Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/y9ao8uJgbO0V28tO2p42loeurFw.roa
File: y9ao8uJgbO0V28tO2p42loeurFw.roa (raw, json)
Hash identifier: p4Ckmrlz/Lgk87W5Bbzfzn44TznXhVhfQkIzuCDhLS0=
Subject key identifier: CB:D6:A8:F2:E2:60:6C:ED:15:DB:CB:4E:DA:9E:36:96:87:AE:AC:5C
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 07
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/y9ao8uJgbO0V28tO2p42loeurFw.roa
Signing time: Tue 29 Mar 2022 03:20:48 +0000
ROA not before: Tue 29 Mar 2022 03:20:48 +0000
ROA not after: Wed 29 Mar 2023 00:14:48 +0000
asID: 17683
IP address blocks: 202.227.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Mar 29 03:20:48 2022 GMT
Not After : Mar 29 00:14:48 2023 GMT
Subject: CN=CBD6A8F2E2606CED15DBCB4EDA9E369687AEAC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:79:72:70:c2:f3:a1:db:dc:87:f4:ef:fb:
1d:68:e1:95:07:ca:53:a7:68:61:b2:00:a3:6e:97:
de:96:1b:ea:5c:f6:7e:ae:33:09:3c:da:23:a6:12:
0b:63:a7:ad:cf:f4:db:61:92:ed:ea:e0:b0:ec:35:
ae:37:82:d3:31:03:74:91:c9:ad:0a:66:ca:67:d1:
0b:9f:a3:d9:c7:d1:4c:6b:38:d3:5e:80:fd:ac:11:
d7:56:cb:7e:e5:44:54:0c:21:ce:36:0a:e0:57:9f:
28:cc:c9:08:b5:e3:a5:07:9a:ab:3a:b9:24:20:52:
d0:23:e9:51:a8:54:a9:2b:33:a1:94:3f:d2:a2:c0:
09:d9:06:75:ee:3a:50:fe:cf:fc:83:8b:6a:f0:34:
65:ab:81:ae:d5:0d:14:55:81:fc:4d:0e:b3:bd:24:
78:ed:bc:f3:e3:13:54:d9:a0:0c:b1:65:38:1a:d4:
8a:90:30:e9:bc:00:1c:29:0a:61:67:94:48:86:e2:
90:c6:8e:7e:f7:01:ca:6c:14:cb:e1:56:59:e6:d9:
ca:ce:84:f1:91:cf:2b:c7:5e:e0:f7:9f:3c:3a:ac:
77:f2:97:5e:16:9f:4c:c4:24:1f:7b:f4:9a:74:f7:
48:5d:d9:93:75:09:05:0e:e5:ce:cc:7a:0f:57:ce:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:A8:F2:E2:60:6C:ED:15:DB:CB:4E:DA:9E:36:96:87:AE:AC:5C
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/y9ao8uJgbO0V28tO2p42loeurFw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.227.96.0/20
Signature Algorithm: sha256WithRSAEncryption
27:7d:f0:63:d0:40:e3:95:e6:11:90:6b:1e:17:75:b6:e1:bb:
71:c8:44:e6:3d:d9:94:c9:ad:61:e2:63:be:2c:8d:2f:c1:b2:
23:ea:0e:7f:e7:05:29:7f:a3:89:41:a7:18:e6:ea:6c:e3:61:
d1:78:b8:44:4f:1b:96:b2:8f:40:23:1c:25:58:3e:cc:9f:d4:
cc:2b:35:78:28:54:fc:24:6f:92:17:92:c0:83:28:60:d3:76:
af:39:01:0f:95:10:7e:27:1b:f3:e4:92:ca:bd:25:6e:0b:f8:
85:12:38:f4:06:e0:a4:cb:25:bb:eb:0f:e8:58:eb:21:7f:56:
4b:b1:01:3f:53:f0:61:4b:b9:a0:ff:c2:a0:d7:66:da:1b:2d:
4c:7a:20:c0:16:26:65:95:8f:25:f1:b1:e1:de:23:63:d2:f1:
db:62:4f:3f:8f:74:d8:c3:74:c3:e1:12:aa:9f:5b:49:e9:53:
4b:af:0b:02:33:1b:6e:01:c1:67:97:74:06:54:79:14:f2:38:
c3:cb:70:9a:44:43:98:d5:69:9e:2e:b2:43:1e:21:9f:58:b7:
3b:ec:52:15:11:14:f2:23:e6:ab:7a:8f:64:3f:24:2e:01:4a:
1f:d6:ba:4f:57:b3:58:42:99:55:95:db:9f:46:7c:38:61:db:
6d:85:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:16 2025 by rpki-client