Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/lbZC4eQkhCUKuBQWCMmD7yHmHJ0.roa
File: lbZC4eQkhCUKuBQWCMmD7yHmHJ0.roa (raw, json)
Hash identifier: Vv4f8GklNIH6D3ZxtA7Jcrm/0rWOoUkP4eWIPC1WFls=
Subject key identifier: 95:B6:42:E1:E4:24:84:25:0A:B8:14:16:08:C9:83:EF:21:E6:1C:9D
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 9A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lbZC4eQkhCUKuBQWCMmD7yHmHJ0.roa
Signing time: Fri 22 Jul 2022 06:35:48 +0000
ROA not before: Fri 22 Jul 2022 06:35:48 +0000
ROA not after: Fri 21 Jul 2023 04:07:13 +0000
asID: 10013
IP address blocks: 220.215.42.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 22 06:35:48 2022 GMT
Not After : Jul 21 04:07:13 2023 GMT
Subject: CN=95B642E1E42484250AB8141608C983EF21E61C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:0b:70:ce:89:60:97:a8:9f:b0:53:48:58:
9f:cb:13:db:5a:1f:30:7e:f5:c8:1b:ca:89:8d:1b:
77:bb:50:0f:b5:ac:75:fa:06:7f:bc:36:20:3d:f8:
c5:dc:66:17:f5:f8:20:b4:0b:85:7f:0c:0f:ad:6d:
32:60:79:20:34:1c:25:10:df:02:37:9e:8a:a5:40:
c9:53:c6:93:da:67:9a:79:f3:8f:91:15:7e:0c:2a:
67:f0:54:ef:40:e9:ed:eb:70:34:55:72:1d:89:a4:
a4:ac:9f:46:b7:46:66:60:8c:5b:d9:78:c4:62:3e:
96:10:71:1f:6c:f6:92:1e:73:da:b3:9c:a9:30:51:
a2:49:7c:5d:28:5f:51:90:ba:7e:f6:d4:b8:56:9a:
f7:75:52:e0:4e:d7:ea:e2:02:ec:0d:b5:70:d6:c8:
e6:af:7b:23:db:c2:19:fd:7d:be:d2:e5:18:d8:d1:
af:66:56:43:17:f7:1b:a0:57:25:67:7d:ed:66:cf:
8c:c6:43:26:ea:0e:5d:c6:a0:5f:2e:0c:08:a1:f9:
45:3a:62:62:0a:0a:38:80:39:14:04:9d:d7:19:f8:
fa:9d:04:f4:78:f7:96:b0:ef:c0:7e:06:bc:5d:3f:
37:ae:c2:4b:7a:8a:b1:e3:e3:2a:d6:d2:90:56:c9:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B6:42:E1:E4:24:84:25:0A:B8:14:16:08:C9:83:EF:21:E6:1C:9D
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/lbZC4eQkhCUKuBQWCMmD7yHmHJ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.215.42.0/23
Signature Algorithm: sha256WithRSAEncryption
62:8c:44:b7:1c:a3:ea:8b:93:d8:54:de:de:c6:d3:44:47:2c:
9b:35:14:4d:af:46:7e:94:ed:cc:7f:91:de:2f:f4:5c:82:0b:
5e:ed:c2:35:2b:a0:c1:5e:4d:7e:cb:e4:52:3e:f6:1b:11:8e:
b0:f1:00:9d:25:ed:5c:df:fb:a1:95:8b:31:71:f1:50:dd:35:
ad:c1:e9:78:be:d0:5e:4b:10:2e:a1:50:82:87:28:d2:b3:9d:
5e:ca:08:23:d6:58:38:38:f2:d3:c1:6a:59:27:49:49:1b:2e:
9a:a4:3c:a0:8b:2c:5c:fc:11:2c:45:e9:6d:03:dc:9d:3e:67:
11:44:36:dd:43:01:1c:39:2f:f8:a5:14:59:59:a3:f8:41:34:
7c:a0:8c:dd:09:dc:01:90:24:36:71:ab:4f:0a:78:0f:d2:ea:
68:91:dc:3f:78:04:5c:1b:d8:f2:22:5b:67:97:1c:8a:8e:84:
df:f4:e0:5d:9d:d6:ce:bc:71:f3:a0:08:3d:04:ba:3e:bf:5f:
67:23:25:31:eb:c0:1c:41:37:85:f5:29:11:bb:87:de:a4:b7:
f0:d3:88:19:20:78:4d:b3:2c:81:31:63:3a:5c:63:10:77:41:
52:f7:24:95:59:89:b5:c6:1a:48:be:78:2c:6c:db:67:40:a5:
5c:22:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org