Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/QyvsIURBAcCvf7m_6lHF8iTL8Jw.roa
File: QyvsIURBAcCvf7m_6lHF8iTL8Jw.roa (raw, json)
Hash identifier: dQyf0aF66yPctcivt4aa9Pgbyqfh79XJ0L4hDrqUApg=
Subject key identifier: 43:2B:EC:21:44:41:01:C0:AF:7F:B9:BF:EA:51:C5:F2:24:CB:F0:9C
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 14
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/QyvsIURBAcCvf7m_6lHF8iTL8Jw.roa
Signing time: Tue 16 Mar 2021 04:50:33 +0000
ROA not before: Tue 16 Mar 2021 04:50:33 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 218.45.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:50:33 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=432BEC21444101C0AF7FB9BFEA51C5F224CBF09C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:38:09:9d:4d:64:9a:d7:32:f6:17:bd:0c:
d5:c9:22:0b:d4:9f:da:93:6e:1f:dd:12:f3:8a:0f:
80:c6:28:88:67:2f:b1:07:f6:33:dd:a7:7a:b1:7f:
34:8d:33:de:fa:fd:a9:03:ff:f6:a2:74:e2:8e:1d:
49:cf:e0:53:48:b1:80:a6:6a:4e:3c:1b:ae:e9:d5:
43:fc:a4:9b:a2:5b:2f:c9:9e:22:65:fa:d9:84:f5:
7e:e5:ea:f3:8c:85:2c:db:c9:ae:43:a5:a8:81:64:
0d:d3:57:87:5a:4d:5f:57:c3:38:9d:48:a9:1c:84:
42:f5:12:1a:9b:64:5b:10:f3:cf:2e:81:80:55:dc:
87:fd:0f:8c:a4:de:38:c6:d4:93:66:b9:52:7f:f6:
30:60:76:ab:62:e7:d0:2e:ec:4f:d0:78:10:b3:94:
b3:c3:a0:fa:f2:f9:2b:40:18:91:9d:49:23:26:9f:
33:53:0c:e3:d3:af:10:c8:b7:fd:6c:e9:47:24:50:
b9:99:bf:c8:23:71:30:12:0a:52:15:c4:36:59:ec:
2c:6d:ec:c9:10:02:83:0c:49:b8:38:85:16:ad:06:
f6:68:7c:a9:2c:21:04:f0:2d:c9:ab:e1:4f:96:1d:
b5:93:48:4e:f3:54:9a:96:ae:12:a0:66:27:55:18:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:EC:21:44:41:01:C0:AF:7F:B9:BF:EA:51:C5:F2:24:CB:F0:9C
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/QyvsIURBAcCvf7m_6lHF8iTL8Jw.roa
sbgp-ipAddrBlock: critical
IPv4:
218.45.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:d7:45:34:2b:59:ad:90:58:ab:0e:f6:51:9b:60:1d:d3:0e:
2d:44:e3:da:01:c7:b5:c1:c4:2c:43:00:46:60:b2:a9:e0:c9:
31:41:84:57:b8:58:45:26:f3:ef:e5:13:03:b2:55:c1:b6:fd:
4d:74:fd:18:19:41:83:e9:d3:f6:7f:cc:87:cb:56:41:3b:1e:
2b:d0:b1:78:2c:1c:69:c0:18:f1:e5:0c:9c:ff:cd:78:34:aa:
d9:71:d0:88:b3:b3:48:a2:41:3c:83:7d:87:c7:a3:66:ed:77:
50:cd:1b:e8:07:75:27:a2:f2:cf:a8:4c:df:49:51:55:16:47:
4e:5d:ad:26:82:1b:75:a0:1d:2e:12:a6:5f:14:f5:43:76:e1:
16:6c:c0:6f:1e:d3:c3:da:d8:9a:0a:7c:5c:e3:a3:b2:b5:3e:
06:19:03:e2:42:bd:8e:a8:be:d4:19:43:e9:46:ea:47:1c:b0:
20:18:52:8c:94:f8:0e:13:3c:75:78:c0:a2:58:cf:2c:1a:8a:
cc:c9:1f:1f:b9:52:05:c8:37:1c:59:b7:d5:53:61:80:e8:e5:
e1:47:bd:1b:33:06:36:27:d6:91:92:41:c7:50:b0:2f:72:ce:
29:da:a4:f0:58:10:19:6b:a5:2e:0e:1e:88:ac:7b:7b:d2:db:
4b:f4:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org