Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa
File: 8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa (raw, json)
Hash identifier: 8c8vbKwVdiq4gkQ3Y3sdqjSzObgxQ28x2+WLk/Y1NKI=
Subject key identifier: F1:B9:15:83:72:B9:55:F0:A7:FF:3B:77:00:7E:61:5F:F4:5E:45:F4
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 69
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa
Signing time: Tue 28 Sep 2021 08:05:29 +0000
ROA not before: Tue 28 Sep 2021 08:05:29 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 23816
IP address blocks: 124.147.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 28 08:05:29 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=F1B9158372B955F0A7FF3B77007E615FF45E45F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:21:aa:76:96:50:66:e2:54:99:34:27:86:
35:74:40:dc:6f:66:31:ed:e6:0b:90:a3:c6:c8:16:
bd:7b:c9:32:4b:08:df:5d:6c:6e:f7:b1:e6:bc:a4:
f6:71:dd:69:2d:55:ef:7b:47:6d:bc:00:26:0c:eb:
00:c2:6a:05:46:69:79:44:7e:01:ca:1c:a2:b4:4b:
83:47:cc:df:79:71:de:be:e8:89:08:15:fe:21:5c:
82:46:9e:d4:06:54:5c:5e:7d:c0:4f:8b:05:69:b0:
2c:a4:b5:06:a2:d7:0e:3f:21:2b:87:00:85:f5:aa:
85:56:f3:4b:9a:ea:0c:7e:76:b3:33:be:a0:b6:d9:
c1:2a:69:23:f3:3b:6a:50:a8:96:6b:6e:1c:e9:3c:
7c:8d:41:11:c8:66:9c:0f:68:fc:c7:4a:ca:25:b7:
f9:43:bc:2d:3c:95:58:20:ca:f7:4c:69:97:1e:ff:
92:69:ff:ad:42:86:0c:78:ab:09:a5:66:46:de:33:
8b:86:bd:a5:71:39:69:fd:cb:c0:f5:bd:7a:ee:eb:
ec:8a:92:06:ab:86:d2:0c:9c:ee:6a:ba:0f:50:fe:
4e:36:5b:72:ec:91:fd:61:30:0a:31:67:ae:00:d2:
de:ff:8b:08:d2:5e:de:77:5d:c2:67:95:d5:68:ab:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:15:83:72:B9:55:F0:A7:FF:3B:77:00:7E:61:5F:F4:5E:45:F4
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa
sbgp-ipAddrBlock: critical
IPv4:
124.147.32.0/19
Signature Algorithm: sha256WithRSAEncryption
08:2e:20:63:03:25:03:60:b3:be:42:e5:7e:78:b6:66:67:b5:
47:23:10:1c:3d:6d:0b:96:9d:f2:76:6d:ba:79:37:5e:ad:6c:
fd:6a:f1:86:6f:e8:23:af:ec:c0:cd:92:b9:c3:94:47:8c:32:
44:67:c1:39:98:59:5c:97:90:29:fa:04:95:d3:43:bb:97:3b:
42:3d:99:49:4b:a5:5b:3f:d1:38:3c:3d:17:5b:48:bf:f8:61:
77:2a:7a:72:3f:d1:55:09:81:65:af:0a:04:f8:bc:96:35:48:
cf:3b:f7:92:ba:33:78:c4:13:a0:5d:75:9e:06:f1:af:ab:aa:
89:55:f2:d6:a0:c9:a9:b0:39:9b:37:40:97:96:dd:8f:4b:94:
5f:db:5a:8c:ca:25:f0:a3:a6:00:55:64:e5:9e:00:12:d6:0c:
d8:8c:41:46:6d:83:ed:97:ec:2d:94:be:93:66:99:75:4d:70:
08:01:72:8a:64:7c:1b:72:c3:aa:b6:52:b2:12:75:21:88:4c:
3f:cf:3a:80:af:b4:9c:dd:d3:fb:37:fe:8d:cb:74:f0:65:c0:
2c:b6:2e:f4:37:4c:29:87:e5:d3:de:33:a8:f3:9e:af:d5:97:
78:e6:b9:53:4a:4e:66:f9:4c:53:b6:d8:fd:41:6a:9a:6a:a2:
19:bc:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org