Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/jyVh5BeAhEOvbni_o2ITg9wvQdA.roa
File: jyVh5BeAhEOvbni_o2ITg9wvQdA.roa (raw, json)
Hash identifier: lzGj8dHPX0V5DgHbHo16AJEvJWh4+K3WAcOirX7uB4A=
Subject key identifier: 8F:25:61:E4:17:80:84:43:AF:6E:78:BF:A3:62:13:83:DC:2F:41:D0
Certificate issuer: /CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF
Certificate serial: 25
Authority key identifier: 86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/jyVh5BeAhEOvbni_o2ITg9wvQdA.roa
Signing time: Sun 01 May 2022 01:30:20 +0000
ROA not before: Sun 01 May 2022 01:30:20 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 9607
IP address blocks: 208.111.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF
Validity
Not Before: May 1 01:30:20 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=8F2561E417808443AF6E78BFA3621383DC2F41D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:35:dd:a5:14:63:36:76:f8:e8:47:39:94:
23:25:19:02:47:70:d4:a2:df:76:69:0d:24:a3:74:
28:16:6a:56:a5:dc:c2:1d:37:75:46:df:d0:24:7d:
39:2d:7c:3d:58:14:05:21:8c:3e:f0:8a:23:29:63:
96:b9:93:c5:02:dc:42:39:51:fe:c2:6e:e4:28:c7:
f5:0b:ce:8d:87:31:34:95:8e:5d:c2:7b:10:bc:e2:
3c:9f:6d:ce:74:9e:2f:1b:10:7c:a6:fe:ac:3d:58:
6d:a0:ca:52:0b:ae:3e:5b:71:03:e5:0e:7e:e3:70:
61:c1:e8:ac:85:fc:38:89:e1:98:d9:62:b3:9c:8b:
a0:84:e5:63:52:34:53:cb:2e:02:42:68:b0:24:9d:
c5:b7:5e:3b:9b:24:ac:16:6b:10:b2:4a:fe:bc:d3:
e6:48:bd:d8:78:45:fb:c0:23:15:0a:e8:1d:f7:39:
70:f1:87:94:77:24:eb:eb:5c:4c:ee:24:45:00:9b:
91:e7:b8:72:db:e0:d9:a1:2f:7e:69:ca:65:95:7b:
68:94:85:d1:fb:e3:be:70:e7:c0:bf:57:f3:7e:70:
6e:78:a0:26:e4:87:3c:b6:6e:a5:59:03:11:72:7c:
f2:06:b1:45:57:9d:ab:f3:86:ea:26:36:99:55:cd:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:61:E4:17:80:84:43:AF:6E:78:BF:A3:62:13:83:DC:2F:41:D0
X509v3 Authority Key Identifier:
keyid:86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/jyVh5BeAhEOvbni_o2ITg9wvQdA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
208.111.48.0/21
Signature Algorithm: sha256WithRSAEncryption
68:47:9f:0d:00:08:10:03:2e:88:73:26:9e:67:c3:41:e0:82:
28:1b:fd:55:d3:d4:e6:b7:53:3c:b0:db:8c:b6:f4:c8:c3:bf:
d6:fa:1f:73:62:2f:b8:86:e5:4e:2e:ff:8d:e8:2b:bb:68:6c:
b7:c8:ec:2a:4f:ed:6f:cf:3a:aa:b7:6b:d1:5a:b0:3a:0f:4c:
95:fb:57:99:33:9f:e6:2d:b5:76:fa:59:15:ce:d1:57:7b:53:
cc:b1:bd:55:ed:cd:2a:61:e2:97:c8:66:8a:ee:a1:ad:f0:31:
ec:0d:71:cd:51:b2:05:92:0e:58:7b:29:29:73:56:5e:58:cd:
6e:9f:e3:70:0c:7c:4d:4e:80:54:8c:83:d1:66:11:d6:62:e7:
17:65:6f:64:e7:85:1b:df:fd:6c:3e:58:95:c9:49:d1:4a:33:
55:fc:2a:21:c6:89:0b:4f:7c:4a:1f:ff:9d:c1:e6:35:08:fe:
eb:16:17:55:b1:e6:3e:5c:de:00:5e:c3:4a:e0:22:ab:56:f4:
82:72:f0:29:71:3e:29:c7:a7:32:ca:f2:70:2f:55:ef:84:e1:
44:02:0b:c4:f9:87:4f:df:81:2f:c3:42:20:f7:88:22:b5:51:
15:6c:83:bd:d0:c9:b1:2f:38:59:db:f3:a3:da:60:03:55:84:
55:c2:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org