Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/3ZQ5dBSvNKJ5aFnFPaulP8jbOf8.roa
File: 3ZQ5dBSvNKJ5aFnFPaulP8jbOf8.roa (raw, json)
Hash identifier: D8PgAwW5w0YpQ7jBnqkjyHEbon+o+hbJ5lMglyK79og=
Subject key identifier: DD:94:39:74:14:AF:34:A2:79:68:59:C5:3D:AB:A5:3F:C8:DB:39:FF
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 39
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/3ZQ5dBSvNKJ5aFnFPaulP8jbOf8.roa
Signing time: Tue 01 Mar 2022 08:34:01 +0000
ROA not before: Tue 01 Mar 2022 08:34:01 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 27.113.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:34:01 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=DD94397414AF34A2796859C53DABA53FC8DB39FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:10:14:f4:0f:85:89:af:2d:b7:27:d9:96:
bc:19:b6:60:ed:40:e1:68:87:07:5d:73:ce:4c:60:
03:f1:2f:c4:d2:31:21:bd:e4:8f:0f:f1:f6:38:5d:
70:02:5a:be:e9:cb:13:df:e1:4d:c2:6a:f6:74:eb:
75:2d:fc:44:c3:1f:4b:7f:97:c1:d0:23:d3:39:69:
2d:d9:d1:3a:f9:2a:20:e6:f2:22:80:5b:a3:a0:b5:
ec:18:9e:b2:38:e3:1a:b6:6f:28:e8:d7:93:4f:22:
0f:93:cd:0c:80:8f:c4:a8:35:75:6c:80:d1:60:53:
6c:2b:38:65:84:b4:f8:b9:e7:01:bc:ed:b3:ca:a8:
0a:64:29:72:4d:5e:f1:d8:70:e9:b5:2f:a2:20:9f:
1a:e9:45:54:78:de:45:32:21:56:3d:95:1e:19:5c:
a3:fc:59:f5:4b:d8:f6:37:71:02:04:d5:4e:0e:98:
84:6e:68:cf:f1:91:f5:f7:1c:89:cd:34:a0:d7:c3:
21:0d:14:4c:ca:5a:e4:54:14:41:09:4b:2f:a2:60:
e2:06:d0:b8:f0:9c:e3:ef:eb:8b:c3:82:ca:61:77:
e6:31:7c:3b:ce:47:96:e5:d6:b1:01:17:49:d3:97:
4a:d9:b8:9a:ba:4e:be:64:04:42:48:0e:2a:ac:bb:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:39:74:14:AF:34:A2:79:68:59:C5:3D:AB:A5:3F:C8:DB:39:FF
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/3ZQ5dBSvNKJ5aFnFPaulP8jbOf8.roa
sbgp-ipAddrBlock: critical
IPv4:
27.113.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:ba:c3:ee:a7:9e:44:01:5e:88:07:4b:5b:9f:ab:e8:63:7b:
bb:62:4b:16:5b:ce:53:ca:95:02:66:f6:7a:a8:c8:08:11:68:
b6:15:cb:a8:71:b1:3c:dc:88:c1:9b:d6:89:42:7a:d2:4a:66:
58:56:52:6b:98:aa:68:71:1e:62:03:e8:7c:fc:f3:ce:34:31:
2b:b7:0f:ed:44:02:6b:f9:c1:f4:29:e2:cc:37:f4:fa:99:13:
9e:bc:44:a8:fe:de:50:a1:03:ef:28:9f:61:90:95:e6:c3:be:
95:40:e9:8b:6b:bb:85:dc:5a:d3:ef:4f:23:84:99:64:86:10:
0d:49:98:e4:9e:b6:5e:85:eb:ca:8f:79:87:8d:8b:a7:bd:fe:
fa:0c:bf:13:84:c7:68:12:94:e2:c9:ee:bf:83:2a:31:20:77:
c5:4f:85:2d:92:f1:a2:9d:ad:9c:4e:92:39:d9:8a:ed:12:db:
43:1d:c6:8e:61:bf:dd:d2:3b:1e:99:bc:3b:42:d7:04:15:d6:
e5:2e:cb:ff:66:cb:a5:df:e8:8c:b5:e4:07:6a:71:ea:c7:ca:
92:e8:22:3a:52:7f:32:fb:e0:49:e8:11:5d:2b:6e:e8:37:31:
09:3f:3c:d4:52:58:95:76:93:eb:fe:23:26:8f:d2:48:0d:a4:
ca:f7:a5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org