Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Tyk8nBu25JWWw6aQU1jpHspqLRo.roa
File: Tyk8nBu25JWWw6aQU1jpHspqLRo.roa (raw, json)
Hash identifier: Std8xmnqgD0b+SGkYx9pmoRl3N27C67yAKDoAkLSZZg=
Subject key identifier: 4F:29:3C:9C:1B:B6:E4:95:96:C3:A6:90:53:58:E9:1E:CA:6A:2D:1A
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: BB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Tyk8nBu25JWWw6aQU1jpHspqLRo.roa
Signing time: Fri 01 Apr 2022 01:28:12 +0000
ROA not before: Fri 01 Apr 2022 01:28:12 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 153.240.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:12 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=4F293C9C1BB6E49596C3A6905358E91ECA6A2D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:0f:f3:52:68:38:32:c8:74:5f:00:85:d4:
14:ae:57:90:b3:87:63:8f:07:61:e9:ab:c9:63:07:
41:ca:27:bd:2b:0e:7b:91:6e:c5:b3:ad:4f:93:b3:
5f:bd:ff:89:e7:a6:a7:ae:3c:81:45:94:38:72:e6:
02:84:81:25:1d:60:88:0e:82:98:c1:37:40:d0:26:
a1:b0:26:09:4a:b0:ee:b6:2e:38:9b:54:14:56:db:
83:5a:a0:2d:f9:ea:b6:b1:47:57:36:f3:e8:a4:33:
81:67:c6:63:a8:22:3c:50:9f:d0:43:cf:77:a1:5c:
04:94:4a:85:8f:4e:91:05:5d:a3:de:0e:ab:71:26:
e1:d8:96:ad:04:57:bc:fb:b2:28:90:b0:57:42:9c:
47:16:8f:ce:13:1e:0c:08:e5:ad:eb:31:ba:f6:f7:
a1:db:c2:9a:b7:06:80:58:b3:d4:12:4b:d2:12:87:
56:5e:6c:ad:71:a9:a0:7a:d9:3e:aa:cd:b8:ed:76:
18:3b:9b:ce:4e:f7:98:a9:84:ca:98:61:4a:e6:c8:
c3:ed:ca:e1:b0:a9:79:64:28:61:9b:d6:da:bd:5d:
4c:d0:ab:45:42:44:0e:6d:c9:13:f4:ff:b3:17:37:
8d:71:50:6e:09:67:cd:a8:bd:92:06:70:29:8e:00:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:3C:9C:1B:B6:E4:95:96:C3:A6:90:53:58:E9:1E:CA:6A:2D:1A
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Tyk8nBu25JWWw6aQU1jpHspqLRo.roa
sbgp-ipAddrBlock: critical
IPv4:
153.240.0.0/13
Signature Algorithm: sha256WithRSAEncryption
59:36:72:71:d0:6a:17:c2:01:00:87:f6:84:f4:4a:30:ac:58:
51:79:72:08:10:d4:e1:d0:8e:06:cc:06:77:a9:33:5a:17:dc:
18:e8:c9:96:c1:3f:73:d8:2f:9b:8c:a5:e3:1c:ae:57:dc:a9:
c9:8e:62:0b:50:b4:d4:b9:03:e4:58:33:29:bc:29:c9:34:be:
9a:a9:78:5d:71:31:68:69:1f:01:73:19:7e:b2:1d:47:71:68:
d5:e8:4e:c2:df:49:a5:eb:d8:81:ad:66:85:67:ad:dc:6a:eb:
e5:2f:c6:80:fc:aa:7a:f9:fd:9f:c5:cb:ec:4a:47:61:e3:25:
35:e4:f1:ae:ca:37:9b:fb:29:bd:89:df:39:07:d5:8b:8b:b2:
e8:64:ea:ab:04:d9:75:65:ca:c9:c2:b4:54:fe:22:bf:d1:73:
a0:3b:af:6c:08:bf:e7:fa:98:4c:b2:2c:e1:70:a8:38:0e:83:
4c:74:f3:80:7c:53:2c:87:cf:f5:10:d2:8b:6c:4f:3e:34:3c:
ae:cb:66:1b:30:2a:6d:d9:e0:ee:09:7f:1f:64:ee:42:6d:87:
dc:e6:05:0a:8b:32:2d:4a:90:95:b1:3d:d7:6d:da:7b:09:c9:
cd:55:30:be:76:de:a8:8a:13:ba:8c:a7:6a:fd:d6:9e:44:17:
e4:2f:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org