Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/SKNZTSvEp9W8KmNfaRfxmRjAhMM.roa
File: SKNZTSvEp9W8KmNfaRfxmRjAhMM.roa (raw, json)
Hash identifier: uDxFGkL5X2hk1xtprtQ84JdJvEeoDpF+DLlkEPM8BQY=
Subject key identifier: 48:A3:59:4D:2B:C4:A7:D5:BC:2A:63:5F:69:17:F1:99:18:C0:84:C3
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 28
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/SKNZTSvEp9W8KmNfaRfxmRjAhMM.roa
Signing time: Sat 01 Jan 2022 01:31:41 +0000
ROA not before: Sat 01 Jan 2022 01:31:41 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7514
IP address blocks: 120.89.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Jan 1 01:31:41 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=48A3594D2BC4A7D5BC2A635F6917F19918C084C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:76:01:e3:0a:fd:07:23:76:45:74:38:f1:
f3:32:e4:28:c5:3e:84:65:88:71:f1:69:f9:b6:07:
ac:27:be:5a:36:7d:1f:ae:5d:fc:d5:20:ea:d7:4c:
e4:fe:7f:d9:f0:2a:a8:08:8c:88:c4:50:03:26:cd:
dc:ff:51:ad:de:d0:f8:b5:15:b7:29:9c:07:c2:1e:
90:47:62:50:0d:dc:8c:23:ab:37:ba:65:fd:b6:ea:
9a:44:61:11:69:2c:ac:d0:92:e1:b6:b8:cd:4a:87:
31:d1:cb:e9:ed:e8:37:7b:94:a2:30:d8:21:e6:07:
c8:02:8d:32:ca:48:17:02:c2:af:cc:36:9f:b3:d3:
c0:64:20:79:74:89:5f:70:b8:05:b3:54:b1:e6:29:
7b:d7:ed:9a:e8:81:8a:3a:ea:d0:8d:c6:a0:de:36:
96:bc:89:9a:5a:c8:56:34:4d:98:5f:3d:30:6c:f5:
c5:96:91:1f:28:fb:bb:ef:f9:f2:47:41:24:41:a6:
88:9c:03:6f:66:ab:04:89:a6:26:a6:c2:82:ae:bc:
d1:9f:f2:e2:ca:41:13:42:1d:e5:09:05:f5:4e:ff:
ff:2e:04:1a:e1:5c:09:cb:5d:5c:0e:48:97:ba:ab:
c0:3f:86:11:d8:4f:8f:65:60:7c:95:84:b2:c7:a7:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:59:4D:2B:C4:A7:D5:BC:2A:63:5F:69:17:F1:99:18:C0:84:C3
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/SKNZTSvEp9W8KmNfaRfxmRjAhMM.roa
sbgp-ipAddrBlock: critical
IPv4:
120.89.128.0/17
Signature Algorithm: sha256WithRSAEncryption
44:fd:61:31:17:cc:7a:c3:8d:dc:cd:24:a7:ce:5b:f7:34:e0:
5a:ba:64:22:a0:b2:cf:d2:09:7c:43:3f:77:05:9e:ea:c2:6f:
aa:f5:e0:46:59:48:7f:9f:cc:40:eb:fc:33:aa:e4:e3:cc:ac:
82:b1:90:15:d0:53:b4:b9:a6:f7:1f:94:a0:af:71:57:97:4d:
1e:90:23:87:3c:b9:82:ad:2c:96:42:f3:59:ec:a4:29:7f:7a:
0f:85:9c:9d:e3:4c:6e:46:34:d4:6e:77:c4:3d:af:e6:cc:6a:
c2:30:05:3a:b0:fb:59:ca:83:76:9e:22:e7:59:1f:26:b7:f1:
3e:90:b9:60:d8:c6:a4:d0:ac:3b:6e:44:24:2a:d4:cd:a7:20:
67:e9:1d:75:68:28:71:89:ae:78:5e:ac:e4:92:e2:a1:47:81:
12:b7:c2:b8:47:8c:7d:53:e9:3d:db:e5:20:aa:cb:fc:f8:1c:
f8:73:28:9c:ca:39:da:cd:31:ec:4e:31:06:79:a8:00:68:24:
ef:40:91:c7:ad:78:79:e5:fd:28:40:1f:54:b9:06:c0:b4:92:
f4:29:52:ef:a7:8f:70:83:d4:0e:d3:c9:7e:56:30:fc:5f:67:
99:b0:94:e3:26:b8:e6:94:a0:bf:04:d9:6a:d4:4f:df:51:c7:
d2:04:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org