Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/3KJAy7k-YJY_oweBmPB_O6ccZwI.roa
File: 3KJAy7k-YJY_oweBmPB_O6ccZwI.roa (raw, json)
Hash identifier: kPMB9DkfKyAlUhMOxV2kBJDd7Mmvbf9YzbgBvDJTpd8=
Subject key identifier: DC:A2:40:CB:B9:3E:60:96:3F:A3:07:81:98:F0:7F:3B:A7:1C:67:02
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 88
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/3KJAy7k-YJY_oweBmPB_O6ccZwI.roa
Signing time: Sun 01 May 2022 01:30:19 +0000
ROA not before: Sun 01 May 2022 01:30:19 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 9607
IP address blocks: 210.231.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 1 01:30:19 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=DCA240CBB93E60963FA3078198F07F3BA71C6702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:7d:8a:14:4c:26:6c:a8:24:50:14:3a:fc:
be:34:ae:b2:20:b8:ed:ce:79:4c:98:fe:c6:4f:9f:
84:f5:25:17:ce:e5:ae:5e:80:2f:f6:b1:7c:fa:56:
44:93:09:5c:c8:9e:75:33:a2:e7:79:ad:da:30:88:
65:0a:a7:86:8b:0a:a6:72:bc:54:de:c5:2c:d6:43:
83:fb:fc:c3:27:7c:37:f1:51:dc:54:d0:3f:d4:5a:
bb:b2:63:3b:06:77:5a:44:73:2c:4c:4c:db:87:d1:
ba:c9:6f:fe:d8:6f:8a:a2:0e:c0:cc:ba:80:c5:22:
35:9a:55:f0:8a:fc:c9:ab:a9:b0:5f:f4:60:1a:72:
26:00:85:49:d1:20:57:28:20:e6:14:4f:ea:28:d4:
a7:a7:c4:a9:ca:be:7b:a4:98:d5:72:e2:1f:ee:01:
e1:59:bc:f9:01:02:76:1d:57:5a:84:72:05:84:7d:
d2:78:a9:fd:ba:f2:ce:29:ab:1f:43:91:93:e8:0f:
e7:43:b6:12:e1:30:60:bb:a5:42:83:54:44:ef:b4:
80:61:7c:09:cd:b1:69:46:43:dd:f2:d3:ff:2b:4f:
ae:10:67:1d:f3:3c:98:e5:68:1b:2d:2a:9d:2e:0a:
f7:24:a9:c5:d2:91:9d:c7:84:17:82:2b:b7:58:4a:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:40:CB:B9:3E:60:96:3F:A3:07:81:98:F0:7F:3B:A7:1C:67:02
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/3KJAy7k-YJY_oweBmPB_O6ccZwI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.231.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:ac:b5:55:3b:e5:e2:92:d3:db:11:d2:c1:d7:39:fc:cb:80:
03:5c:ee:bd:a1:53:04:dd:4f:c2:aa:c7:c2:69:c2:96:2e:6b:
46:4c:55:d7:25:60:91:e8:76:a0:c9:bf:b8:65:db:c3:e3:f6:
95:1e:59:e7:2c:f3:01:17:99:94:e7:9f:ff:db:77:b0:7a:1b:
f1:bb:d0:4c:3e:d9:3e:e1:ef:35:8c:27:66:4d:01:70:b6:1c:
0f:8b:53:51:48:d1:36:ee:38:1c:7c:47:52:20:48:9c:93:94:
59:0d:b2:98:89:ed:98:da:33:70:4e:3f:2d:c6:8b:5f:7e:85:
1c:67:51:ec:7b:ab:7b:68:22:04:9d:5e:e1:7e:14:5d:fd:87:
7d:62:89:a9:7b:b3:6a:27:03:61:9e:95:af:5a:2e:80:44:3b:
78:89:5e:11:86:a2:38:f7:5e:4a:3e:06:8c:6d:12:b3:e6:15:
34:f2:64:dd:11:87:71:59:4a:0d:6f:31:eb:e8:2b:9e:57:d3:
e7:eb:fc:52:90:90:6a:60:1a:fa:29:d8:d0:c0:89:0b:09:dd:
fc:1b:e6:7f:89:01:53:52:51:46:38:a0:01:aa:98:a7:e8:13:
ba:fe:b5:c1:97:f7:78:5f:a7:7c:3a:25:b7:6b:ab:60:75:15:
7d:aa:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org