Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/LcCLXk8xi7ldj68nKD6LUIF67DU.roa
File: LcCLXk8xi7ldj68nKD6LUIF67DU.roa (raw, json)
Hash identifier: CynO89FKLbDN8Q8fb2V6bslXq913CYk6zxmy1g1ygrI=
Subject key identifier: 2D:C0:8B:5E:4F:31:8B:B9:5D:8F:AF:27:28:3E:8B:50:81:7A:EC:35
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: C4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LcCLXk8xi7ldj68nKD6LUIF67DU.roa
Signing time: Fri 01 Apr 2022 01:28:14 +0000
ROA not before: Fri 01 Apr 2022 01:28:14 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 220.104.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:14 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=2DC08B5E4F318BB95D8FAF27283E8B50817AEC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:b4:5d:9d:61:ce:b6:a9:09:b6:0d:54:cd:
5c:77:a9:88:a7:e0:26:b0:79:f1:33:5a:04:f4:a8:
4b:99:b0:70:5c:d6:e9:41:1d:54:ce:b6:23:02:df:
d4:fb:75:16:c7:01:d4:7f:2a:c6:ff:15:22:5b:d3:
ca:8e:25:92:83:5f:ff:ee:3a:fa:61:4a:d3:09:20:
71:01:b9:62:c9:f9:db:c4:ce:a1:4e:15:5e:22:f1:
38:f4:6a:0b:df:c8:71:00:18:12:50:1c:14:0b:af:
e9:27:ef:10:e9:62:6e:30:11:bf:1b:90:1a:9d:ee:
7f:52:e5:ca:06:b5:cb:db:81:4d:15:d3:e0:10:d5:
71:9c:ac:7a:c6:92:9c:94:1b:1c:fd:73:ec:32:45:
72:d3:75:27:ff:42:28:d9:75:d7:57:86:12:ed:38:
60:92:0f:f2:08:92:28:2f:71:76:aa:c9:f5:77:6d:
a5:e3:9a:72:db:dc:30:d7:e5:fa:a6:cc:e3:09:2c:
99:42:ed:f2:2f:9e:b5:81:89:b0:17:21:5a:64:0c:
62:1e:43:18:47:89:15:e5:f4:4c:b2:94:a3:ae:aa:
e7:f2:e8:d3:9e:af:7b:52:28:9d:7d:fe:57:fb:0c:
c4:04:c7:86:49:41:ed:4b:26:eb:c8:b1:6c:45:a2:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:8B:5E:4F:31:8B:B9:5D:8F:AF:27:28:3E:8B:50:81:7A:EC:35
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/LcCLXk8xi7ldj68nKD6LUIF67DU.roa
sbgp-ipAddrBlock: critical
IPv4:
220.104.0.0/13
Signature Algorithm: sha256WithRSAEncryption
ab:16:1a:68:50:36:4b:50:a5:b5:8e:d0:2f:1b:58:6a:39:80:
5d:1a:e8:c2:c1:cf:4f:d8:27:d6:1f:2d:5c:78:69:70:9f:4c:
9c:27:bb:8a:df:db:5d:fd:a3:03:d8:88:ea:22:de:4f:54:17:
f1:96:6e:aa:ee:53:c5:6f:f7:07:7e:7b:42:b2:34:30:2c:3b:
64:80:96:53:35:87:1a:5a:d0:ff:97:b3:0e:46:ae:80:c1:b9:
a5:a2:aa:5c:71:66:06:11:e0:fa:1a:36:4a:4c:85:fe:ef:4a:
23:e2:74:5b:d8:e5:6e:ef:6b:bf:a5:1a:26:6f:97:49:48:95:
c3:d8:0c:af:4b:e1:f6:6a:ef:50:b7:e9:42:c9:d7:d6:ab:3b:
29:2a:6c:f3:04:c0:a2:34:8a:32:51:c7:26:cb:5c:60:3a:80:
86:10:bf:8e:a8:16:0b:43:1e:1a:57:be:0e:d8:71:33:8f:70:
75:22:40:62:85:fb:9e:c2:55:45:28:b3:86:f4:7f:de:37:f6:
07:ef:f3:dd:b7:4d:44:cb:05:ae:f7:4e:83:19:eb:3e:c2:b1:
c3:1c:3b:f3:be:f0:a8:c1:97:ad:d7:07:91:b4:8b:30:28:d6:
8f:3d:a0:e9:67:91:b2:52:7f:92:a4:15:c6:1c:1c:16:44:88:
85:c6:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org