Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/S5ZOjzotyL5UcZPMY51mEH0QKYI.roa
File: S5ZOjzotyL5UcZPMY51mEH0QKYI.roa (raw, json)
Hash identifier: fTMlYVy9s82pKP72uKxctFXrvp9sEgXJkjX9/SMEJ/c=
Subject key identifier: 4B:96:4E:8F:3A:2D:C8:BE:54:71:93:CC:63:9D:66:10:7D:10:29:82
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 23
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/S5ZOjzotyL5UcZPMY51mEH0QKYI.roa
Signing time: Thu 08 Dec 2022 05:30:46 +0000
ROA not before: Thu 08 Dec 2022 05:30:46 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 23778
IP address blocks: 133.88.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Dec 8 05:30:46 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=4B964E8F3A2DC8BE547193CC639D66107D102982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:27:cc:79:0b:70:28:20:2e:bf:52:3c:c8:
1a:8a:ed:d7:71:8e:32:17:b2:49:4b:9e:b1:4f:03:
08:65:e5:ad:25:25:b7:f3:67:6a:31:d0:ac:b9:bd:
48:f7:88:a1:fd:eb:2b:58:54:75:ee:51:7e:ba:4b:
96:c3:79:2d:28:f5:bb:d1:44:14:39:40:b8:e5:93:
7e:08:ef:bb:f5:1d:34:32:b7:0e:82:5e:80:f3:0a:
19:00:5b:2c:ef:2c:04:bf:a1:2c:e1:29:82:c8:4d:
24:8a:89:02:d3:d2:b8:e4:f8:6c:7a:09:7b:10:fe:
1c:5e:1f:12:78:ae:68:92:c1:bd:90:d8:a1:eb:dc:
ef:f9:57:29:5a:00:f9:e1:b2:fa:c9:41:e1:90:13:
69:66:4a:9b:d0:08:ab:cf:c3:44:27:43:e8:a2:11:
22:5c:65:d8:53:25:16:ba:cb:52:b1:45:de:22:00:
33:ad:2b:d2:9a:4a:9c:a7:79:2c:94:e4:71:77:36:
ef:c5:ca:62:e0:01:45:ad:f2:ec:c3:9d:c7:82:aa:
a0:dc:11:55:9b:b1:04:90:fb:77:00:98:e5:35:bf:
d8:38:18:80:77:10:37:27:cd:ff:a4:c6:96:ab:9f:
9d:6e:35:71:0d:59:8e:fa:fd:58:a5:77:a5:31:77:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:4E:8F:3A:2D:C8:BE:54:71:93:CC:63:9D:66:10:7D:10:29:82
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/S5ZOjzotyL5UcZPMY51mEH0QKYI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.88.48.0/20
Signature Algorithm: sha256WithRSAEncryption
31:a7:6b:19:4c:ed:f8:f3:9f:ad:ae:9d:81:c1:90:4c:73:42:
4a:c8:80:0e:ff:d6:91:88:e9:3f:32:b4:d5:6c:c9:e0:6d:cb:
47:2e:6d:3c:48:39:55:04:e6:4f:15:10:fb:63:f7:4a:90:09:
cc:22:65:ca:58:0b:05:ae:95:9d:94:e8:7d:9c:6f:48:e5:b8:
b3:e8:1e:84:31:e4:af:37:24:8f:9f:ea:24:66:4e:16:93:ac:
6d:88:15:b2:4b:8d:e8:16:ee:0f:d3:2e:ff:d0:7b:09:58:68:
26:59:99:49:a3:51:0a:24:7d:9e:cd:17:be:75:e9:a0:77:43:
ba:69:a2:aa:8b:ca:1c:d7:5f:bb:68:52:a3:ab:2c:89:79:fb:
99:41:b6:91:ad:67:ab:4a:51:56:e7:61:5f:ad:bb:6d:eb:c7:
81:a5:74:00:d3:f4:74:7a:52:0e:85:74:90:09:26:8c:b0:bd:
0c:6b:86:93:60:4e:c6:48:76:f9:47:ba:f5:7a:be:ff:51:2e:
18:fe:b3:57:d6:cc:4f:de:cd:29:50:88:fb:3d:6b:e1:c7:cd:
38:92:a1:80:de:b7:f3:4d:5c:7b:a4:b9:59:e5:a1:83:66:3f:
bf:98:c6:00:29:ec:89:33:c6:b7:9b:08:c8:37:42:a8:e8:19:
8c:fb:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:00 2025 by rpki-client