Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/KL-WxRoZBKSvTbrjn7kgzjqjtrM.roa
File: KL-WxRoZBKSvTbrjn7kgzjqjtrM.roa (raw, json)
Hash identifier: 4u0x2cONwzyUFhGS4p8ehv49aVceV4s+dMnUvNyqxrw=
Subject key identifier: 28:BF:96:C5:1A:19:04:A4:AF:4D:BA:E3:9F:B9:20:CE:3A:A3:B6:B3
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 6D
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KL-WxRoZBKSvTbrjn7kgzjqjtrM.roa
Signing time: Wed 01 Sep 2021 01:30:24 +0000
ROA not before: Wed 01 Sep 2021 01:30:24 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 59.106.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:24 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=28BF96C51A1904A4AF4DBAE39FB920CE3AA3B6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:1c:64:02:e2:8b:c1:82:e9:6e:55:11:d9:
6d:85:7e:24:6c:14:73:95:9b:4f:97:ec:9f:61:58:
77:cf:d1:b4:be:ac:9d:7b:64:82:32:a8:70:cf:b4:
24:4e:b2:0f:54:16:aa:e0:4c:70:17:c5:de:be:bf:
44:87:2e:e1:20:eb:6d:86:33:f3:f5:c4:dc:e3:7f:
6d:30:7b:97:3b:95:bb:b0:d8:45:1e:24:43:95:90:
56:fc:38:27:f1:d4:0e:ad:19:a9:57:64:d0:09:bb:
b2:42:0d:32:56:a4:f1:7e:8c:58:b2:ea:27:d3:f2:
0d:e1:06:1c:4e:0e:b4:db:a7:f9:c5:4f:76:f3:cb:
df:1a:33:ba:86:f9:a1:19:78:92:44:91:75:07:ba:
3d:49:64:52:61:79:76:b4:7d:b4:83:95:4d:f0:dc:
9c:76:29:20:66:2a:c4:aa:bb:66:a0:8f:04:a8:54:
75:97:dd:58:83:b4:9a:a0:d6:e1:70:10:84:b1:8d:
0c:ec:56:31:99:48:a7:60:a6:c1:b1:8d:0f:fd:b3:
eb:ac:1e:58:56:c1:09:b6:70:42:b7:ec:a2:20:5e:
3c:09:0c:f7:57:3d:19:b3:dc:8b:5d:fb:37:25:84:
2e:9a:a3:7f:98:15:ce:37:7f:8e:e5:7c:66:d3:70:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BF:96:C5:1A:19:04:A4:AF:4D:BA:E3:9F:B9:20:CE:3A:A3:B6:B3
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KL-WxRoZBKSvTbrjn7kgzjqjtrM.roa
sbgp-ipAddrBlock: critical
IPv4:
59.106.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:e1:6e:5f:8e:d6:ff:e6:29:09:5b:f4:33:ec:c7:9f:d6:82:
78:87:16:c5:d0:2a:09:76:87:ba:ad:40:48:3d:d0:ba:c8:52:
84:de:fc:97:5d:3b:9d:36:da:99:65:3f:68:7d:29:31:36:f3:
f3:73:91:ac:f9:c9:68:5b:74:50:1b:2b:35:95:20:49:af:4c:
09:5f:d4:34:9e:b1:e6:8c:0a:55:a8:94:51:e8:50:67:17:d8:
49:0a:88:87:78:77:36:85:a2:7e:36:4b:57:19:97:89:06:b1:
e4:51:48:ac:32:ee:d4:ae:ff:e6:68:a3:58:b6:a0:cc:cc:17:
20:82:f6:73:db:b0:37:36:f4:b4:c3:f6:3b:44:ce:a9:be:2a:
40:d3:1d:70:3d:c5:7f:31:bb:e9:be:8c:c8:55:f4:a9:69:74:
d8:a1:2f:ad:47:d8:e9:64:88:e6:c7:2e:43:f2:19:48:1d:81:
fd:f0:92:26:89:4d:b9:c9:15:16:ab:a4:74:60:16:53:6d:22:
59:dc:a5:b1:ce:8e:25:51:dc:54:1c:78:74:cc:f2:d6:45:74:
02:01:85:22:22:c9:47:c0:e7:f7:56:65:2e:30:5b:37:27:21:
aa:47:93:d3:5d:f0:3e:98:6e:46:af:e0:9d:e2:b3:7f:9e:4d:
a1:1c:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org