Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2432/1OkyXTJouM_bwHBMv90QACDjTR8.roa
File: 1OkyXTJouM_bwHBMv90QACDjTR8.roa (raw, json)
Hash identifier: KbB9rlTfolobzvauEwVfcp6NNcf1Iyr1jK7rI6Jc76s=
Subject key identifier: D4:E9:32:5D:32:68:B8:CF:DB:C0:70:4C:BF:DD:10:00:20:E3:4D:1F
Certificate issuer: /CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Certificate serial: 1F
Authority key identifier: E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/1OkyXTJouM_bwHBMv90QACDjTR8.roa
Signing time: Tue 25 May 2021 02:36:54 +0000
ROA not before: Tue 25 May 2021 02:36:54 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 7671
IP address blocks: 157.4.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Validity
Not Before: May 25 02:36:54 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=D4E9325D3268B8CFDBC0704CBFDD100020E34D1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:d9:d3:9e:e7:b8:c6:2a:96:e7:08:0a:39:
53:35:67:d1:db:59:dc:a3:27:a8:ba:06:b8:28:9a:
b3:ad:04:42:93:a4:dd:a6:9b:b2:ae:7f:58:13:10:
12:4f:28:1b:83:28:26:01:f4:31:2a:68:a9:7e:2e:
6a:6e:06:1d:2d:f3:50:15:3a:8a:ed:41:4e:ce:13:
51:1a:eb:83:d6:f2:6e:03:58:b8:dd:db:59:2d:e6:
9f:f7:96:e1:4d:9f:61:1a:05:12:5e:f7:99:2c:77:
5e:61:2d:4c:1c:2f:5b:49:32:0b:36:56:b2:db:eb:
77:ff:97:8d:24:97:35:17:5c:5b:4d:b8:a3:d1:5b:
e8:97:82:b4:e0:57:27:f2:81:11:ba:f4:8b:1c:57:
28:10:d7:5a:b2:10:1b:b1:7f:65:83:57:5e:ae:26:
03:f2:a4:e5:bc:8d:3e:86:6f:92:26:be:38:19:df:
b6:79:70:56:a5:fe:37:89:d5:3b:d8:2d:7c:fc:15:
8d:a6:08:69:3e:7d:be:fb:3c:b2:57:ab:db:8c:da:
78:16:4f:fb:4e:28:96:bb:6a:d3:c9:b1:34:ba:c8:
3f:2f:66:35:7d:94:81:41:1b:eb:29:81:42:6e:aa:
24:d6:c1:cf:03:d7:9c:3f:b1:23:85:53:ee:ca:2e:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:32:5D:32:68:B8:CF:DB:C0:70:4C:BF:DD:10:00:20:E3:4D:1F
X509v3 Authority Key Identifier:
keyid:E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/1OkyXTJouM_bwHBMv90QACDjTR8.roa
sbgp-ipAddrBlock: critical
IPv4:
157.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:c8:5c:c5:26:ac:2b:46:96:2e:d3:0f:4a:99:22:e3:d3:b6:
92:a2:57:58:d8:60:61:f2:00:d1:82:e2:9a:8d:e1:04:76:6d:
82:3a:d6:2f:73:a8:6c:2d:b4:3d:d0:12:6e:b2:42:ec:7c:9f:
f8:af:c1:33:be:55:c7:c9:51:85:4e:98:ea:44:7a:2a:03:03:
5b:4a:8e:11:43:10:66:a6:e3:9a:0b:ad:08:3e:3d:e7:39:17:
1b:ce:2b:c7:c4:a2:c8:1a:e2:73:4a:2d:b8:f4:f4:90:81:bb:
5b:31:29:b3:d5:65:93:a7:cf:bc:ff:cf:a6:91:34:8c:14:81:
02:3f:c9:35:1c:fa:cf:42:ff:6d:4e:9f:7f:04:a9:28:24:52:
26:dc:85:08:f5:15:51:76:ca:89:b0:2e:45:2b:a6:7a:09:d5:
41:38:80:80:51:56:58:29:72:7f:b3:65:25:b5:b7:80:52:eb:
d1:28:89:c7:c0:c0:6a:e8:4d:82:c5:e4:f4:c7:c8:68:25:b7:
3e:26:60:54:37:d5:ba:c5:2e:dd:35:58:e4:ee:b1:f0:2f:ca:
cf:60:f2:58:e4:ff:80:ac:68:0d:e2:f6:85:08:53:82:43:e5:
2d:25:57:7b:55:57:ee:59:dd:d6:3b:ba:cd:97:11:f3:7d:bc:
33:35:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org