Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/f1_Fvo4iRXhCp8BlUgEEU6VFThQ.roa
File: f1_Fvo4iRXhCp8BlUgEEU6VFThQ.roa (raw, json)
Hash identifier: 9vLijNfoln7cvwxVYXKeMfH8Qj68XVkfuWiyjoaC2mM=
Subject key identifier: 7F:5F:C5:BE:8E:22:45:78:42:A7:C0:65:52:01:04:53:A5:45:4E:14
Certificate issuer: /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial: 02
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/f1_Fvo4iRXhCp8BlUgEEU6VFThQ.roa
Signing time: Wed 20 Apr 2022 07:07:10 +0000
ROA not before: Wed 20 Apr 2022 07:07:10 +0000
ROA not after: Thu 20 Apr 2023 02:53:00 +0000
asID: 37908
IP address blocks: 202.236.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Validity
Not Before: Apr 20 07:07:10 2022 GMT
Not After : Apr 20 02:53:00 2023 GMT
Subject: CN=7F5FC5BE8E22457842A7C06552010453A5454E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:05:d3:fc:0f:e9:dd:12:4e:ce:dd:05:f5:f6:
b8:5f:ca:8f:3c:03:d1:aa:1c:95:ff:6d:1c:da:46:
e7:d3:93:99:e0:f1:3f:98:8c:b7:7f:b0:98:96:f5:
35:dd:02:34:93:d3:fc:d0:fd:bd:79:74:01:eb:c7:
8a:62:77:9b:af:11:cd:b9:5f:bf:6f:6e:a6:94:7d:
ae:ea:34:6b:1c:b8:58:e3:a5:e6:9c:46:62:3f:52:
d2:69:d3:88:80:66:96:f0:ca:72:e1:04:ff:ad:49:
5b:74:20:a1:3e:70:b9:3c:d5:1e:03:7c:6b:a4:4e:
e9:6e:59:cd:5b:ae:94:5a:78:e5:b9:38:fe:9e:4e:
bf:3f:87:a7:29:d0:2c:42:a3:a3:0b:2b:17:9f:5b:
c1:51:23:5b:5f:94:ec:41:97:e0:21:5f:94:34:7b:
ae:3e:e8:a6:47:11:1e:fb:9b:0d:b5:a2:00:99:91:
9e:d2:00:86:b4:0f:c3:0d:9e:10:04:db:d3:a3:2a:
4f:98:df:7d:25:28:95:40:a7:1b:4e:54:b7:4b:25:
3e:b4:5a:9f:5e:92:b8:9c:ec:02:f1:20:2f:09:1b:
63:5e:9c:de:47:05:82:30:6c:ba:ed:98:8f:de:fc:
06:7c:74:98:89:88:9f:a4:24:b8:b7:93:d7:0f:aa:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5F:C5:BE:8E:22:45:78:42:A7:C0:65:52:01:04:53:A5:45:4E:14
X509v3 Authority Key Identifier:
keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/f1_Fvo4iRXhCp8BlUgEEU6VFThQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.236.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:17:95:24:62:0e:54:bb:a8:3f:d4:81:84:97:eb:44:e5:ab:
dc:b5:c5:be:64:f9:a9:86:4c:dc:76:6a:76:e6:39:40:92:f5:
07:21:ac:a8:34:67:1a:c7:88:f1:4b:2a:1e:7d:80:4a:bf:d0:
75:18:ee:a3:3b:2e:73:5b:ba:3b:aa:05:a1:a4:98:56:02:a4:
43:13:5d:0b:46:a1:a9:32:21:36:72:51:d2:a9:b1:42:df:84:
85:4c:d2:cd:6c:99:c2:ee:d2:51:ac:b7:d8:a5:1f:c4:aa:18:
0d:63:b4:1f:ff:0c:10:61:08:85:0b:83:5a:c3:29:e5:64:46:
be:77:0e:d8:da:22:be:f9:48:5d:17:09:31:2f:f1:5a:04:7f:
01:25:6c:74:33:48:3d:74:10:8f:c3:a9:3b:af:b9:f9:02:78:
4c:9f:92:41:dd:ec:2b:91:85:bc:c5:14:0e:d0:fd:8b:80:78:
a4:55:d2:ea:cb:04:7f:cf:02:21:dc:79:d5:b4:f3:36:f1:1a:
17:b0:d9:61:2e:c2:38:16:b3:21:be:21:01:cd:97:eb:86:82:
60:01:c2:86:dc:93:09:ac:f5:c2:58:54:c2:aa:3b:aa:84:44:
ba:71:97:c0:8d:e9:0a:ad:17:69:ba:e8:04:0e:c3:a1:c2:3d:
e7:4c:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:17 2025 by rpki-client