Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/0RanzY-3ObXtTVccu6x1Ufrb5_o.roa
File: 0RanzY-3ObXtTVccu6x1Ufrb5_o.roa (raw, json)
Hash identifier: 2d9+nly6yvGngkVBf9D/RopDrtCabcRY/kFS/9bz9Oo=
Subject key identifier: D1:16:A7:CD:8F:B7:39:B5:ED:4D:57:1C:BB:AC:75:51:FA:DB:E7:FA
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: D3
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0RanzY-3ObXtTVccu6x1Ufrb5_o.roa
Signing time: Tue 01 Nov 2022 07:09:30 +0000
ROA not before: Tue 01 Nov 2022 07:09:30 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 2497
IP address blocks: 133.142.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 07:09:30 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=D116A7CD8FB739B5ED4D571CBBAC7551FADBE7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:c5:56:b4:1d:7b:4c:c6:aa:60:80:bf:77:
52:fa:4a:8b:00:aa:1c:59:95:0e:c2:fc:8d:4e:38:
40:a4:27:e6:54:73:1e:b9:33:b2:aa:c7:da:8c:61:
b0:f6:25:5a:53:70:5d:fd:a6:3a:ea:58:2a:07:e7:
bd:75:46:90:26:f7:fb:16:7b:d3:69:18:cd:01:b8:
fb:3a:85:90:68:ce:38:c0:26:36:d9:f1:b1:46:26:
a5:d9:eb:ee:e0:53:df:fc:a8:39:66:e7:03:b2:64:
c4:d3:a9:f9:b9:1a:53:9c:66:97:3a:69:81:c9:21:
75:58:79:b2:bb:c2:4e:be:54:1d:c2:2a:c1:6c:0f:
a0:e7:0e:a7:74:84:26:f9:ec:e1:21:96:2c:76:66:
e5:f5:75:d3:ac:eb:66:8a:6c:30:02:e5:49:ce:19:
f1:28:21:a2:95:65:93:a6:de:6a:94:d8:32:5e:5b:
39:ba:e1:de:35:d8:d0:d9:50:06:8d:ef:51:9a:bb:
45:66:d2:c4:4f:64:31:1a:8f:93:fd:5b:ce:2a:86:
f6:0a:8e:54:28:3e:cc:06:04:d6:19:e9:7d:08:c0:
f6:3d:00:6d:8a:c7:1a:3d:dd:b1:73:62:8d:2c:a5:
13:fb:f5:ca:06:62:a1:c3:6b:02:e2:6b:eb:be:59:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:A7:CD:8F:B7:39:B5:ED:4D:57:1C:BB:AC:75:51:FA:DB:E7:FA
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0RanzY-3ObXtTVccu6x1Ufrb5_o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:03:31:2b:f5:55:b9:1b:bd:43:04:09:79:cf:81:ad:0d:b2:
aa:8e:a5:f4:ca:21:8d:44:cd:99:df:28:45:b1:4b:77:95:9d:
e6:35:a1:aa:7f:fd:31:0a:5c:85:35:fd:75:de:37:34:16:45:
ca:60:9e:d1:be:5e:0d:fe:8f:8f:ad:58:49:9d:90:d2:1a:b4:
55:dd:66:9c:c3:6f:33:2f:dc:87:df:cb:f9:5b:8a:9e:10:95:
80:e4:0d:be:a8:80:dd:3f:87:84:40:36:7d:d5:a7:b7:8d:2e:
37:5b:3e:98:50:aa:4c:79:73:bd:e3:d4:1a:98:fb:b6:89:03:
ec:c8:1f:3a:1b:4d:be:ee:bc:6c:94:4f:98:3a:e7:3a:52:cc:
07:b2:5c:9c:3c:25:10:f2:57:97:c4:d4:25:a5:c6:7e:40:2e:
e9:fc:dd:d4:9e:04:63:df:3d:12:87:01:a9:cc:de:b7:7d:f9:
f2:15:ba:22:38:24:90:54:a1:b0:82:9a:05:16:28:f7:39:2b:
2d:0c:9a:67:29:e9:8f:5a:68:89:3a:33:2a:f6:24:f7:0d:fa:
f7:36:29:82:7f:b4:ac:51:cd:c6:e3:d5:92:71:2d:e2:b2:32:
09:7a:99:9f:e3:da:de:b3:cc:7e:95:56:e7:fb:13:89:16:ba:
30:79:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org