Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/oXvEhbwXpTFqCWTEKNWzlA5EVwA.roa
File: oXvEhbwXpTFqCWTEKNWzlA5EVwA.roa (raw, json)
Hash identifier: QUC0dvZemFfVBZ0Qy3L7DE4v4PdCQPJ+C7OebQ0n7jA=
Subject key identifier: A1:7B:C4:85:BC:17:A5:31:6A:09:64:C4:28:D5:B3:94:0E:44:57:00
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 60
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/oXvEhbwXpTFqCWTEKNWzlA5EVwA.roa
Signing time: Thu 09 Sep 2021 02:27:23 +0000
ROA not before: Thu 09 Sep 2021 02:27:23 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9607
IP address blocks: 124.147.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 9 02:27:23 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=A17BC485BC17A5316A0964C428D5B3940E445700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:94:e2:c9:fc:66:65:05:70:06:97:32:83:
eb:2f:aa:71:f0:92:ba:df:06:e1:d6:76:a2:3e:88:
ee:b1:98:1b:e6:a7:e8:ee:5f:2d:b3:4a:10:83:3a:
80:04:9e:3b:f0:31:a3:1d:14:a5:9e:53:44:44:72:
85:39:29:89:ce:66:06:72:0c:18:98:05:fe:1e:53:
96:3c:66:cb:96:95:d1:b9:86:01:70:36:19:0e:6f:
db:af:90:a7:a7:4d:48:9f:df:52:0b:3b:70:68:8a:
da:00:18:fb:24:60:77:a4:58:63:58:f7:35:09:8d:
6c:b8:b7:3f:7b:3f:2c:da:23:3d:44:d7:31:82:5f:
75:17:5b:af:ae:f2:6b:2b:51:a3:61:1e:f0:65:04:
c9:e3:32:46:0d:d5:7d:e8:70:e6:9f:89:77:85:2c:
1d:a7:3b:40:69:7c:44:ab:08:3b:c9:a9:56:46:ca:
bb:b7:3c:87:df:ec:60:26:5f:57:c1:e2:59:d3:1e:
a0:bd:b2:b0:05:18:ed:18:19:cd:cf:c4:f8:0d:ed:
4c:a7:aa:ad:eb:04:9f:eb:ac:27:18:db:ab:0e:ff:
a0:ff:59:89:2d:45:76:6e:2f:c0:ef:b7:20:bf:20:
c1:e2:99:8a:8d:d6:2f:58:cc:c7:57:a0:f2:fa:10:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:C4:85:BC:17:A5:31:6A:09:64:C4:28:D5:B3:94:0E:44:57:00
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/oXvEhbwXpTFqCWTEKNWzlA5EVwA.roa
sbgp-ipAddrBlock: critical
IPv4:
124.147.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:fa:9b:5d:1e:9a:23:7a:55:5d:1b:55:14:11:ec:cb:3f:ab:
5f:68:3b:c1:c2:88:60:72:78:64:b9:a1:48:2e:b6:17:5f:ae:
76:72:41:66:68:47:e9:12:7b:f2:cd:8c:46:61:b5:64:ff:aa:
b5:12:11:67:6b:39:ad:d9:4d:04:f6:57:e5:5d:e0:82:3f:bb:
c5:7e:19:01:b0:28:a9:a0:11:2e:b9:38:91:8a:11:14:27:c2:
7d:77:11:53:9c:c8:c0:51:13:42:2c:1b:62:9b:1a:4f:20:51:
4f:ea:c6:34:88:9f:6a:2b:e8:26:c7:92:a2:f1:42:e2:a8:a3:
2e:94:ce:7b:d8:4b:17:05:cf:b5:74:02:90:ff:31:dd:bd:69:
03:de:0f:cb:e6:12:35:75:0a:d4:97:d4:90:2c:d1:58:e2:2f:
e4:d3:b7:96:d7:15:db:fd:8a:c4:4c:5a:1f:3c:48:f5:74:f8:
8f:cc:6f:da:58:3e:28:8e:44:1f:f7:c9:7f:33:40:02:f4:9f:
9b:31:d1:35:6f:e8:90:08:22:0a:80:d9:de:40:c7:37:aa:af:
31:2a:05:42:6a:93:64:64:40:b2:80:ba:6f:d6:f7:2b:f5:3f:
12:4d:21:58:a7:0c:40:21:57:3b:58:88:dd:7a:e6:b3:b2:65:
b4:a4:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org