Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/0bsfHcOHDCFNZnhoVN_-QB0rF9g.roa
File: 0bsfHcOHDCFNZnhoVN_-QB0rF9g.roa (raw, json)
Hash identifier: 8H2I+75DD5xxdUA7/sfXtl5ej19Wgy+CHUNCqbfr3I8=
Subject key identifier: D1:BB:1F:1D:C3:87:0C:21:4D:66:78:68:54:DF:FE:40:1D:2B:17:D8
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 19
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/0bsfHcOHDCFNZnhoVN_-QB0rF9g.roa
Signing time: Sat 25 Sep 2021 03:52:02 +0000
ROA not before: Sat 25 Sep 2021 03:52:02 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 23816
IP address blocks: 219.100.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Sep 25 03:52:02 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=D1BB1F1DC3870C214D66786854DFFE401D2B17D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:a2:75:a2:6c:57:7e:e3:01:f2:54:28:71:
3b:6d:4d:a9:ae:48:17:d8:58:a5:b1:c6:f2:b6:5f:
25:33:05:18:b0:ac:6b:56:4f:7b:87:20:0f:09:1f:
b9:aa:6e:36:13:a4:81:53:b5:0f:04:0a:68:9f:41:
bc:cf:24:25:d5:54:00:3a:b6:3f:d8:86:c8:0a:65:
a1:a3:7d:d0:c2:e1:f2:fb:a9:8b:25:54:97:24:34:
42:47:84:46:81:96:2e:3b:f4:17:ff:ab:b9:31:78:
ac:06:22:16:9e:da:93:dc:32:ca:bf:b0:0f:14:88:
7e:19:7b:b5:d2:20:b5:06:39:ac:60:04:5b:4c:cc:
57:c6:fb:ca:4d:d5:7d:8a:c7:1a:bc:ac:4e:4f:69:
8c:e8:04:4f:69:f9:b5:c1:cf:94:a5:e1:14:9b:7a:
68:14:14:8a:96:90:f4:0f:df:a0:45:b6:8a:e0:45:
6c:98:b2:df:a0:f3:d8:99:01:2b:c6:8a:d4:f1:24:
8d:53:ad:62:c5:a2:03:ea:15:ad:a9:07:29:24:71:
79:7e:6a:e5:76:bf:08:c9:ed:6b:4b:02:1a:06:f4:
e1:48:98:2a:e2:c5:cb:b5:d4:05:35:0e:83:92:db:
3d:0c:a1:97:fb:e9:01:76:8b:73:d4:9c:3a:c0:74:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:1F:1D:C3:87:0C:21:4D:66:78:68:54:DF:FE:40:1D:2B:17:D8
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/0bsfHcOHDCFNZnhoVN_-QB0rF9g.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.144.0/22
Signature Algorithm: sha256WithRSAEncryption
49:bc:70:7c:d9:73:1e:4b:b6:4f:9f:fd:f3:b1:bf:67:4f:71:
2d:2f:61:69:52:0c:04:b2:77:eb:90:a7:e4:c1:1b:1f:01:5f:
22:7f:d0:d0:4c:68:e5:df:22:c6:70:e9:50:37:3c:b7:85:04:
fd:21:ad:6f:46:45:3d:69:84:3b:6e:4d:5c:37:6f:b8:39:bb:
8b:05:62:55:86:de:42:1a:d8:f6:8a:8c:b5:33:a4:94:55:32:
6f:ec:1e:1b:19:10:1e:a5:40:1e:e8:e2:38:53:8b:2e:6d:51:
b5:23:30:8c:52:68:e3:9a:ae:9b:9e:00:f8:c0:cb:76:5c:31:
5c:99:9f:e3:87:77:27:2b:78:bc:fd:63:8c:82:41:ae:e3:70:
66:9c:68:0c:6b:82:0a:62:9b:b5:29:16:59:13:de:87:17:22:
2d:9f:c6:97:b5:bd:a9:32:1a:78:01:7b:47:93:8e:af:9a:11:
60:89:60:7d:80:93:60:c3:a9:a8:d8:6e:91:4b:db:a0:b7:c4:
3e:d7:c3:1c:f7:2f:e2:4e:ff:d5:dd:6a:06:d3:af:30:d2:be:
f7:26:b9:72:75:86:17:9f:cd:43:d6:64:98:70:b8:f9:5a:88:
b7:5e:b3:d6:95:c3:a1:c5:c3:e4:42:fa:e0:cf:de:09:8e:ce:
e8:dd:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org