Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/4hf9R3Nd9xFtOJw_TpCLno3T-io.roa
File: 4hf9R3Nd9xFtOJw_TpCLno3T-io.roa (raw, json)
Hash identifier: TC5EbfT7b9hTWh47NZnjctAKo1PqPLxgg8aWmR7mu8A=
Subject key identifier: E2:17:FD:47:73:5D:F7:11:6D:38:9C:3F:4E:90:8B:9E:8D:D3:FA:2A
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 5F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/4hf9R3Nd9xFtOJw_TpCLno3T-io.roa
Signing time: Thu 09 Sep 2021 02:27:23 +0000
ROA not before: Thu 09 Sep 2021 02:27:23 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9607
IP address blocks: 124.147.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 9 02:27:23 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=E217FD47735DF7116D389C3F4E908B9E8DD3FA2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:f8:8c:0b:c8:d3:d5:11:e0:27:97:97:80:
3f:40:eb:06:a0:00:8b:d5:c5:74:49:f3:59:7e:ae:
98:50:3e:e8:07:dc:59:e7:50:1b:e1:e7:2f:04:7e:
e9:ff:c5:f6:66:ab:c8:bf:22:c1:69:d2:1e:0f:2a:
a9:98:08:9a:e0:5f:2d:86:e0:de:ca:64:52:94:36:
dd:e3:58:0f:08:59:5a:a4:ee:10:7c:66:65:26:47:
e4:f1:3e:4e:2a:10:ed:1d:ec:a4:40:af:0c:fa:82:
ea:61:f9:a8:3a:4a:d4:d5:5f:fa:e9:89:02:b9:cf:
fa:2b:aa:88:ab:43:7c:93:9c:da:d8:f9:b7:4d:6a:
cc:91:51:28:24:c9:66:d0:7e:ff:c3:50:3b:87:11:
d9:7a:d4:5e:e9:90:08:bf:3d:1e:cc:66:01:1b:fa:
6e:01:1e:19:84:0b:e4:38:c1:b9:90:25:af:54:9f:
71:91:e1:02:b0:45:2a:40:c9:95:5f:d4:09:a5:1b:
06:d7:94:94:cf:c5:82:fb:91:62:dc:e8:2e:6e:76:
c9:5c:0b:14:32:96:c4:56:e2:37:e9:2e:6b:45:5d:
73:b0:3c:f6:fe:76:04:30:a1:bd:5d:72:61:8f:34:
7e:bc:a9:15:aa:55:1c:5f:81:dd:c7:4e:15:31:f2:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:17:FD:47:73:5D:F7:11:6D:38:9C:3F:4E:90:8B:9E:8D:D3:FA:2A
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/4hf9R3Nd9xFtOJw_TpCLno3T-io.roa
sbgp-ipAddrBlock: critical
IPv4:
124.147.24.0/22
Signature Algorithm: sha256WithRSAEncryption
07:87:89:76:71:6d:b9:4f:de:e9:a0:7b:86:4b:90:80:23:7c:
23:1f:9f:2b:ed:b0:e0:1c:f0:eb:db:96:85:da:9c:56:79:fe:
d3:5f:8b:f5:9a:a6:31:49:ea:b7:3e:e0:64:1f:69:6e:76:10:
76:c8:7d:b9:b3:df:b5:1a:06:52:cb:a0:d2:1e:a8:24:a2:5e:
9c:26:d2:db:00:1e:88:02:3e:82:21:c8:f8:51:2c:40:2e:ec:
ba:e7:c0:14:9b:5a:2b:f2:22:02:8b:b7:67:c6:32:49:63:61:
0f:65:77:1b:33:94:5c:90:9e:1a:26:12:3e:d7:0e:f1:58:eb:
d2:03:8d:5d:c6:a0:b8:55:01:96:5b:7f:e4:58:87:c9:d1:8a:
1e:66:de:aa:e3:d1:33:45:e9:ac:59:b0:18:d5:fc:66:b7:07:
94:f6:d8:91:7b:6b:4d:82:c9:cb:de:de:d3:7d:66:3b:f9:4c:
0f:84:2b:fc:c1:4f:d3:8e:6f:2a:c3:27:15:76:a8:52:97:e1:
07:5d:e5:53:43:3c:36:17:a2:69:a7:8c:ba:2a:80:50:4f:4b:
54:fa:d7:72:98:fe:c7:a5:3f:e6:48:ff:54:9b:3d:81:ff:ca:
38:d1:94:3b:3d:01:8b:6d:b8:0a:7b:1e:43:e1:dc:fc:f1:a8:
70:42:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org