Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/hP15NnyYveahDEVZVnvjyiut_GY.roa
File: hP15NnyYveahDEVZVnvjyiut_GY.roa (raw, json)
Hash identifier: Sokr0NVHKGi4QnOwLJLXfxSsVJCBdmfyizDRfTFLpK4=
Subject key identifier: 84:FD:79:36:7C:98:BD:E6:A1:0C:45:59:56:7B:E3:CA:2B:AD:FC:66
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 46
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hP15NnyYveahDEVZVnvjyiut_GY.roa
Signing time: Sat 01 Oct 2022 01:29:12 +0000
ROA not before: Sat 01 Oct 2022 01:29:12 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2497
IP address blocks: 157.65.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Oct 1 01:29:12 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=84FD79367C98BDE6A10C4559567BE3CA2BADFC66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:b5:02:85:a9:48:30:10:37:57:75:1d:12:
4a:6d:23:dd:67:49:cd:1f:17:f7:96:df:31:1b:8a:
3c:43:14:5e:f6:7f:e5:08:7a:e9:42:10:15:0a:6f:
11:e6:62:6f:e7:e3:4e:e5:d0:f6:97:30:89:58:69:
54:98:4f:bd:d5:2f:f0:ba:f3:7e:09:7c:c5:f7:af:
ac:82:21:e1:0c:a1:56:51:df:95:ce:9a:ae:e7:3b:
48:a9:eb:a2:5a:28:c1:2d:16:fe:df:b8:2d:19:ea:
38:df:4b:39:91:bc:3f:02:81:9c:03:cf:3f:b5:7a:
4a:42:83:22:d5:40:0d:9b:f4:0c:b2:88:b5:3f:76:
32:a2:93:1f:06:0c:19:06:56:f4:17:2c:d6:da:b7:
fb:4a:45:44:3c:89:f3:20:48:55:01:bf:93:15:a1:
df:e0:95:17:07:8c:15:cd:92:80:5b:9d:e1:48:17:
76:d8:f2:fb:49:69:5d:a3:d2:bb:f1:35:ff:c8:65:
f8:59:e4:0c:e2:9d:76:27:fd:32:9e:72:e2:7b:35:
40:1c:7d:49:06:da:b6:4a:18:93:df:94:f8:83:d4:
a0:50:53:90:59:35:78:9c:90:53:41:f1:fc:7d:9c:
c1:c9:54:b5:54:54:31:bd:8c:7f:d8:97:45:3f:7f:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:79:36:7C:98:BD:E6:A1:0C:45:59:56:7B:E3:CA:2B:AD:FC:66
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hP15NnyYveahDEVZVnvjyiut_GY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.192.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:ab:22:35:16:ed:c3:b0:94:fe:50:0b:18:5d:3b:d4:af:6a:
72:db:5d:eb:65:22:8c:d5:55:2a:da:34:2c:be:8a:75:70:08:
64:60:66:00:52:47:79:a4:24:9c:c8:93:d9:34:4a:f7:b5:28:
89:4c:1a:f0:e9:88:27:09:e9:84:8e:e3:c4:08:6b:21:a6:34:
32:95:2b:5c:62:74:6c:b5:bd:f1:20:db:3d:a9:44:dd:ee:cc:
b1:cd:af:e6:32:9c:0d:ea:f3:0f:1a:b8:e0:5a:4d:b9:f9:3a:
45:9c:ac:ab:a0:df:08:3f:55:96:6f:21:9a:c3:f0:2c:12:12:
ad:8b:91:60:6a:28:67:42:86:19:8d:b8:44:c4:08:76:08:01:
e5:84:f5:b0:0e:74:22:5e:76:1f:18:ca:0f:39:4c:82:b3:a1:
44:2f:11:0a:65:44:d0:5f:45:af:1c:3f:da:92:f6:4f:be:05:
f6:11:1a:a9:a0:79:a3:d1:be:48:d7:44:b6:f1:c6:14:17:db:
04:69:68:ec:5a:3b:2b:d3:55:06:9b:c5:eb:4c:21:7a:a8:e3:
48:f7:80:08:dc:82:34:48:87:c5:f5:db:71:54:20:f2:d2:1f:
9d:6b:b9:37:01:54:da:d8:64:8a:52:da:62:85:9d:b1:00:2f:
c5:d0:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org