Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/nFy546cQ0X7z2LWffk-GFc_kvG4.roa
File: nFy546cQ0X7z2LWffk-GFc_kvG4.roa (raw, json)
Hash identifier: uM11ohpTMAamadthmvW7ffMINog9aB70n2ZrJzKyJ4s=
Subject key identifier: 9C:5C:B9:E3:A7:10:D1:7E:F3:D8:B5:9F:7E:4F:86:15:CF:E4:BC:6E
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 26
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/nFy546cQ0X7z2LWffk-GFc_kvG4.roa
Signing time: Tue 01 Mar 2022 08:33:56 +0000
ROA not before: Tue 01 Mar 2022 08:33:56 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 218.228.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:56 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=9C5CB9E3A710D17EF3D8B59F7E4F8615CFE4BC6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:63:f1:e8:c2:c9:29:ac:b5:ed:81:05:97:
57:b0:a2:3d:75:4c:71:ef:61:ff:ad:76:97:de:fa:
e1:0a:1b:13:b7:dd:07:b5:75:b4:72:eb:0b:4d:5f:
7e:2d:9f:8c:5e:d0:1b:e4:8b:11:4c:7e:f4:14:f0:
64:29:56:62:2e:b4:ee:ec:fa:58:ca:ce:52:9d:02:
3a:91:c4:14:38:a2:3d:31:7a:a3:54:3e:82:de:ea:
a5:8f:b3:54:a4:46:72:d3:4e:4a:60:50:a6:01:70:
69:63:69:a9:1e:ba:99:c3:5d:c0:85:2f:4a:39:78:
0f:8e:18:fe:0c:1e:c9:d6:ee:a3:59:7f:2a:ed:f0:
8e:b9:e8:8c:5a:51:78:9d:e2:31:de:b9:7e:7a:c8:
66:f0:20:78:f3:20:c5:fc:be:11:e4:0d:00:f5:1b:
5a:4c:49:d4:c7:54:f6:02:90:a6:9b:2a:be:86:27:
08:dd:97:6e:f4:e9:81:f0:38:7c:5d:e4:6b:3a:33:
1b:f9:ed:48:bb:9b:4d:42:09:f0:29:da:63:9b:7c:
9a:97:c4:81:db:8b:57:80:52:d5:de:9b:99:99:3a:
a6:f7:8d:42:54:c6:16:75:ad:96:bb:4d:20:3d:47:
60:9e:97:cb:2c:6f:00:8e:a5:eb:ca:b6:f2:f8:22:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:B9:E3:A7:10:D1:7E:F3:D8:B5:9F:7E:4F:86:15:CF:E4:BC:6E
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/nFy546cQ0X7z2LWffk-GFc_kvG4.roa
sbgp-ipAddrBlock: critical
IPv4:
218.228.0.0/20
Signature Algorithm: sha256WithRSAEncryption
c2:02:b8:bb:d9:f8:4c:11:2b:c9:9b:ba:c7:56:fd:59:a5:14:
78:cd:a0:20:27:16:45:12:f1:11:21:4a:16:1b:5f:83:3b:f4:
65:7c:c2:b0:83:b7:91:b1:0c:f1:d9:6e:b4:f8:f7:de:7a:c3:
cd:a7:87:18:50:4a:3c:db:3e:51:df:9b:f0:fe:2f:37:c6:b6:
35:83:24:24:a9:9b:c6:8a:3b:7b:c5:2d:81:09:37:22:e9:ae:
55:c9:18:28:76:0a:91:29:d1:0f:96:c9:13:b6:af:b3:f5:ae:
84:be:04:00:04:d2:3a:3a:d4:4f:7f:0c:54:10:16:54:de:52:
04:9a:66:1a:cc:e8:f2:34:bd:8b:cf:c7:65:7e:f5:34:11:e8:
cd:2d:2e:35:b5:6e:0d:84:fd:a4:62:cb:8c:fc:7f:f9:2b:0c:
8e:46:79:ab:ba:6b:21:f2:85:01:2d:a2:db:f4:c2:31:63:51:
01:cc:17:45:4b:92:37:80:b8:ae:d0:4a:ae:31:1e:10:5f:23:
fb:9a:ed:48:1f:1c:13:7c:dc:e5:00:0b:2d:22:7c:99:24:3b:
38:d8:96:a9:9a:bb:f2:12:2f:fb:e7:84:da:71:ba:b2:71:96:
d2:4e:f4:ce:a5:36:dd:6d:f7:ea:e9:a0:92:ee:72:c1:a2:d8:
42:85:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org