Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CdtpgFo3ZoNRAqqK6n4zZd0D97s.roa
File: CdtpgFo3ZoNRAqqK6n4zZd0D97s.roa (raw, json)
Hash identifier: ziJH3yjlERWoSWoedZOdW2kT72DhkE/1FCdZ6+sb0mQ=
Subject key identifier: 09:DB:69:80:5A:37:66:83:51:02:AA:8A:EA:7E:33:65:DD:03:F7:BB
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0217
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CdtpgFo3ZoNRAqqK6n4zZd0D97s.roa
Signing time: Mon 01 May 2023 01:37:49 +0000
ROA not before: Mon 01 May 2023 01:37:49 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 118.159.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:37:49 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=09DB69805A3766835102AA8AEA7E3365DD03F7BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:9c:a5:aa:63:dd:a0:77:fd:4e:3f:fc:8b:
cf:86:fb:c1:52:3d:e5:09:46:90:8b:fd:80:0c:ea:
d6:34:6f:0f:9f:63:b1:42:ba:1a:38:2e:97:56:91:
2b:ac:7f:2d:8c:ef:bd:72:00:60:2d:6f:d3:ae:9e:
b6:59:2e:4f:43:8f:53:81:28:2b:fd:f5:6f:4b:8b:
3f:48:84:f6:e3:3a:26:28:3e:af:58:dc:00:41:64:
c5:81:aa:a6:d2:a4:2a:5c:87:00:ee:a2:44:eb:0b:
cc:f9:66:35:73:93:8a:f2:f1:20:f0:49:77:24:32:
a8:37:45:f8:91:4d:56:e8:c1:7d:5c:6c:6c:c0:b0:
a3:05:7e:5d:63:63:a1:6a:f5:70:23:a2:44:f2:01:
fb:2c:df:89:e2:10:bf:4d:34:b7:13:84:1c:bd:28:
6a:00:a6:19:9e:29:f1:f0:31:ff:dc:c0:15:8b:dc:
b1:fd:98:9e:c4:29:8f:82:b6:00:7d:d7:6f:db:ad:
f9:2a:67:1d:f4:1f:81:70:e0:0a:13:1b:50:7d:c2:
f1:86:21:1f:90:57:13:42:9b:8a:b3:4f:62:3d:0f:
ab:6b:56:a8:c9:96:e8:46:63:7c:1b:a3:1f:99:f8:
69:dc:1d:ea:b7:3e:8b:e3:0b:46:b5:5a:9f:f6:97:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:69:80:5A:37:66:83:51:02:AA:8A:EA:7E:33:65:DD:03:F7:BB
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CdtpgFo3ZoNRAqqK6n4zZd0D97s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
99:d8:db:f1:1e:86:8c:b7:eb:53:e4:d0:48:f2:93:94:d1:90:
45:82:cc:38:be:b3:22:ea:d4:13:31:c9:a0:66:ba:50:da:af:
af:de:f1:2d:8d:38:30:9e:14:4c:87:a9:6f:af:a7:b2:c7:57:
fd:3f:a5:98:6b:8b:44:96:b7:ae:85:37:e1:68:ef:ed:c9:22:
95:e9:65:2a:84:33:1e:eb:e8:64:01:c8:32:6c:8a:bd:78:20:
d1:42:0c:ec:08:10:a7:8b:57:58:b8:c3:35:e5:0e:2b:57:cb:
18:0b:57:72:b0:af:70:0b:66:74:05:5b:f1:5e:ca:25:d4:6f:
a2:0d:9f:97:80:84:cd:38:e7:00:80:96:e0:77:8e:57:7e:21:
7a:d4:ac:8f:3a:40:41:d1:d5:9a:e5:0a:da:7a:fb:a1:66:c4:
f2:e4:4e:9f:c3:56:85:01:c8:b3:48:24:3d:9b:4e:c0:d9:fb:
65:76:8d:c8:d3:84:8b:05:ac:37:fb:51:6c:f4:d4:14:71:8e:
8d:0a:16:d4:aa:b5:f4:ca:0a:3b:68:ee:84:12:35:83:90:71:
c2:aa:0c:0a:db:d9:14:1e:b0:0e:86:3a:40:9a:39:7d:4f:27:
90:dc:c1:38:bc:4f:4c:18:77:6f:71:7b:e5:cc:ae:02:67:5a:
ee:c7:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org