Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/3Y5WaCIKAlQph_e3V4IP1hjvfBY.roa
File: 3Y5WaCIKAlQph_e3V4IP1hjvfBY.roa (raw, json)
Hash identifier: re0/afd53E6KoDktZnPA190ZxNXveTiA4lpqFPm1TC8=
Subject key identifier: DD:8E:56:68:22:0A:02:54:29:87:F7:B7:57:82:0F:D6:18:EF:7C:16
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: 7B
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/3Y5WaCIKAlQph_e3V4IP1hjvfBY.roa
Signing time: Sun 01 May 2022 01:30:40 +0000
ROA not before: Sun 01 May 2022 01:30:40 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 18126
IP address blocks: 14.132.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: May 1 01:30:40 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=DD8E5668220A02542987F7B757820FD618EF7C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c7:54:20:0f:5b:ae:02:87:33:2d:0e:96:23:
c0:de:02:7e:70:5f:40:0d:c7:7d:61:95:c1:9e:81:
2e:92:d4:bd:1a:91:e1:d8:a7:ce:63:9d:5e:6d:07:
12:d7:20:79:b6:90:5f:b5:80:b7:4d:8f:48:8d:e8:
61:41:1f:0f:3e:de:e3:cc:9a:dd:db:6f:08:3e:2b:
ee:3a:82:c8:10:74:24:ed:bd:a2:13:d1:28:6a:36:
e8:21:8c:ce:b7:d4:60:e5:e0:b5:ff:d7:46:36:9b:
f7:c0:b7:fe:dc:e5:e4:d9:ed:b9:b9:17:46:e0:f0:
0f:ed:81:48:96:81:70:07:12:ff:cc:ba:81:9c:cc:
a4:5c:db:66:3e:91:92:7d:ae:34:d9:8b:56:e3:e4:
5c:3f:73:13:6f:bf:5d:13:b8:37:5f:35:73:96:9b:
61:50:3b:28:c8:37:32:b5:0d:0b:1f:a8:7e:9d:be:
e7:cd:a8:3b:75:1d:cd:44:f2:1f:c8:de:5e:8d:c9:
db:9a:c0:3c:1a:bf:f6:b4:6f:a3:57:8d:8a:3e:0a:
08:b1:c8:bc:02:d0:57:5a:ff:ab:93:28:e2:a3:dc:
79:f6:e4:f0:70:3c:20:b4:02:81:98:58:84:28:e4:
04:f8:2e:5c:87:8f:49:66:6f:ed:51:95:c7:1a:20:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:56:68:22:0A:02:54:29:87:F7:B7:57:82:0F:D6:18:EF:7C:16
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/3Y5WaCIKAlQph_e3V4IP1hjvfBY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.132.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:8b:06:09:f8:01:dc:01:dd:cc:2c:20:64:0f:af:35:4b:47:
df:4f:87:96:5f:58:1d:07:b0:0e:3a:e0:a0:78:d5:c9:89:ff:
45:4b:95:3c:dc:97:ea:40:6c:dc:a7:5a:78:01:c6:60:d3:e9:
4b:50:d6:b5:b7:33:ae:43:e4:43:4e:96:1a:be:2b:0e:6e:c3:
8a:41:97:c6:ce:85:9b:c7:d5:90:70:ea:c4:36:f0:49:ce:4e:
04:cf:7d:67:6b:e5:f3:03:c4:fc:fe:54:eb:f6:1a:a5:55:69:
57:2c:07:57:69:28:38:2c:29:b9:dc:74:61:99:09:2f:7f:f9:
6b:f1:71:be:21:b2:65:37:0f:d5:6a:d3:38:f4:5d:fb:89:69:
5c:ce:13:44:25:85:1d:ae:1d:cf:ed:83:6f:97:d8:bb:62:2d:
5d:4e:72:ed:36:e8:ad:5a:ad:fa:02:ff:ad:78:ae:77:f5:2b:
d1:c8:be:47:30:09:5d:8d:db:04:af:f3:c0:25:67:a7:96:c3:
9a:eb:44:9f:98:b8:d9:34:ea:40:36:33:b9:d9:12:b3:c4:97:
cd:b9:fe:5c:33:d8:3e:77:41:c7:58:2e:ed:53:7c:6a:42:11:
02:f0:0f:96:44:1d:8b:f7:b1:42:5f:96:70:0a:2c:15:52:de:
c3:ce:7a:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org