Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/k5WONVaKY-V2GUujVS5Lzafji6I.roa
File: k5WONVaKY-V2GUujVS5Lzafji6I.roa (raw, json)
Hash identifier: cGvNkmv84HsQQM/sSPavIbIFddHRC1/Bf52h/n+Jmdo=
Subject key identifier: 93:95:8E:35:56:8A:63:E5:76:19:4B:A3:55:2E:4B:CD:A7:E3:8B:A2
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: FC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/k5WONVaKY-V2GUujVS5Lzafji6I.roa
Signing time: Wed 24 Aug 2022 08:02:20 +0000
ROA not before: Wed 24 Aug 2022 08:02:20 +0000
ROA not after: Tue 15 Aug 2023 01:30:03 +0000
asID: 10013
IP address blocks: 153.120.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Aug 24 08:02:20 2022 GMT
Not After : Aug 15 01:30:03 2023 GMT
Subject: CN=93958E35568A63E576194BA3552E4BCDA7E38BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:30:6b:64:9f:55:b5:4e:a2:b6:78:76:9a:
3d:e7:d6:a2:1f:25:15:46:de:3a:2e:40:49:fd:e8:
ca:bf:0e:2d:79:82:5b:30:23:f8:e5:f3:8d:85:b9:
a7:ca:7d:d6:b4:9f:67:77:65:22:fb:69:1c:fb:9e:
47:4f:a9:bb:c6:75:4d:a3:d1:68:bb:75:0a:7d:f4:
f6:8d:37:34:e1:c6:5d:fa:7b:78:45:6e:98:ae:0a:
79:4a:33:35:93:69:fc:26:d9:8a:d4:12:6b:b6:b3:
f6:2f:b9:d9:06:60:b1:fa:ab:42:ae:38:dd:0f:76:
b0:83:64:73:47:7c:ba:d5:91:44:23:3d:6d:f4:09:
d6:08:34:66:d5:94:25:16:22:09:4b:7e:51:3f:c2:
89:75:a1:84:15:05:0f:ec:87:f4:2e:93:9b:74:0b:
c8:8c:d9:93:f5:41:4e:8e:be:24:da:39:78:9b:8b:
89:13:70:ec:4a:fa:73:73:3d:8b:0f:1a:ed:a6:49:
fa:f4:fb:e1:f2:1a:d2:70:14:a6:32:71:96:f6:f8:
4d:6f:ad:fe:25:29:e4:fb:a4:8c:91:51:79:7c:13:
1b:fd:0a:28:ef:dd:c2:4f:bc:fe:7c:d9:f5:98:c6:
c6:20:3b:65:a4:8c:ea:08:dc:f0:12:cd:09:32:96:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:8E:35:56:8A:63:E5:76:19:4B:A3:55:2E:4B:CD:A7:E3:8B:A2
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/k5WONVaKY-V2GUujVS5Lzafji6I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.120.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:1e:5e:b7:89:4c:14:18:46:5a:1d:a2:fb:ca:5c:f3:2f:da:
82:8e:b7:d2:2a:b7:73:f3:5e:b0:26:60:9f:e1:02:b5:2d:dd:
b9:8a:93:15:23:fa:43:a5:63:71:39:d6:fd:e9:42:69:67:2b:
e1:7b:5d:0a:46:00:44:a5:16:4f:fb:1c:15:e1:b1:f4:36:b8:
8c:22:1f:93:43:ea:04:e1:99:ab:b0:79:c1:81:33:a5:33:3f:
00:ec:22:47:35:ae:a3:e3:31:7b:93:b4:a1:d4:a2:79:f3:85:
18:a6:ac:89:d3:a6:65:92:47:a7:cb:32:71:01:3b:d9:2b:c1:
ad:90:94:3e:01:15:af:b6:ea:23:b8:c5:2e:ec:c3:89:da:1d:
77:f2:bf:09:7e:12:db:85:44:e6:e1:ce:4b:82:d2:cc:76:ee:
28:9f:58:72:be:43:34:f8:8b:92:3e:05:8a:96:96:5b:71:52:
4a:96:0d:42:e9:9c:ba:c4:8f:5d:53:8d:36:3f:0f:a0:35:5a:
be:46:87:30:a7:fc:b8:4c:b6:13:44:27:90:e7:39:55:32:2f:
42:f9:d7:a7:5c:cc:1f:06:fa:5c:3d:51:ee:16:7a:98:d1:d6:
fa:f0:21:db:58:f7:e5:6a:d8:0b:e3:6e:bd:98:63:df:27:9f:
93:99:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org