Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/HBCw0zpHUOCJM3E_2fOD7klBAHM.roa
File: HBCw0zpHUOCJM3E_2fOD7klBAHM.roa (raw, json)
Hash identifier: ueOFngcVgvhSKbdfBhD5fAMJFVTom54TpWuRYR/rnmw=
Subject key identifier: 1C:10:B0:D3:3A:47:50:E0:89:33:71:3F:D9:F3:83:EE:49:41:00:73
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 37
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/HBCw0zpHUOCJM3E_2fOD7klBAHM.roa
Signing time: Tue 01 Mar 2022 08:34:00 +0000
ROA not before: Tue 01 Mar 2022 08:34:00 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 203.133.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:34:00 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=1C10B0D33A4750E08933713FD9F383EE49410073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:00:9b:37:7b:c6:ac:10:9d:aa:77:f1:8d:
32:b3:74:2b:91:5d:c2:24:16:78:28:db:18:55:7d:
2b:78:ad:96:67:e3:4b:aa:e0:06:cc:07:43:48:ca:
a4:86:ca:6c:96:e8:c8:84:1c:ee:34:9d:e6:57:51:
1b:ea:3c:28:c5:b5:69:55:8a:4d:34:0f:f0:63:ed:
a9:4c:f2:ab:85:c7:b6:fb:0c:ff:56:54:39:75:32:
25:85:10:aa:65:d6:7c:51:06:5d:5a:6f:cf:a9:18:
5f:e4:b6:0d:a8:f9:09:4d:5f:7a:a5:ae:94:dc:c3:
91:bb:75:32:9e:ea:14:a7:3a:5b:9a:5a:0a:9a:2d:
b2:85:10:6e:79:89:9d:94:47:8e:7e:83:17:9c:12:
f0:f7:7d:d1:62:89:69:3c:da:ed:49:ed:23:c1:5b:
8a:04:7e:6d:43:1f:90:b6:6c:b2:de:ad:cc:2b:01:
10:09:5f:82:2e:bf:a9:f5:ef:57:5e:b2:f8:3c:f0:
1d:53:a2:cb:30:de:c6:e3:17:8f:95:4e:38:f2:47:
66:e6:bd:fe:b9:32:0d:57:09:bf:98:02:37:3b:28:
f0:1e:6c:44:a9:bf:0a:9d:1f:9a:f9:9f:91:8b:4e:
97:d7:07:35:a8:d1:34:f0:ee:0f:af:74:e9:8a:b5:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:10:B0:D3:3A:47:50:E0:89:33:71:3F:D9:F3:83:EE:49:41:00:73
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/HBCw0zpHUOCJM3E_2fOD7klBAHM.roa
sbgp-ipAddrBlock: critical
IPv4:
203.133.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:e1:4e:40:51:e5:16:62:c0:db:62:3f:54:be:ea:61:69:2f:
60:f3:25:f2:ec:63:f0:84:8d:f8:f6:c5:05:50:b7:20:8d:8b:
cb:e8:71:e5:7b:e9:63:93:a4:a5:3d:95:9a:6e:d7:de:9b:41:
9d:30:a8:e7:9a:e2:92:b5:04:89:d6:1e:c9:21:a1:f3:22:cb:
ac:1a:bf:9b:cb:99:3c:cb:7a:9c:c4:63:f1:3d:dd:78:5e:ac:
ab:c6:7b:6c:fd:c0:8d:f5:f7:93:08:e7:2b:52:b6:a5:bd:f3:
e0:e1:9f:57:ba:91:ed:c2:3c:2e:a6:79:d0:6c:28:a6:06:23:
72:b3:4e:b4:69:5c:ac:c7:84:98:37:20:18:c9:7a:7b:83:bd:
16:5c:d0:8a:06:d5:8b:a8:67:4e:19:be:24:da:81:19:b6:54:
25:dd:ef:18:6b:23:0d:e9:6b:70:e3:42:b2:eb:d4:3a:d9:c6:
29:dd:b2:a9:10:4c:f5:35:a8:36:8f:92:57:8c:75:c6:64:28:
63:1a:20:f7:80:39:5d:39:39:67:8a:01:5b:c6:ac:a3:26:a5:
20:0a:bb:cc:06:4f:08:ec:1a:82:02:f8:0f:61:6d:2f:a2:cc:
49:d5:8b:e2:98:78:3d:a8:1d:a1:24:2b:8a:75:75:13:5c:85:
7d:ef:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org