Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VSwqZSyRLsF-SNP6A84aXgjFSKY.roa
File: VSwqZSyRLsF-SNP6A84aXgjFSKY.roa (raw, json)
Hash identifier: 4BsqVErgHSpahzzgyaXKlVYAEXJRYehUIWbtZUhSDXw=
Subject key identifier: 55:2C:2A:65:2C:91:2E:C1:7E:48:D3:FA:03:CE:1A:5E:08:C5:48:A6
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0112
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VSwqZSyRLsF-SNP6A84aXgjFSKY.roa
Signing time: Sat 01 Jan 2022 01:31:21 +0000
ROA not before: Sat 01 Jan 2022 01:31:21 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 210.224.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:21 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=552C2A652C912EC17E48D3FA03CE1A5E08C548A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:f4:b5:76:91:1c:b7:54:39:a4:14:d2:3f:
bf:4d:c5:9e:06:4e:45:a9:0c:12:f9:94:a9:c1:8a:
af:08:b6:a9:87:b8:5a:90:89:1d:fd:6f:f0:be:9e:
ee:08:c7:21:89:72:c1:5e:a9:45:c8:58:5b:bd:5e:
ff:14:b0:22:5c:f9:e3:84:df:52:61:39:e0:d0:3d:
69:5f:1a:63:a0:a1:b5:b7:89:02:61:1f:0b:e2:01:
0e:c4:df:33:13:3e:fd:5a:a4:2f:6c:aa:6b:9b:f5:
81:ad:09:c5:5e:8e:51:09:08:b0:59:30:ab:b8:32:
e2:72:d2:3e:13:b5:2a:a4:c5:e1:94:8e:e9:ae:23:
6f:db:a2:72:c5:0d:92:81:fc:62:11:5e:c2:20:c5:
04:91:1f:ab:50:2e:75:ae:0b:d9:cb:d4:b0:06:f7:
66:c8:1e:ee:78:b9:04:02:8e:e7:e7:cc:78:ef:2e:
34:4a:c9:b0:ec:e5:88:1d:06:e5:11:73:5f:0a:86:
19:45:a2:f3:92:7b:d8:80:3c:54:69:e4:7f:ab:5f:
01:f9:52:b9:a5:06:7e:c4:20:25:29:b5:e1:bc:05:
e8:af:e1:c6:d6:2e:10:48:f1:e2:f8:26:f9:f2:72:
06:ec:8f:5d:e7:09:3e:19:2a:84:8f:e1:10:cf:c7:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:2A:65:2C:91:2E:C1:7E:48:D3:FA:03:CE:1A:5E:08:C5:48:A6
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VSwqZSyRLsF-SNP6A84aXgjFSKY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.224.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:b8:57:e1:4c:e2:06:1b:f6:d8:c2:c3:85:8d:7f:1f:ce:31:
3e:bc:b8:54:54:bc:9d:a5:ce:90:98:90:5a:38:fd:1c:3e:e7:
da:22:24:25:fc:94:b1:11:6c:ba:b3:c8:6d:7f:37:40:5f:c6:
b9:83:13:c2:9a:44:8e:74:21:0e:f5:c6:84:0d:1e:61:a4:ae:
89:2e:0d:cf:1d:c2:ad:b8:8f:28:94:3e:58:ce:a9:a7:2e:1d:
3e:22:4e:fe:95:17:ca:e1:46:0c:f0:5e:0b:1e:c5:b6:a3:df:
8c:e2:59:01:80:5f:da:37:f8:97:19:e5:4a:d1:0b:1e:d6:88:
c6:8a:32:93:29:c1:df:a6:ee:ee:66:72:bb:0b:ae:97:45:ef:
0f:44:57:0e:33:32:34:24:87:9e:8b:60:28:63:e6:b0:39:ee:
3a:f9:3b:28:5e:78:71:41:1a:ba:2a:e2:c5:58:c1:f6:36:32:
ab:44:f5:a0:9d:f7:cc:ab:6d:16:40:0b:01:1a:83:fd:2d:a8:
b7:08:65:5d:13:29:9a:43:33:56:ad:bf:d0:b6:41:61:71:c9:
c3:cf:42:ed:6a:7d:84:86:59:a6:46:d0:0b:58:83:c7:a0:5d:
6a:75:40:4d:e5:b6:1b:48:53:06:90:b6:7d:5c:d7:95:b2:32:
1f:5e:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org