Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-OYx4okUqbJzb6aCPwUjnjhJlrQ.roa
File: -OYx4okUqbJzb6aCPwUjnjhJlrQ.roa (raw, json)
Hash identifier: YmcMbwiYxbJCz3iLd1QN58JI5WhLEneteqTzssIG7wo=
Subject key identifier: F8:E6:31:E2:89:14:A9:B2:73:6F:A6:82:3F:05:23:9E:38:49:96:B4
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 010B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-OYx4okUqbJzb6aCPwUjnjhJlrQ.roa
Signing time: Sat 01 Jan 2022 01:31:18 +0000
ROA not before: Sat 01 Jan 2022 01:31:18 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 219.109.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:18 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=F8E631E28914A9B2736FA6823F05239E384996B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:0f:65:1b:9a:8b:fc:e5:09:94:f0:3f:6e:
69:15:79:ae:ac:a8:42:a8:a6:76:9b:b0:fe:6f:22:
c3:98:3a:16:51:50:0d:a1:99:89:5e:03:d0:d3:d9:
12:a3:ce:f0:e5:4a:cf:91:e1:6d:92:a1:95:89:a2:
d7:0e:66:a3:44:27:7d:80:8f:4f:ab:b0:84:3e:a5:
62:2f:15:4b:49:10:37:6d:c8:14:ca:34:ad:d3:80:
4a:7a:ae:2c:4d:1f:39:a0:01:db:49:ff:00:5d:8d:
09:08:37:b3:b7:1a:5e:f8:8b:70:01:70:1f:b2:76:
1d:1d:82:10:52:b4:20:45:17:ed:79:73:1d:c0:e2:
8b:53:be:50:98:17:e2:24:e7:8a:68:17:12:a5:a6:
af:b2:9e:12:66:c3:d6:a7:a7:78:0e:fc:1d:b9:54:
4a:62:cf:53:f6:0f:cf:90:1c:c9:e1:53:1b:bb:7e:
b5:40:8c:9f:0e:e9:f1:08:ce:87:9d:f1:2b:3c:79:
23:1d:c9:00:39:a9:c1:cc:81:82:fb:7c:06:2e:aa:
66:fd:09:2c:f6:ab:7a:f8:f1:ab:6a:7f:9a:9f:e9:
e3:8c:82:96:e3:5c:9f:bd:2a:6c:7c:ef:97:b2:8e:
c9:6e:14:84:f6:90:20:c8:a0:8e:d7:09:ee:a0:4f:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:31:E2:89:14:A9:B2:73:6F:A6:82:3F:05:23:9E:38:49:96:B4
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-OYx4okUqbJzb6aCPwUjnjhJlrQ.roa
sbgp-ipAddrBlock: critical
IPv4:
219.109.160.0/19
Signature Algorithm: sha256WithRSAEncryption
12:66:63:1a:99:ec:90:bc:bb:8d:4c:41:6e:a5:77:3f:0e:31:
7c:b6:56:c6:f4:0a:ab:71:02:d6:12:1a:88:b3:10:59:bc:c0:
2e:60:63:64:02:c9:53:e9:f2:ab:3e:6f:b7:8f:97:ce:7e:fc:
d7:03:84:28:8f:6e:b4:31:27:17:0d:e9:fe:ec:23:94:63:62:
26:c5:29:48:86:7f:43:69:bb:17:52:ff:a2:e2:24:0e:5c:fe:
fb:73:b6:c9:20:06:28:00:6b:0d:67:09:40:bf:4e:c3:c4:19:
f3:e1:9e:71:4f:45:2d:1a:09:9a:5c:aa:61:ed:11:81:6a:58:
8c:ee:7f:00:5a:62:a0:29:43:64:9d:4a:88:19:2c:d8:9b:69:
91:41:2c:39:86:21:99:b2:95:98:4c:ce:5c:cc:a5:48:8a:b6:
c8:34:4e:ef:89:1d:f8:17:03:a4:67:b6:13:a2:bc:ea:e3:ff:
72:bd:c2:ba:18:70:46:7f:5b:c5:d1:ea:ee:37:23:da:4a:75:
27:dc:e2:2c:80:7a:52:03:18:58:56:88:86:a3:9f:37:16:66:
c5:07:2b:b5:23:82:06:fc:82:c2:7e:cc:10:55:c6:12:b2:39:
e6:9f:84:4f:27:34:93:8d:15:86:b0:ed:d2:71:2e:d2:6c:f7:
b8:a0:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org