Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/9LIKzRv7R6YDCfKcgJ78Y9tEwEM.roa
File: 9LIKzRv7R6YDCfKcgJ78Y9tEwEM.roa (raw, json)
Hash identifier: KlsKGMg7t/30U3DZv422xgYvC7wsvZLRtqOSuxtvzBg=
Subject key identifier: F4:B2:0A:CD:1B:FB:47:A6:03:09:F2:9C:80:9E:FC:63:DB:44:C0:43
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 61
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/9LIKzRv7R6YDCfKcgJ78Y9tEwEM.roa
Signing time: Thu 09 Sep 2021 02:27:23 +0000
ROA not before: Thu 09 Sep 2021 02:27:23 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9607
IP address blocks: 124.147.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 9 02:27:23 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=F4B20ACD1BFB47A60309F29C809EFC63DB44C043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:71:da:9b:f5:1d:93:59:e1:00:86:78:c6:
f9:ed:7c:42:73:9f:ca:e9:bb:12:cc:e9:62:6b:22:
5e:e1:ab:d1:21:ee:dc:be:97:df:69:d5:a8:48:e2:
c2:15:2b:3c:68:66:ed:f3:c3:1f:87:46:1d:71:9e:
34:43:b1:de:6d:e0:05:2e:11:84:0f:24:95:6a:1e:
53:c2:d6:06:aa:23:25:a4:b7:6e:bd:46:91:db:5f:
56:81:65:0d:41:58:11:02:07:9d:3a:6a:4c:f2:c2:
54:8a:9a:62:23:60:8a:b5:7f:85:fa:dd:0a:fe:40:
e2:53:7b:1c:17:f0:70:9f:17:92:1f:8e:9f:fe:e8:
0a:ab:83:ba:b3:41:7b:91:3f:56:cc:7f:fd:cb:84:
f5:8c:74:21:bc:60:b6:81:92:ef:f5:d7:e6:56:96:
3d:83:91:6a:3c:e7:b4:8d:97:36:56:b7:5f:2a:4e:
78:c8:ab:42:bd:77:25:ae:99:73:c1:83:25:99:2a:
f9:32:b6:86:42:83:b3:35:e5:42:cd:ff:7c:6c:67:
92:ee:3d:37:5a:1d:e2:8a:40:b8:7e:d8:df:8d:b1:
a1:32:bd:47:77:28:86:69:e3:4f:f7:36:07:bb:1a:
e8:4d:03:12:f3:b7:94:df:c9:c0:9f:15:10:a9:c7:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:0A:CD:1B:FB:47:A6:03:09:F2:9C:80:9E:FC:63:DB:44:C0:43
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/9LIKzRv7R6YDCfKcgJ78Y9tEwEM.roa
sbgp-ipAddrBlock: critical
IPv4:
124.147.0.0/20
Signature Algorithm: sha256WithRSAEncryption
71:00:ec:b9:60:1d:49:09:54:7d:05:ab:45:e6:2b:d5:a2:93:
6a:f0:2a:85:47:58:f4:13:db:b0:59:62:92:52:e3:7e:1c:c5:
41:02:87:60:96:3f:de:b7:3c:73:a8:f5:43:fb:c9:9f:22:cd:
d9:0e:41:1c:01:56:26:59:0c:57:24:10:33:ed:50:84:98:6f:
ef:70:bd:34:93:c1:f1:08:49:13:64:13:c6:17:dc:21:7e:f2:
36:04:e5:5d:d1:1b:a5:2b:7c:a8:c6:25:73:c7:10:87:87:99:
b8:dc:ba:18:6d:26:c3:a4:92:0e:6b:14:ce:a6:a4:4d:59:a7:
c9:5c:71:15:84:d9:f1:d7:b9:58:6e:2f:6f:b2:a5:8f:d8:25:
94:ec:68:f7:ff:fe:65:7e:f5:20:5d:a6:70:df:28:b3:1f:0d:
03:6a:5d:88:7d:d2:e8:24:fd:ee:e6:f6:42:95:d9:17:01:a2:
ac:5e:5a:26:75:fa:89:5f:6f:3d:d2:80:dd:6f:fd:32:18:3f:
36:d6:8f:83:78:5c:dd:a8:40:cc:c7:fd:16:cb:36:27:e1:95:
f3:00:03:b5:36:29:ff:72:09:ef:1f:14:0b:46:b2:3b:70:9c:
7a:8d:21:11:c6:5a:ff:cc:24:cf:13:70:2f:64:30:04:d7:d1:
4f:a9:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org