Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/37LnOO1ct9ZyYdZUK63untapF6w.roa
File: 37LnOO1ct9ZyYdZUK63untapF6w.roa (raw, json)
Hash identifier: choN6/pDB13rvNtO7cLIuYaFTjlYNTjvKyFjzVKCVoM=
Subject key identifier: DF:B2:E7:38:ED:5C:B7:D6:72:61:D6:54:2B:AD:EE:9E:D6:A9:17:AC
Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Certificate serial: 07
Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/37LnOO1ct9ZyYdZUK63untapF6w.roa
Signing time: Tue 01 Feb 2022 10:11:49 +0000
ROA not before: Tue 01 Feb 2022 10:11:49 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 9351
IP address blocks: 157.70.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC
Validity
Not Before: Feb 1 10:11:49 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=DFB2E738ED5CB7D67261D6542BADEE9ED6A917AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:be:eb:18:d3:62:9c:a8:15:54:32:ea:cc:
e1:26:ae:f5:2b:6f:b5:c3:ea:0c:c1:69:17:41:0e:
ee:b7:6b:df:51:a3:7b:2b:38:96:85:0a:8c:ae:b9:
69:c8:61:00:ea:be:e8:42:c9:37:0b:fe:4b:36:bb:
27:c9:f4:d9:db:f2:1a:5d:1f:37:ea:20:c2:95:46:
ee:3c:78:1e:ac:00:ba:4f:bd:3b:9f:9d:ee:cd:96:
7e:a5:ed:25:70:4f:6a:e4:83:b1:f9:79:38:d9:ac:
8b:c4:d3:46:b2:0d:de:50:57:bb:3f:5f:a0:dd:7e:
1e:98:e7:e7:aa:0c:d4:e4:af:54:e9:80:3a:86:45:
2f:65:e8:b4:91:01:2c:bb:e6:cc:d4:ca:d6:27:74:
6f:41:0b:bf:74:08:2e:41:6d:7f:04:e7:20:c2:1e:
95:7f:87:7e:34:c0:cb:d8:15:ce:2f:e9:d8:0f:5a:
6c:d6:63:f6:98:09:1a:6f:01:bd:47:51:0d:e0:06:
f7:79:86:e5:26:86:83:e4:d0:ea:3d:b3:ed:3d:02:
1e:5f:ba:89:5b:bd:5f:a9:d2:7a:55:1c:ec:b2:e9:
46:d5:a3:f7:c6:47:ad:6a:9f:ce:70:43:dc:95:42:
42:b3:2d:53:4f:51:9f:2c:ee:5a:dc:92:b8:a6:78:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:E7:38:ED:5C:B7:D6:72:61:D6:54:2B:AD:EE:9E:D6:A9:17:AC
X509v3 Authority Key Identifier:
keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/37LnOO1ct9ZyYdZUK63untapF6w.roa
sbgp-ipAddrBlock: critical
IPv4:
157.70.192.0/20
Signature Algorithm: sha256WithRSAEncryption
24:42:3d:c6:70:ab:e5:5d:d8:47:2f:b4:cf:99:18:0d:94:f3:
94:bb:e0:67:b8:47:29:ee:8b:ea:7a:7a:c4:05:68:37:b9:28:
d4:e0:80:90:92:b4:53:1b:b0:96:c5:4c:32:71:38:bd:26:4d:
41:69:85:1b:76:a0:53:27:b8:79:37:e6:cd:9b:38:87:b2:c5:
3c:39:56:74:d8:c9:c0:7e:14:8d:ea:88:e6:be:89:31:27:b5:
02:7b:03:cd:a0:18:e2:f3:a1:74:c5:32:cd:62:95:ac:c3:63:
75:b5:f6:ef:11:ed:07:e3:17:e2:e9:8e:fd:91:66:d2:7b:db:
dc:b9:b2:fa:dc:c7:68:e4:b9:81:f8:0f:24:19:02:55:76:86:
ab:09:4e:12:09:74:4a:ac:1c:f9:a2:a1:bb:64:20:bf:bb:3a:
f4:78:44:cb:82:6a:02:ce:11:85:f8:06:28:2f:5a:25:75:a3:
11:4b:ec:0b:44:00:8d:16:a5:28:77:61:a7:b4:3a:de:5e:a9:
c6:58:2f:f0:85:e7:2f:e5:88:6f:a2:55:db:e0:10:a5:02:2b:
a9:30:08:1f:9a:d8:64:e8:36:0d:f9:b6:fe:a6:24:aa:31:5d:
c9:83:c8:7b:0e:3f:c8:c3:a4:c3:4d:c3:5a:ec:6b:b2:f1:8e:
20:36:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org