fc:1e:5a:21:5a:28:89:
5d:44:d3:bb:80:ba:e9:d5:81:8f:c0:9a:df:b0:3f:cc:1e:c3:
11:91:a6:cc:3a:85:45:f8:60:21:0a:22:d1:97:2f:c3:27:74:
fb:1f:da:08:88:b7:6d:45:a8:82:17:6b:04:46:50:87:b1:e7:
d8:bf:d5:b3:94:96:12:04:6d:b2:7a:f5:da:60:bb:1c:26:3b:
6c:22:25:2c:1b:bd:c8:87:95:ee:9c:94:91:22:d2:4e:36:ab:
3b:b6:80:7c:6d:ab:bc:44:73:b0:bb:7e:62:ea:35:70:13:14:
ea:0d:30:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:43 2025 by rpki-client