Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/cSCkN5F5_LdJeyxAsrewZFDzHyc.roa
File: cSCkN5F5_LdJeyxAsrewZFDzHyc.roa (raw, json)
Hash identifier: L2+oywVoXp8sHKcFQh6U+eQemXdKL6/IGq8s2AY/OS4=
Subject key identifier: 71:20:A4:37:91:79:FC:B7:49:7B:2C:40:B2:B7:B0:64:50:F3:1F:27
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 15
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/cSCkN5F5_LdJeyxAsrewZFDzHyc.roa
Signing time: Wed 18 Aug 2021 07:54:19 +0000
ROA not before: Wed 18 Aug 2021 07:54:19 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 24295
IP address blocks: 122.255.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Aug 18 07:54:19 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=7120A4379179FCB7497B2C40B2B7B06450F31F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:f6:1d:63:1d:51:18:19:81:d7:70:81:f0:
69:1b:9c:af:66:a9:45:f3:24:df:ad:0b:d6:b8:34:
83:45:c7:5b:aa:72:c2:ea:d0:56:e5:34:f4:7f:f1:
ac:f2:0a:ff:e5:ef:20:b6:a8:51:63:df:0b:88:44:
14:f3:1a:dc:4e:c2:63:fa:d2:e2:16:e8:bb:52:2a:
69:a0:d1:f5:22:bf:ca:a2:70:ef:e6:e0:a2:cb:e1:
5f:72:58:d5:74:65:26:74:b1:e1:48:87:f5:2d:6c:
5a:0c:55:5c:44:0f:af:21:fd:cc:b5:f4:77:d9:a7:
d1:19:b1:b3:14:d1:d9:fa:53:72:96:f7:df:51:fa:
e0:46:b6:2c:9f:aa:5b:95:f7:cd:68:05:11:07:d7:
05:0a:8c:56:bc:26:19:a9:6a:2d:8e:4b:fa:b1:4a:
aa:9f:47:3e:63:b1:0a:99:6f:b3:e6:39:ce:fe:7d:
6c:0d:3b:ad:af:57:24:5d:40:e1:9e:c8:9d:b6:ca:
e8:bc:da:b7:a7:4a:89:ec:d3:8e:2b:b8:96:ad:30:
c4:96:e7:f5:dd:62:47:b6:1d:9b:10:78:e2:82:25:
a7:0b:46:e1:35:ce:d0:ef:23:63:23:69:bc:13:c4:
70:b7:ad:f1:5c:c5:b4:a8:f9:d7:ba:1c:5a:92:f9:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:A4:37:91:79:FC:B7:49:7B:2C:40:B2:B7:B0:64:50:F3:1F:27
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/cSCkN5F5_LdJeyxAsrewZFDzHyc.roa
sbgp-ipAddrBlock: critical
IPv4:
122.255.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:fa:3a:30:aa:fc:ca:c6:8d:0f:92:c8:aa:24:40:c2:d5:ca:
28:1a:15:7d:8f:52:25:37:46:2f:f8:22:89:7a:21:38:06:9c:
0c:25:9f:7c:85:d6:da:d5:65:76:b0:7c:96:cb:c9:4e:91:24:
6c:73:3b:f3:d9:e6:5d:ff:26:63:fb:65:9e:6e:59:98:11:cd:
14:df:f9:96:b7:97:5a:28:e8:42:45:f9:07:78:38:92:6c:89:
5c:3c:53:e1:20:d1:21:cb:a6:e4:76:6a:95:f5:48:28:51:10:
41:84:00:fc:39:0a:23:18:4d:5f:09:95:e3:0c:41:63:c9:cf:
1d:6f:b1:51:54:8c:41:ce:e6:57:90:1e:7b:cf:10:1e:f5:b5:
d2:e3:24:cc:bc:4d:6b:38:5e:35:1a:b8:77:b6:58:27:e8:15:
3a:82:01:8f:0e:28:9d:86:ae:b3:7b:5f:ae:cd:96:98:69:eb:
4b:51:1e:b3:f5:4a:da:e3:10:dc:d5:41:2f:11:8d:12:71:08:
51:d4:a8:c2:10:a9:71:82:db:14:f7:a6:0b:74:f0:06:e6:67:
f5:22:6c:2a:9f:1b:1e:8f:f6:b7:ff:34:3d:84:d0:b7:34:f1:
da:74:59:44:76:a7:81:17:2c:5b:42:71:66:91:7b:e1:41:78:
1b:7b:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:28 2025 by rpki-client