Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aZXDUk2XlHNGPR1fi06_Fo0o-A8.roa
File: aZXDUk2XlHNGPR1fi06_Fo0o-A8.roa (raw, json)
Hash identifier: 6vj5DouXfZvHsqLhMTXQeKxUruEAjX9KSD6xmgIWvc4=
Subject key identifier: 69:95:C3:52:4D:97:94:73:46:3D:1D:5F:8B:4E:BF:16:8D:28:F8:0F
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0110
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aZXDUk2XlHNGPR1fi06_Fo0o-A8.roa
Signing time: Sat 01 Jan 2022 01:31:20 +0000
ROA not before: Sat 01 Jan 2022 01:31:20 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:20 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=6995C3524D979473463D1D5F8B4EBF168D28F80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:a2:b5:ff:2c:2f:4b:c2:31:e2:e5:bd:34:
a8:b6:57:65:37:b2:4c:64:5d:66:81:9d:33:dd:d9:
d9:ac:c5:f7:0a:6f:90:0e:08:15:51:1f:3f:f2:ef:
78:55:dd:a8:ac:ac:00:02:30:a7:8d:8b:b3:af:1a:
58:14:75:a1:70:63:37:0b:77:e7:a1:a6:97:7a:9d:
bd:52:12:f3:92:3d:cd:ec:87:41:b1:9b:75:d7:52:
ab:75:c8:38:a3:c0:df:9e:9f:20:79:5a:25:24:93:
9b:66:be:6d:a8:1b:42:b5:39:35:d1:e7:82:11:91:
45:bc:a5:f9:b3:bb:f9:8a:58:18:14:7a:95:2b:29:
4a:fa:fd:b2:45:cb:2b:8f:f5:e8:e8:f5:fa:23:3e:
6c:99:a2:48:66:b2:9a:4c:8e:4f:fc:be:0d:f1:ab:
76:be:0c:77:dd:c7:5d:38:26:9a:39:b5:e7:c7:a5:
6c:5f:97:4d:e1:ab:15:55:42:c1:87:de:d5:72:ad:
69:05:fe:d3:a1:a3:ef:fc:53:fc:4f:b1:b8:07:e2:
74:76:83:64:94:ea:e5:b5:ac:89:9d:27:7c:8a:12:
31:06:ed:ae:3c:9f:4a:6e:3a:3a:ea:bb:20:48:55:
7a:04:85:ea:91:38:5d:ab:f1:41:40:ae:e7:db:9f:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:C3:52:4D:97:94:73:46:3D:1D:5F:8B:4E:BF:16:8D:28:F8:0F
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aZXDUk2XlHNGPR1fi06_Fo0o-A8.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.228.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:0c:b0:3d:2c:61:bf:37:c2:8a:09:84:d1:a7:a4:ea:85:79:
37:37:da:c6:8f:aa:59:76:1a:79:fb:b5:47:42:09:a0:95:40:
ca:db:1c:96:6c:e8:f4:16:5f:ac:b5:c1:7b:73:e5:57:ae:29:
f1:e5:de:f9:44:11:4a:f0:b9:b6:1b:ae:60:0a:2b:63:43:65:
db:42:ac:b2:dc:de:92:b7:84:53:61:a5:58:ae:14:c1:27:b2:
2a:7a:8b:97:47:d5:0b:3b:94:04:e0:2a:ed:60:71:06:85:e0:
8b:c9:cd:c3:2c:0b:e7:d8:f0:cd:a4:bc:77:39:9a:f6:e9:90:
30:43:e0:c4:7a:00:11:19:89:01:97:f8:13:e4:7e:3a:8b:c0:
34:4d:5f:1c:38:24:f5:9f:48:3d:07:4f:13:a4:80:f4:f0:ef:
fc:4d:b6:20:49:99:3a:5b:67:f8:d0:20:6d:8c:28:4a:38:65:
9f:88:15:de:5a:50:ca:bf:a7:9a:18:a7:3d:18:f6:8e:17:0b:
9d:02:ef:00:d0:77:af:7a:b8:4b:42:5a:2e:56:24:16:65:40:
02:21:34:18:34:0f:24:d0:f0:1d:60:48:f8:b0:84:b0:5a:0b:
54:69:c3:d1:32:9e:22:db:3e:f1:46:f7:a3:0b:07:00:0e:7e:
fc:9e:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org