Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/BZrAEBiwFbWCwneHfCSuxJC_vk0.roa
File: BZrAEBiwFbWCwneHfCSuxJC_vk0.roa (raw, json)
Hash identifier: 2N4g8BjETAZjUUoMZgRYjL+AwthXkcpu6K0aqy2u7io=
Subject key identifier: 05:9A:C0:10:18:B0:15:B5:82:C2:77:87:7C:24:AE:C4:90:BF:BE:4D
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 31
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/BZrAEBiwFbWCwneHfCSuxJC_vk0.roa
Signing time: Tue 01 Mar 2022 08:33:59 +0000
ROA not before: Tue 01 Mar 2022 08:33:59 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 218.45.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:59 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=059AC01018B015B582C277877C24AEC490BFBE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:10:0e:34:6a:07:4d:9c:a5:11:c0:f9:eb:
d6:91:22:93:3f:6f:6d:63:67:b4:98:9d:9b:14:b7:
5c:be:89:42:c1:d3:f3:99:b9:25:ce:12:a1:0c:ea:
14:35:f7:af:69:3f:45:21:96:10:62:16:48:e3:5d:
93:1d:06:2c:e6:a2:85:6a:16:c5:65:d3:5a:d1:45:
76:fe:b6:b3:a1:ac:1e:36:a8:79:35:7a:7a:8f:6d:
4a:6b:b7:25:83:11:ae:d7:57:02:25:f3:26:d1:04:
75:61:f2:ac:5c:90:34:8f:03:44:8e:b8:8e:71:6b:
4a:47:da:9e:70:74:a3:87:f6:df:b4:d7:0f:54:ee:
17:34:8c:2f:9c:82:d3:e8:02:2c:a9:be:1c:51:93:
0d:e0:fc:fb:12:b6:fe:ec:23:27:9f:a0:f0:4d:34:
33:61:00:3a:59:e4:20:02:5e:b5:e7:a2:dd:1e:2d:
10:d2:80:91:dc:cb:c9:39:a1:63:22:2c:53:de:01:
4b:81:4b:d1:80:a7:73:05:06:95:cb:95:04:a4:c0:
d0:3e:a3:23:1e:cf:3b:5c:6d:ed:b0:6a:87:98:47:
46:e0:bf:32:cf:58:f4:69:85:1a:52:38:00:cf:7d:
f1:28:86:78:92:69:0a:c6:de:a1:ea:b8:be:cc:9a:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:C0:10:18:B0:15:B5:82:C2:77:87:7C:24:AE:C4:90:BF:BE:4D
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/BZrAEBiwFbWCwneHfCSuxJC_vk0.roa
sbgp-ipAddrBlock: critical
IPv4:
218.45.144.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:84:e4:9f:c6:a2:38:76:3c:4b:73:d1:16:62:cc:c5:81:30:
42:bd:7c:a8:29:e7:96:ca:cc:83:0d:5c:83:78:5f:45:ab:4c:
af:38:bb:38:e7:7c:27:05:f2:10:4a:11:c7:0a:35:47:82:b3:
2e:c0:38:5a:65:89:e9:1d:59:a1:a2:7a:99:a5:83:6d:0e:49:
a9:1d:ee:21:41:bd:22:bc:be:5f:32:76:78:c3:c6:e1:3a:b6:
87:97:1b:f9:12:e1:3a:2f:f8:65:2c:21:7b:89:fd:7b:a4:fc:
25:42:fc:b2:fe:16:d2:05:1e:69:d3:87:35:1c:e1:eb:fc:85:
7d:67:2a:10:b7:9d:8b:c1:61:cd:a3:ad:bb:97:28:cb:40:72:
f6:54:e9:cc:02:ab:cb:9a:4c:c4:bf:76:eb:ca:03:7a:63:36:
42:7d:dd:2c:20:08:62:2c:e6:bc:d7:a5:7f:98:e7:80:6c:f9:
68:f6:af:fa:50:98:e0:ad:a2:98:93:a1:0d:51:38:ea:26:cc:
9e:b9:b6:c8:64:21:cb:54:b1:bb:3a:30:d3:44:05:c3:a5:01:
f5:dc:49:3e:be:e1:2e:3e:e3:4f:19:2a:60:63:8a:d0:09:42:
2c:0f:f0:57:70:77:ea:30:19:93:45:e1:d7:d4:e8:4e:6a:99:
5b:ec:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:54 2025 by rpki-client