Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/UP3YYyfc-QLZSOX-9SeBKDWGzoE.roa
File: UP3YYyfc-QLZSOX-9SeBKDWGzoE.roa (raw, json)
Hash identifier: sHaN9sZ+L+wE5SqYgzWCjF2Qvcujgu9HCDnrWnuTzOg=
Subject key identifier: 50:FD:D8:63:27:DC:F9:02:D9:48:E5:FE:F5:27:81:28:35:86:CE:81
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 44
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/UP3YYyfc-QLZSOX-9SeBKDWGzoE.roa
Signing time: Sat 01 Oct 2022 01:29:12 +0000
ROA not before: Sat 01 Oct 2022 01:29:12 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2497
IP address blocks: 157.65.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Oct 1 01:29:12 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=50FDD86327DCF902D948E5FEF52781283586CE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:3e:3b:79:63:62:52:7e:7e:78:15:a2:90:
53:b0:07:ff:98:8c:0e:3f:04:e8:a9:85:3c:81:b2:
39:59:59:a2:14:66:d1:af:09:41:7b:eb:82:d6:b3:
c4:51:41:b1:2f:49:c8:21:1c:b9:34:0a:49:67:be:
55:7c:b5:14:8a:0d:d3:ce:e2:dd:d0:fd:09:d5:3f:
56:f8:f5:4a:36:9a:a9:b1:5b:65:09:e1:f4:1a:7f:
91:39:64:ff:11:27:24:f7:74:84:7a:de:be:03:93:
f1:e8:c9:93:02:b7:dd:9a:0b:b7:a7:d8:c4:b0:01:
7c:86:eb:92:4b:ce:bc:e2:d4:1b:e6:99:bc:b9:ed:
e8:84:79:40:8d:54:2a:38:02:98:42:43:f1:50:e7:
54:5e:ac:3a:25:00:83:ad:b0:f5:01:a8:75:de:2f:
a9:a8:c9:b5:27:02:42:42:b9:61:96:4f:0d:94:55:
a2:63:c0:32:be:a2:c2:89:d1:d6:50:30:c1:30:9b:
1b:bd:e7:78:fe:a4:09:cb:60:eb:91:61:6e:bb:7e:
03:f7:bc:50:f4:02:a0:bb:bc:cd:3e:40:53:fe:1d:
3a:c1:84:1c:1b:0d:60:32:bc:6b:e1:1f:1d:1f:70:
a8:c5:d6:19:2d:1d:f1:a8:f6:c7:58:8d:69:a4:47:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:D8:63:27:DC:F9:02:D9:48:E5:FE:F5:27:81:28:35:86:CE:81
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/UP3YYyfc-QLZSOX-9SeBKDWGzoE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:4e:38:ea:49:83:39:db:8a:28:39:4d:ed:28:8f:47:54:31:
80:f6:18:27:6f:3b:1a:e5:3b:62:e3:25:c0:26:a7:2b:79:f0:
9f:85:62:47:57:c6:7d:f7:77:f2:83:43:33:4a:c0:3d:f9:63:
0c:3b:27:85:18:7d:b1:b7:fc:b0:ca:fc:e1:78:ec:89:67:f6:
61:4d:e8:16:68:13:2e:de:ef:ea:8d:1d:43:b5:91:df:cb:5d:
9a:96:b4:d6:1e:df:4b:d8:73:6f:83:b2:bf:da:6a:c7:10:e2:
7c:b8:ca:d7:a5:19:b0:84:3e:82:37:c9:eb:6e:41:a1:eb:5b:
a6:e4:4a:e9:7c:16:91:d0:ff:b8:1d:4d:cd:a6:93:47:cf:ad:
9e:77:62:d7:ca:ac:9b:a1:15:20:14:b4:66:e6:94:0e:4e:69:
ca:43:d7:cc:6b:3d:85:2e:81:b1:ff:4e:c9:51:80:99:6e:c0:
a9:03:af:31:0e:13:32:4e:bd:d8:e1:c8:00:ce:e3:6f:96:66:
15:e8:14:52:ad:74:dd:2a:06:ea:ae:7e:7d:36:5d:47:59:ae:
67:69:e6:5b:97:6f:35:76:63:b5:e9:44:ae:23:42:e5:70:e2:
ad:b9:33:e3:f8:81:26:95:94:93:d8:9c:03:8a:43:4a:75:dc:
09:c5:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org