Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/rqYG-F-UHLuxoqnbrN3pwGtTzw0.roa
File: rqYG-F-UHLuxoqnbrN3pwGtTzw0.roa (raw, json)
Hash identifier: ca3eXg7y0SJ6Ggw3azaIQwFmPqd3k+mBrXIOvUpmb2Y=
Subject key identifier: AE:A6:06:F8:5F:94:1C:BB:B1:A2:A9:DB:AC:DD:E9:C0:6B:53:CF:0D
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 90
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/rqYG-F-UHLuxoqnbrN3pwGtTzw0.roa
Signing time: Tue 22 Feb 2022 07:34:07 +0000
ROA not before: Tue 22 Feb 2022 07:34:07 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 2497
IP address blocks: 220.156.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Feb 22 07:34:07 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=AEA606F85F941CBBB1A2A9DBACDDE9C06B53CF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:f9:10:c9:f3:a2:ba:15:1e:54:c1:72:29:
4e:a3:50:b4:86:c6:18:65:e4:9a:35:9d:5c:94:4b:
f7:38:f7:7a:68:fc:8b:7c:ba:9d:27:e0:7a:8e:7f:
65:59:96:20:8d:7e:9c:93:f6:31:97:37:10:df:40:
82:b1:a2:69:12:27:ca:f3:be:ab:ed:47:94:27:5a:
bf:56:9a:b7:15:e6:c5:68:48:e7:1c:0b:e4:aa:60:
4d:04:21:71:38:20:ba:6b:ea:cd:e7:0e:4d:e4:f8:
49:4e:c2:e6:b5:df:fd:80:5b:c0:17:39:2d:5a:ee:
26:54:37:5f:2e:98:6e:32:12:22:46:2f:84:ef:a0:
15:0e:85:4f:71:3a:02:4f:ef:d2:90:6e:f3:eb:4a:
a1:d9:f1:2e:d1:01:60:86:41:99:9b:f6:23:9a:48:
fb:7c:16:18:58:74:ae:8b:df:e1:2b:d6:05:83:bb:
ee:ee:59:55:92:9c:e6:50:05:a3:ff:e9:1a:96:92:
d8:1d:3b:ab:a5:6b:82:0c:08:81:3f:55:95:8c:33:
59:25:f6:ca:d4:e0:f6:13:3e:a8:cc:7b:71:c1:44:
da:15:5c:48:26:03:19:55:93:20:fd:a9:4d:38:bf:
c3:b6:ad:d1:6c:14:89:e4:73:d7:7a:36:44:89:65:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A6:06:F8:5F:94:1C:BB:B1:A2:A9:DB:AC:DD:E9:C0:6B:53:CF:0D
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/rqYG-F-UHLuxoqnbrN3pwGtTzw0.roa
sbgp-ipAddrBlock: critical
IPv4:
220.156.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:16:73:44:ae:68:71:ea:73:a0:3a:10:f1:81:4b:7e:1e:2c:
de:08:85:d6:7e:97:b9:a7:3a:21:68:17:a2:f8:20:b9:36:4d:
10:ef:b3:7a:73:3f:97:d1:57:44:9d:49:a1:93:0d:09:4e:7d:
b9:fb:56:92:1a:15:a6:95:3d:fa:85:05:31:0a:16:3b:48:15:
c0:11:ba:a0:a3:b6:04:fb:3c:fe:da:34:8e:89:c1:c2:e7:01:
aa:37:fe:89:c1:c8:fb:df:63:0e:ee:9c:7c:c1:7f:c3:03:8c:
ce:fa:b5:46:7c:2c:3c:07:62:e0:0c:3d:14:19:79:fb:29:82:
1c:ee:dd:27:98:58:ae:0c:b4:8f:17:ab:6f:06:8b:f3:6d:35:
8c:c3:6a:93:1f:f5:62:54:a0:f3:7e:ce:44:20:18:76:fd:da:
2e:5d:fb:da:0f:12:90:38:6c:59:44:1b:4a:dc:4b:3b:d4:46:
a9:a4:63:48:39:44:3f:1a:d9:ab:ad:6d:cb:0e:2a:78:a8:ab:
c9:de:fc:4c:fe:e6:e5:41:ee:93:6a:35:e0:2d:07:3f:a7:3b:
e0:40:92:50:16:da:85:8a:d0:d6:70:61:77:46:2a:ac:fc:d4:
05:d7:20:4b:1b:e8:1a:b4:6d:00:41:a1:f0:95:9a:cb:65:ea:
3c:60:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org