Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa
File: oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa (raw, json)
Hash identifier: oTkEgm3pcBWzXBub1ez3qlYFpYQWslokXJbOct8Qh3E=
Subject key identifier: A0:E2:58:7E:0E:12:9A:B4:0D:9F:F3:8F:58:09:AB:ED:03:D1:55:4A
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 0D
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa
Signing time: Tue 27 Jul 2021 02:35:59 +0000
ROA not before: Tue 27 Jul 2021 02:35:59 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 63789
IP address blocks: 202.9.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Jul 27 02:35:59 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=A0E2587E0E129AB40D9FF38F5809ABED03D1554A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:4d:a4:19:56:13:39:7b:8f:c6:13:6b:b6:
e9:f5:76:61:db:f2:56:77:a7:fd:94:97:5c:fc:91:
b4:6d:d3:70:26:b9:ca:6c:47:45:62:a6:53:d7:51:
d8:9f:f0:14:b7:44:ed:64:74:95:f7:4b:82:ed:fc:
5c:eb:c1:0b:be:86:d6:81:da:2e:a5:5d:5b:72:a3:
d2:63:3c:97:62:c7:ab:0a:e4:e0:59:6e:a0:06:38:
3f:d7:1c:5e:d8:b8:ad:0b:b1:73:21:ab:1d:57:fc:
de:ba:89:8c:78:b9:cf:44:b4:55:de:9d:eb:50:b6:
10:bb:22:36:14:eb:ec:e4:7f:84:5b:a2:46:89:f9:
d0:40:04:8c:23:68:f8:48:84:60:29:29:de:d1:86:
09:e1:74:2d:86:98:3f:18:1f:e2:94:96:f1:50:d1:
c7:ef:e9:d9:f2:60:b0:0c:16:a2:97:f0:75:0c:65:
53:b0:39:59:25:a9:77:19:36:a0:01:04:2b:14:ec:
61:85:86:95:bc:ad:24:bf:6e:db:70:43:c8:66:5e:
0c:5d:8d:a3:d0:7a:44:47:6d:66:5f:e3:6c:3f:e6:
e2:68:9f:e6:86:74:d4:66:ba:e1:46:62:da:36:d8:
05:8a:93:86:11:20:e1:a1:67:d5:63:70:08:05:fe:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E2:58:7E:0E:12:9A:B4:0D:9F:F3:8F:58:09:AB:ED:03:D1:55:4A
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/22
Signature Algorithm: sha256WithRSAEncryption
59:98:54:84:3f:af:b8:c1:fe:1a:fa:f8:76:a8:fa:83:4f:25:
ac:7c:2a:36:79:f1:e9:e4:9d:60:41:45:0b:75:37:68:66:8e:
2e:02:2f:0c:e8:40:d6:f1:a6:49:36:76:d4:4f:88:98:a4:73:
54:6b:c7:b5:c7:c3:79:da:bd:d1:7b:f6:e1:c4:ba:a5:a8:2c:
5d:e7:b3:9f:96:e1:f1:28:5f:57:2a:71:a7:c3:cd:f4:e8:72:
04:17:c6:e2:7c:32:c8:2b:8d:ed:a3:30:6e:ce:db:eb:7a:04:
65:1f:a4:5f:d9:f1:cf:d1:5b:b7:4c:3b:60:48:88:7d:81:bc:
1b:4f:fe:83:18:09:0f:eb:5e:5b:1f:3b:19:ba:94:26:76:ec:
e3:4f:01:42:8c:da:bf:d2:16:9d:a6:7c:33:6c:50:05:34:e8:
6e:5e:ba:81:cd:50:da:0d:ce:0a:3f:39:b0:c3:31:e3:d3:55:
b9:37:27:86:f2:19:09:71:93:7b:1f:4f:1f:07:c9:da:54:f4:
92:3b:fa:3c:48:9d:62:0b:a4:24:9b:4c:f2:9b:e5:82:5e:5d:
0f:ec:4c:14:30:58:3a:a8:09:70:20:52:af:9b:86:99:7d:b4:
c9:63:98:20:80:52:70:de:dc:dc:8e:7b:67:69:cf:60:47:a2:
e4:50:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org