Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa
File: 0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa (raw, json)
Hash identifier: Wyr+5as0VE0b6PSfIUpIzda+yrKOZ/johRu7dtbb5xU=
Subject key identifier: D2:DD:A2:9C:9B:7C:F8:93:BF:5B:D4:3C:0A:95:E8:45:2B:CF:50:9C
Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial: 11
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa
Signing time: Sat 20 Feb 2021 08:03:56 +0000
ROA not before: Sat 20 Feb 2021 08:03:56 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 9621
IP address blocks: 157.120.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Validity
Not Before: Feb 20 08:03:56 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=D2DDA29C9B7CF893BF5BD43C0A95E8452BCF509C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:e1:75:ae:4b:35:25:c0:61:fe:af:8f:72:
b5:f1:bd:94:6d:2b:e0:c3:91:1a:25:47:c2:3d:67:
63:4b:ed:0c:7d:1a:a0:81:81:ed:65:27:9f:48:de:
ea:89:94:c5:f4:43:a0:09:3e:05:27:5d:43:45:72:
6c:8c:5c:93:53:77:13:db:4f:fe:eb:9f:7a:13:19:
49:15:fb:8f:6e:8b:52:b4:c8:69:73:4d:76:78:d4:
bc:85:26:49:5e:77:d7:4a:ed:73:b0:3b:59:fb:47:
e6:fd:25:80:9b:d0:c7:48:dd:fd:cc:3d:97:d5:5f:
8e:c6:97:72:26:3d:c0:d7:38:82:fd:55:b8:b2:ba:
5c:67:38:e9:51:b5:67:f7:8c:87:0d:62:8f:81:2f:
bc:11:60:e7:67:f1:78:fa:a8:bd:5d:b8:6d:5f:6f:
f1:f7:2c:2f:91:ac:c2:f6:c8:ca:e1:4a:e6:bf:af:
1e:5e:b0:93:75:1d:ea:0d:9a:61:eb:43:d8:bb:36:
6b:c1:60:ab:84:33:a2:58:1e:73:42:a4:bb:4a:20:
c1:44:d6:ad:97:f2:dc:6c:7d:19:97:bb:e5:8f:c8:
7c:52:4a:cc:58:ed:8c:31:a3:18:77:f6:a7:4a:7b:
39:37:fd:10:6f:07:a4:42:1a:10:31:9d:b0:5c:e9:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:A2:9C:9B:7C:F8:93:BF:5B:D4:3C:0A:95:E8:45:2B:CF:50:9C
X509v3 Authority Key Identifier:
keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa
sbgp-ipAddrBlock: critical
IPv4:
157.120.96.0/20
Signature Algorithm: sha256WithRSAEncryption
05:e9:9e:e3:86:cf:ab:1c:ff:2d:ec:77:f6:c5:8d:51:07:6d:
61:7b:98:99:35:c7:c3:b5:d1:51:f6:30:d7:09:84:84:23:29:
57:71:98:ed:1d:7c:b2:47:11:69:75:66:39:8f:36:85:6c:29:
99:42:0a:77:88:fd:34:5d:2e:9c:ae:56:89:98:49:2c:de:16:
66:05:16:5f:af:d3:79:2f:f2:6a:9a:80:09:59:fd:d8:4b:89:
b9:f8:86:33:59:73:aa:3b:2e:6c:52:3e:32:12:5e:02:08:e8:
6d:c2:b5:3a:5d:2a:a6:2f:d0:69:bc:cc:3a:31:3d:11:84:58:
3b:93:f4:8c:b3:84:2c:b4:e5:5a:08:ef:4b:e8:98:1a:06:30:
3a:81:88:64:21:38:83:62:25:d9:63:d1:8e:32:45:77:a4:7d:
b3:e0:22:fd:45:df:ca:98:2d:1e:b7:2e:f8:18:93:f2:ba:4a:
2a:03:81:ce:b7:03:29:11:68:9e:c8:8f:d7:24:35:5d:ed:67:
fb:2a:70:98:46:14:1b:a4:ad:4e:c4:33:97:c1:d7:6e:62:65:
16:14:47:32:80:de:8e:e4:2d:54:5e:f4:78:87:cd:5b:51:b2:
34:ef:d9:b4:f7:cf:2f:25:00:19:68:0a:d3:2f:73:9d:e5:de:
85:70:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:05 2025 by rpki-client