Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/0KXOdDXTmSub4SdAyCSrLLKoEzQ.roa
File: 0KXOdDXTmSub4SdAyCSrLLKoEzQ.roa (raw, json)
Hash identifier: vWokUWErk3BbZG1vJTthj8RuU/hrzWoD/foRc7Zh+zw=
Subject key identifier: D0:A5:CE:74:35:D3:99:2B:9B:E1:27:40:C8:24:AB:2C:B2:A8:13:34
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 03
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/0KXOdDXTmSub4SdAyCSrLLKoEzQ.roa
Signing time: Wed 20 Apr 2022 07:17:09 +0000
ROA not before: Wed 20 Apr 2022 07:17:09 +0000
ROA not after: Thu 20 Apr 2023 02:53:00 +0000
asID: 37908
IP address blocks: 202.254.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Apr 20 07:17:09 2022 GMT
Not After : Apr 20 02:53:00 2023 GMT
Subject: CN=D0A5CE7435D3992B9BE12740C824AB2CB2A81334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:a5:e6:43:e2:ee:57:10:94:10:fc:0a:91:
e8:16:b7:bf:60:c2:4b:59:8b:d7:f7:0d:4b:d8:66:
7c:eb:04:2d:74:54:d0:3b:3a:d9:4e:3e:ce:00:d9:
b5:08:59:78:ca:3d:63:ea:16:48:4b:53:a8:a4:57:
4d:a6:7a:72:af:8c:7b:16:01:39:26:fc:89:99:40:
e4:ab:d4:e5:be:c7:46:51:cf:2e:33:20:01:fe:ee:
d3:17:ad:82:92:12:1c:43:16:76:d1:cb:35:4f:3b:
1c:a0:1d:c5:0f:20:79:2f:47:0e:a1:8c:b5:11:e6:
50:98:62:e4:62:4c:6b:a4:43:0d:3a:f9:d8:57:d9:
2d:b6:3c:ea:4f:6b:f7:2d:7b:bc:60:ff:2d:c2:dc:
38:a8:b9:5b:8b:31:09:5d:1a:3f:12:a1:d0:10:6d:
c2:3c:f3:2b:10:a0:41:c6:4c:52:15:b0:85:4b:6b:
c0:a6:98:43:b9:9a:bf:f2:6a:f9:ea:26:5b:91:21:
b5:f7:40:28:7c:f8:4f:7e:f1:da:ff:81:0a:23:39:
58:de:d0:88:b1:7b:d7:58:95:44:62:33:6f:9d:51:
d8:4d:cf:aa:81:8d:47:7b:b2:b2:11:16:3d:18:28:
42:d8:69:a8:86:d7:a3:ac:9d:84:7a:e1:7f:e1:1c:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:CE:74:35:D3:99:2B:9B:E1:27:40:C8:24:AB:2C:B2:A8:13:34
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/0KXOdDXTmSub4SdAyCSrLLKoEzQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.254.111.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ad:e5:fc:5f:f9:96:89:85:c0:51:90:72:3f:df:75:1d:64:
90:04:80:fb:ba:5d:ba:2f:d4:49:9a:36:9a:63:9b:94:49:96:
a0:f7:70:95:39:b4:70:ac:22:9a:2b:00:f8:29:3a:18:ba:e1:
2c:10:d5:87:6f:98:a2:53:9c:5b:a8:6f:13:ae:04:49:4b:a9:
92:4a:2a:e8:a3:72:0f:80:80:ce:95:27:a6:43:94:e4:36:aa:
a3:e4:cb:b3:18:12:b6:f6:d0:dd:91:a8:0e:56:4e:b2:1a:06:
91:d8:b8:61:8b:30:20:16:07:37:8b:73:aa:3d:c8:a1:4e:2d:
30:f6:7f:b1:a1:45:e7:a4:e4:aa:9b:96:09:3d:62:99:f5:e9:
9e:93:3c:bf:d1:92:a9:b8:da:de:2b:06:e6:45:84:9c:aa:10:
9c:17:48:02:ab:4f:db:67:fc:f7:c7:f0:e6:6b:90:51:ab:bf:
b5:29:36:ef:51:02:eb:af:9e:28:8c:68:3c:d8:eb:60:9a:83:
a3:73:22:32:a4:72:21:a1:86:5b:46:92:58:eb:9c:59:44:a5:
3b:c1:dd:bc:69:c7:41:0d:ca:10:f5:42:6c:f1:76:68:4c:d1:
a3:5c:b2:4a:a2:a3:22:a7:82:39:3c:9d:f0:ee:c6:66:11:d5:
e9:53:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:15 2025 by rpki-client