Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/W10zUMplFJJuHjeN23h7oNjLP6I.roa
File: W10zUMplFJJuHjeN23h7oNjLP6I.roa (raw, json)
Hash identifier: hxLK6g/DBt/b+n3WNgPbhd0gWS+MPe0j2BSJ5SOVxko=
Subject key identifier: 5B:5D:33:50:CA:65:14:92:6E:1E:37:8D:DB:78:7B:A0:D8:CB:3F:A2
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0185
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/W10zUMplFJJuHjeN23h7oNjLP6I.roa
Signing time: Thu 01 Dec 2022 01:29:28 +0000
ROA not before: Thu 01 Dec 2022 01:29:28 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:29:28 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=5B5D3350CA6514926E1E378DDB787BA0D8CB3FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:26:71:4f:1a:bb:c9:97:46:c5:01:e3:c8:
9b:89:02:16:ae:ed:26:e0:6c:d7:5d:ea:0f:db:50:
d6:ca:72:ce:a4:77:ba:4e:c7:34:ae:1e:e1:dd:07:
3f:a8:93:bf:33:6b:67:af:81:45:b6:19:43:8d:6c:
13:9f:b6:7e:0c:e1:53:d6:63:7f:a1:3b:ab:60:eb:
97:56:c6:46:2d:d5:4b:69:62:d1:50:05:96:dc:96:
c9:f5:e8:5f:36:8e:33:79:be:4f:c7:7d:a9:65:73:
a4:58:4c:08:1f:45:66:47:2c:2e:02:ba:6c:c6:a1:
1c:a3:18:8b:95:ca:44:ab:04:c8:14:15:5f:e7:c8:
95:60:5c:ce:8e:15:2d:c9:c3:e1:89:f8:52:c4:04:
64:48:62:d0:e3:00:45:57:ec:87:b7:b6:a2:79:78:
9b:ec:d5:31:12:20:d5:83:30:aa:73:11:64:fe:7f:
a9:5e:c7:ab:29:1e:b6:05:e0:8d:e1:d4:4c:b8:c4:
3a:c4:dd:9d:e9:c3:83:d7:08:51:1b:9c:8d:2b:15:
a2:14:58:93:22:28:94:90:4b:2e:53:a7:fe:92:c7:
20:1c:c3:d2:5a:d3:bc:ef:dd:b9:5d:72:37:ac:7f:
f3:d0:c4:27:9e:36:65:c7:74:01:25:cc:69:29:cc:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:33:50:CA:65:14:92:6E:1E:37:8D:DB:78:7B:A0:D8:CB:3F:A2
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/W10zUMplFJJuHjeN23h7oNjLP6I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1f:e2:92:32:e3:2c:26:35:21:f9:ad:8b:d5:a3:20:10:ff:
31:62:a7:7a:74:1b:58:28:92:12:8c:92:4f:2b:69:d1:c3:84:
5c:a6:4c:14:22:aa:2a:89:f6:72:8c:d1:4d:d3:d6:6e:db:46:
5e:76:95:96:5c:ab:c6:4b:9f:b8:85:47:70:71:1f:fa:49:d1:
79:81:07:74:24:42:74:d2:ff:7e:7c:d5:0f:58:e8:fb:34:d1:
74:2f:76:8d:fe:da:cc:9d:e7:f3:16:55:ad:8e:e0:ad:49:56:
0b:99:00:24:a8:a8:93:21:cb:8c:33:4d:7a:01:1c:1d:aa:a7:
8c:69:81:73:38:3b:46:2e:e1:26:77:02:21:f0:0a:5f:40:5c:
9d:7a:36:c7:ac:07:7f:1a:95:5c:02:1d:37:30:8c:9b:60:39:
c4:ee:db:a7:f5:af:0f:cc:23:b6:89:53:c0:cf:8f:03:85:b1:
fe:51:d7:f1:83:76:a9:93:ce:70:ef:8e:88:b5:aa:04:fe:67:
53:50:e2:c0:28:21:40:05:d6:25:6a:f3:df:b7:d9:86:54:3c:
4d:56:79:7b:46:a1:11:02:bd:d9:86:d5:7e:af:5d:9e:3a:08:
08:7a:21:aa:65:ef:78:62:39:db:27:03:5b:26:fd:18:d1:a9:
4c:13:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org