Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/JXgk2_fKqgdpZ41S_RO_qeS9XXc.roa
File: JXgk2_fKqgdpZ41S_RO_qeS9XXc.roa (raw, json)
Hash identifier: +TGl2+dLbj5q9cI6tsALs726W8BEsraOXmyyzXwMH7Y=
Subject key identifier: 25:78:24:DB:F7:CA:AA:07:69:67:8D:52:FD:13:BF:A9:E4:BD:5D:77
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: D2
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/JXgk2_fKqgdpZ41S_RO_qeS9XXc.roa
Signing time: Tue 01 Nov 2022 07:08:33 +0000
ROA not before: Tue 01 Nov 2022 07:08:33 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 2497
IP address blocks: 133.137.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 07:08:33 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=257824DBF7CAAA0769678D52FD13BFA9E4BD5D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:e8:3a:ee:14:38:b3:dd:cf:98:b4:99:01:
5e:51:42:f5:39:6d:4f:80:a1:74:45:6c:68:1b:80:
ba:60:f6:5a:68:44:de:d1:03:ef:26:b4:50:a4:e2:
3f:d0:af:73:b4:59:69:51:ec:c2:23:6d:04:28:41:
1d:23:33:c4:f1:1e:b1:c7:20:86:99:ef:b2:fb:c8:
ee:c9:77:58:d2:7b:d8:d5:c3:19:c3:db:fe:98:1d:
0c:a4:db:58:90:6e:da:3c:e7:66:b4:53:ab:2a:ee:
c2:37:34:87:86:5e:9c:d3:6a:6e:60:91:64:ab:45:
e5:af:e4:bd:c8:2a:4e:ce:e3:c3:f7:07:01:49:ca:
7c:e9:9c:0b:a6:6e:02:00:89:b0:c9:54:69:e6:8e:
97:75:de:bd:f5:c5:64:21:68:87:a0:4a:5d:c8:c4:
eb:7c:bc:25:7d:b2:15:88:e2:e3:5d:09:7e:81:50:
7e:d2:79:ef:c2:4b:02:e7:48:b5:f8:c0:47:30:c2:
f6:e7:a7:57:6b:51:8b:8c:f7:a8:5f:51:40:43:cf:
87:42:52:43:b3:24:54:ab:3b:31:ec:d0:b7:c5:c7:
b2:03:e5:ab:c5:e1:64:b5:1e:18:5b:ac:a1:81:bd:
7f:19:6b:d2:85:d0:5a:24:93:e4:8d:33:f1:1f:65:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:24:DB:F7:CA:AA:07:69:67:8D:52:FD:13:BF:A9:E4:BD:5D:77
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/JXgk2_fKqgdpZ41S_RO_qeS9XXc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.137.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:1a:e8:b8:e0:12:b3:b4:be:92:fb:a1:7b:e5:f7:a9:b1:8b:
59:5d:b5:92:76:47:62:f9:07:20:97:b9:fd:b7:e2:b0:41:65:
ef:f5:df:06:c6:ae:cd:da:c6:fa:b9:6d:bb:3b:ab:45:42:ad:
5c:0e:d3:83:14:d9:51:99:57:b1:c2:11:47:d1:fc:eb:8f:a2:
5d:87:83:14:e5:15:26:b1:b6:37:a1:6e:6d:96:cb:c7:a4:d4:
5b:36:87:c7:c6:ea:28:a6:ca:52:bc:bd:cc:c2:84:f4:c5:bd:
d3:b9:04:b1:a0:07:b3:c9:ac:a1:3a:79:2c:96:09:d3:8e:2e:
d6:e0:73:de:a8:d5:87:29:7f:09:08:f5:e1:46:b1:e5:40:4b:
3d:f4:21:ad:f7:e7:40:71:02:a2:a0:11:b0:1d:58:99:a1:9b:
4d:37:70:7e:9c:c7:b9:d4:5a:fd:f3:0d:24:91:6b:48:c7:ab:
8e:34:e7:61:f7:bd:3f:02:d2:22:72:b6:49:f8:4a:ef:bb:90:
99:9b:23:e7:44:65:d2:8c:63:ce:c6:0d:ec:2c:96:d4:ea:c0:
9b:b4:2e:19:22:fb:25:b0:ab:86:87:65:ce:17:00:27:06:6d:
b4:c8:3a:fa:d1:b7:02:1a:d9:31:21:f5:4b:9c:5a:3a:20:3b:
74:02:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org