Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0TPu154YAZXkf1PoGk2tdp7YjnY.roa
File: 0TPu154YAZXkf1PoGk2tdp7YjnY.roa (raw, json)
Hash identifier: aGWHm12Ul8UtmL+fQk3hJF2zF7bWPHbC7L/JwfO48po=
Subject key identifier: D1:33:EE:D7:9E:18:01:95:E4:7F:53:E8:1A:4D:AD:76:9E:D8:8E:76
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: CA
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0TPu154YAZXkf1PoGk2tdp7YjnY.roa
Signing time: Fri 01 Apr 2022 01:28:16 +0000
ROA not before: Fri 01 Apr 2022 01:28:16 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 122.1.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:16 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=D133EED79E180195E47F53E81A4DAD769ED88E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:8a:50:03:2d:6a:e6:00:80:65:62:d2:b1:
68:2a:5f:27:35:d6:77:2e:10:59:19:b2:62:a4:9c:
6b:d4:17:1b:c8:cf:91:77:0e:9b:1c:9e:db:1a:73:
bb:39:8e:06:05:48:10:c0:e3:d0:ea:de:7a:a8:19:
f7:73:66:33:71:b4:b3:29:9d:49:31:d7:4a:c5:8b:
a5:62:70:33:4b:7b:c2:fb:c9:b5:64:77:09:17:11:
dd:0c:20:a8:2a:e8:fb:de:b3:23:28:b7:1d:1b:0d:
09:65:9f:8f:79:23:2a:19:25:82:11:62:d0:32:aa:
83:b8:79:4d:a3:83:c1:96:65:2b:29:5f:1e:f2:42:
15:f7:6f:cd:11:91:fc:41:09:4c:d9:77:da:88:d4:
8f:25:20:30:c0:2b:10:d0:70:98:85:28:5e:86:fd:
87:fb:71:2a:a8:7e:bd:b7:e9:29:4d:7d:81:7c:b4:
07:7b:bb:54:fe:97:0e:ba:a4:ed:52:73:f8:27:d2:
f2:df:2a:9c:97:fa:1e:ca:7e:7b:30:76:30:65:b6:
d3:54:7a:0e:e9:3d:d9:c0:30:ef:a6:ff:83:41:71:
e6:d1:56:5e:c8:39:02:fe:43:0f:96:22:0c:94:ba:
44:46:3c:b0:95:d4:e7:ec:98:4c:30:4f:76:83:8e:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:33:EE:D7:9E:18:01:95:E4:7F:53:E8:1A:4D:AD:76:9E:D8:8E:76
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0TPu154YAZXkf1PoGk2tdp7YjnY.roa
sbgp-ipAddrBlock: critical
IPv4:
122.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:b6:37:9a:97:81:91:63:00:f0:98:5a:1a:32:08:2b:ae:93:
28:7c:47:82:c5:3e:d6:67:a5:17:89:00:15:db:27:42:70:be:
3d:4b:78:c9:08:d7:64:6c:5d:70:22:c0:2a:1d:eb:c0:a7:e5:
b2:93:80:c2:bb:0f:78:9e:2b:fc:d9:c8:bf:ea:6e:47:7a:6c:
61:4b:cc:74:46:26:18:0b:4b:a4:b7:b1:91:23:c2:59:09:32:
ad:b1:54:23:d3:82:83:7c:07:cf:df:4d:55:89:d2:54:cd:cb:
11:cc:ac:1e:e9:41:4e:4a:a7:16:f5:64:62:4f:11:a9:2d:79:
eb:57:99:dc:64:d7:4f:b1:93:cf:4b:a0:8b:ea:34:07:0c:6e:
10:6e:fe:20:95:68:a5:42:aa:bc:b8:fa:a7:52:85:d7:99:08:
23:90:72:ee:07:20:8b:5b:78:3f:e0:b4:b4:1e:0b:f4:59:29:
a4:cf:51:01:54:7d:f3:09:fd:66:b3:2d:d0:a3:23:81:c6:2e:
8f:2c:42:8d:3b:75:7e:4d:e0:8b:ad:7f:e0:e2:e9:04:85:28:
cb:9b:ec:d1:2d:d5:1b:5c:6e:b2:56:6a:4c:41:70:b9:c4:14:
7e:c5:01:aa:9c:85:da:dc:33:ce:65:19:5d:ab:65:76:99:90:
77:06:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org