Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/RNLsj1HS2yeFCkPmtZKOufC3Z-s.roa
File: RNLsj1HS2yeFCkPmtZKOufC3Z-s.roa (raw, json)
Hash identifier: Mn8Kkn0ZYrPyIP/UuS0l/MtX8n+rpf4fJLzXrHPd2VQ=
Subject key identifier: 44:D2:EC:8F:51:D2:DB:27:85:0A:43:E6:B5:92:8E:B9:F0:B7:67:EB
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: CF
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/RNLsj1HS2yeFCkPmtZKOufC3Z-s.roa
Signing time: Fri 01 Apr 2022 01:28:17 +0000
ROA not before: Fri 01 Apr 2022 01:28:17 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 124.96.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:17 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=44D2EC8F51D2DB27850A43E6B5928EB9F0B767EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:23:09:3a:de:e6:d1:b7:d1:44:b7:83:3f:
73:24:89:92:08:d9:49:ef:6d:30:17:69:89:d1:7f:
ca:74:28:7a:3c:68:3e:b7:ea:72:60:d4:ca:92:46:
9f:25:23:0b:22:03:8a:ed:76:c3:ac:fc:4f:60:e5:
fe:89:fb:43:f0:90:ba:51:7c:49:48:20:34:a2:48:
99:69:eb:52:2a:48:39:19:ed:86:a1:c8:75:70:e7:
6b:01:d1:38:28:30:9b:77:7b:45:44:64:68:96:0e:
0c:45:7a:a9:70:e0:06:66:6c:18:ca:9c:6e:75:24:
ca:b7:94:e5:21:c4:3b:d3:9e:24:a5:12:60:20:56:
e0:f6:4a:cb:fa:fc:94:17:3e:b5:6b:d2:8a:bc:16:
ae:2f:50:11:76:05:2e:a8:ab:9e:fa:60:70:e6:8e:
1a:95:65:56:07:03:07:f9:2d:a9:84:ad:f1:ad:f0:
a4:b6:31:0d:a6:ed:df:92:a5:63:c6:f4:ba:ff:02:
07:60:ea:77:85:68:7c:f8:57:06:6f:cc:73:fa:bb:
06:7e:94:8d:a6:a6:dc:98:b0:6f:59:17:04:9d:08:
78:1d:9b:1a:95:17:1d:13:9a:19:7f:65:de:f1:64:
52:3f:7a:84:09:e4:d2:2f:80:f6:dc:a7:67:9f:f9:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:EC:8F:51:D2:DB:27:85:0A:43:E6:B5:92:8E:B9:F0:B7:67:EB
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/RNLsj1HS2yeFCkPmtZKOufC3Z-s.roa
sbgp-ipAddrBlock: critical
IPv4:
124.96.0.0/13
Signature Algorithm: sha256WithRSAEncryption
e0:05:f0:96:15:43:28:ce:5d:43:c2:b2:59:08:81:6d:29:cc:
29:bc:bf:96:bd:04:33:7b:c9:c7:db:7b:95:0c:b7:5b:a8:32:
72:eb:42:ca:0d:ea:a4:57:4e:1a:15:3a:50:10:1a:67:8f:43:
8a:9c:32:bf:01:58:61:fc:ab:30:cb:2b:47:a3:e7:e7:72:46:
d3:9f:ec:c0:bf:ee:4d:bd:ed:6b:2a:5d:e3:b1:9d:26:21:04:
dd:be:bb:9b:77:e6:7d:8a:04:e7:9e:f4:da:2a:dc:1c:d1:39:
e8:46:57:03:1f:bb:02:e0:37:a6:59:3c:c6:03:fd:82:ff:ea:
28:b3:a5:be:b8:b5:3f:8c:02:4d:e8:3b:e7:3f:b3:26:81:57:
f6:7b:e1:01:e1:fb:e6:27:50:10:b0:4b:ce:2a:72:84:1d:8b:
18:a1:e4:69:c1:fc:a3:a1:78:0f:2f:d3:af:08:47:64:38:e9:
75:ed:88:0d:3e:bf:ec:f8:8e:bb:59:db:68:19:05:50:69:cb:
f6:92:98:5b:b3:b5:18:f2:1a:9d:00:64:11:d2:e2:d3:d4:f1:
d7:aa:f6:7e:80:74:ac:e4:ef:fa:90:55:50:fb:b9:c7:cf:15:
e1:22:d3:b6:0e:22:7c:f4:2e:48:a5:d7:ac:f9:98:ff:99:a3:
b3:06:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org