Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/BCZSWf2ol0ZEg3z9Fk3p837kRLc.roa
File: BCZSWf2ol0ZEg3z9Fk3p837kRLc.roa (raw, json)
Hash identifier: 3tQJMndRJVw98odELUfcHZJeewWljyL2tXVyAIlVNb0=
Subject key identifier: 04:26:52:59:FD:A8:97:46:44:83:7C:FD:16:4D:E9:F3:7E:E4:44:B7
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: CC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/BCZSWf2ol0ZEg3z9Fk3p837kRLc.roa
Signing time: Fri 01 Apr 2022 01:28:16 +0000
ROA not before: Fri 01 Apr 2022 01:28:16 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 210.248.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:16 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=04265259FDA8974644837CFD164DE9F37EE444B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:d9:a1:23:fd:f2:8d:99:75:f3:5e:7b:1d:
48:ef:90:62:2f:42:cf:b1:9f:15:08:d3:8b:e6:10:
6e:9d:46:7e:6a:37:45:d8:2e:d9:f9:ed:ce:fb:f5:
6c:75:85:e6:f6:dc:07:6f:c7:ea:88:8f:e6:66:60:
c0:ec:d4:44:7a:29:55:d9:44:15:f8:49:cd:2c:d2:
d4:1c:11:f9:37:40:ad:6e:64:de:9a:75:7d:70:3f:
57:c6:36:22:1f:94:f7:5d:ec:5c:be:68:c0:77:5a:
82:96:bb:4e:b9:22:aa:6c:31:a5:b6:29:f8:88:3d:
c3:e9:8c:c7:e7:fc:1f:f9:4f:b0:0d:20:f5:81:5f:
65:32:88:7f:98:48:f8:c7:af:ac:f7:f4:c2:e7:26:
17:46:84:eb:27:9b:b3:52:f2:58:89:d8:48:de:c4:
04:c1:25:12:0b:a4:ae:b5:e8:1f:df:c8:b3:57:84:
62:34:92:00:e1:3c:b3:03:ae:38:80:bf:0d:8f:b6:
a0:30:0c:ab:0c:b8:5c:d7:83:64:72:f6:c1:66:fe:
b5:cf:00:38:28:9c:03:33:77:01:4e:eb:95:5b:23:
17:93:7f:0c:d0:e4:f1:7e:0c:87:17:0e:05:ac:cd:
cf:95:c7:1f:f7:97:7e:a5:c0:0e:a7:9d:95:e7:99:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:26:52:59:FD:A8:97:46:44:83:7C:FD:16:4D:E9:F3:7E:E4:44:B7
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/BCZSWf2ol0ZEg3z9Fk3p837kRLc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:55:f3:51:86:a9:4e:b3:f7:02:53:8e:26:f6:bd:01:aa:a3:
11:20:12:d7:12:da:11:cb:b9:cb:fe:55:d7:a4:56:72:36:c2:
30:22:55:07:99:9e:81:b8:6d:b8:00:d4:4c:e9:f7:a9:9a:d4:
dc:6f:27:19:6e:eb:ea:2e:a4:d0:f2:ec:6e:0b:5c:f9:98:a7:
eb:81:2e:10:04:74:13:06:96:19:dd:11:af:19:e8:09:94:1e:
2d:8a:a0:48:37:ba:0e:5c:61:2c:65:34:5c:fb:aa:d8:e2:d0:
ae:f3:17:ab:11:cf:11:6f:3f:c5:2c:fa:fb:6d:00:03:1c:63:
87:61:85:76:ae:48:f9:f8:9e:e1:f9:bb:bf:44:76:5e:a4:6d:
41:8e:b1:b6:97:30:57:e0:d4:05:82:f3:08:3c:f8:bf:56:ad:
42:79:da:98:a8:ab:28:b5:92:39:2d:78:d8:a1:ac:2c:8d:0c:
b9:87:9c:05:ec:7a:bd:07:7e:07:27:53:1e:1e:40:9a:70:0e:
f5:87:f5:f4:ea:ec:44:5a:a0:98:ab:50:a8:67:c1:96:ee:d0:
16:5d:a6:f3:51:99:79:ab:38:c5:c2:bd:96:6f:8c:ef:ba:88:
11:0f:bc:bf:1a:ab:5e:d8:1a:ed:8a:06:cb:8f:c8:98:c2:81:
11:27:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org