Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/-kHt8Ld1jSABqOBtOe-PjAxVYAw.roa
File: -kHt8Ld1jSABqOBtOe-PjAxVYAw.roa (raw, json)
Hash identifier: Y7p0aRTwlbW2mFA0mTwt8CW9I3qSjZ2xQE6qvLNHIG8=
Subject key identifier: FA:41:ED:F0:B7:75:8D:20:01:A8:E0:6D:39:EF:8F:8C:0C:55:60:0C
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 2F
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-kHt8Ld1jSABqOBtOe-PjAxVYAw.roa
Signing time: Tue 01 Mar 2022 08:33:59 +0000
ROA not before: Tue 01 Mar 2022 08:33:59 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 219.113.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:59 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=FA41EDF0B7758D2001A8E06D39EF8F8C0C55600C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:33:97:81:1f:6d:92:67:1b:77:8e:37:f8:
fd:41:cc:18:78:87:a3:68:92:d3:e3:b3:42:6d:46:
d3:e0:02:77:73:ce:ba:82:0e:a6:b6:5d:4e:43:96:
4f:be:7f:2d:de:e2:11:e7:4c:15:d6:64:32:98:d0:
18:84:e6:db:b5:4b:6f:68:be:89:4d:70:1a:87:2e:
c3:af:ff:f2:12:b5:e4:c7:c4:07:fb:61:00:ad:b6:
7f:14:ca:7e:1e:5a:de:1b:4a:d3:f9:d0:5e:25:c7:
aa:9a:17:11:d8:ea:a5:ee:df:3a:35:82:2e:1a:ef:
ac:28:96:37:f2:0c:af:c1:cc:8f:ee:14:6f:22:a3:
6d:c0:52:18:33:29:d5:58:b1:52:da:85:13:29:60:
4c:66:2d:1e:0c:99:14:7a:2c:6f:1b:eb:21:38:29:
c9:08:6c:62:f9:6a:fc:35:e0:04:92:c4:03:c8:de:
bf:2c:99:eb:49:4e:9d:a1:ca:0c:30:d1:eb:be:42:
39:8e:36:8b:c8:0a:ad:77:b8:d1:4c:8b:2c:81:29:
68:de:26:a6:62:50:64:35:23:e7:96:53:b0:f3:1d:
74:66:a1:0b:12:70:32:2f:78:65:ff:7d:66:9b:55:
c0:d2:e2:df:79:5f:7c:d9:a6:5b:53:c9:37:ed:6d:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:41:ED:F0:B7:75:8D:20:01:A8:E0:6D:39:EF:8F:8C:0C:55:60:0C
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-kHt8Ld1jSABqOBtOe-PjAxVYAw.roa
sbgp-ipAddrBlock: critical
IPv4:
219.113.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:17:e7:cf:94:a4:a1:fe:07:91:bc:0a:0f:dd:93:63:51:b5:
25:71:d9:58:59:02:5f:1c:3b:23:11:f3:ea:21:8c:8e:7d:3c:
af:0f:43:35:68:34:2e:48:66:8a:fa:dc:b6:40:61:d2:1f:e1:
e3:64:d4:f4:48:af:91:6f:a1:aa:38:4a:a0:37:a9:bd:a2:c4:
d6:88:34:65:89:18:b6:57:8b:68:33:dd:cd:02:3b:5f:f9:2f:
23:81:da:c2:67:14:a9:d1:e2:cd:ba:a2:e5:3a:f1:87:cd:0b:
c9:03:9c:12:3c:5e:2f:6c:e4:48:4b:27:93:18:75:de:50:73:
0b:b6:7d:a4:c9:db:0c:09:dc:0c:7d:da:9f:9f:e0:ac:3a:9d:
e4:7f:35:18:0d:5e:eb:86:08:3c:28:33:8d:07:03:22:2c:ec:
59:86:98:5a:8e:46:12:02:4e:f5:34:97:72:0a:1d:6e:5f:31:
e7:79:89:73:58:0f:9e:2e:4e:53:f3:26:c5:1c:26:b0:ce:94:
20:68:e6:50:5a:3d:d8:27:ca:99:5b:b0:a6:5a:7f:30:a3:46:
b6:35:89:7b:e7:c0:60:f6:60:f9:87:9f:ee:04:1f:67:e5:f5:
70:8f:cf:e2:ca:c9:00:1f:a5:c9:15:3d:6b:05:90:43:ed:b8:
69:3a:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org