Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/-A9SyfD1hmKQ2cJUkjia2s1j-HA.roa
File: -A9SyfD1hmKQ2cJUkjia2s1j-HA.roa (raw, json)
Hash identifier: 89TJ7JgwHd5wxqBYWBHaEcnsQA/SgeZ1ktqe0HJCY3I=
Subject key identifier: F8:0F:52:C9:F0:F5:86:62:90:D9:C2:54:92:38:9A:DA:CD:63:F8:70
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 33
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-A9SyfD1hmKQ2cJUkjia2s1j-HA.roa
Signing time: Fri 14 Jan 2022 05:21:38 +0000
ROA not before: Fri 14 Jan 2022 05:21:38 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 2527
IP address blocks: 209.17.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Jan 14 05:21:38 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=F80F52C9F0F5866290D9C25492389ADACD63F870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:03:01:95:4e:aa:08:5a:9e:fc:a2:26:ec:
41:c6:bb:de:70:b7:85:e1:32:3a:89:ea:24:c6:44:
fb:6e:66:40:e1:49:1b:d2:36:ea:4f:9e:42:5e:16:
73:4b:ca:37:df:36:5f:ee:4a:36:66:9a:06:ea:32:
0e:3b:74:25:2e:83:5a:55:29:34:1f:b5:ef:40:a0:
6a:d9:f3:b0:8c:0b:80:df:f3:76:72:d7:72:fd:55:
94:e0:bb:3d:c7:67:13:69:da:b5:fe:1a:af:09:a0:
99:1b:68:c3:a2:19:69:88:72:74:12:85:b9:b6:7f:
9d:8a:4b:51:5d:1c:f4:28:1d:ef:2e:0b:e2:aa:12:
42:90:36:3d:bc:e1:67:4a:7f:dd:7d:c6:40:4a:c5:
56:5c:aa:0d:d8:38:a8:37:32:ca:6b:bb:ed:05:8b:
39:0a:7a:1f:b1:1b:17:0d:fb:89:32:39:5b:c4:24:
25:3b:c8:88:95:74:1a:d0:bb:84:eb:8e:3e:47:89:
d8:41:bf:b6:48:8f:e0:a3:29:4b:41:fe:ca:5f:f0:
df:02:8c:19:1a:30:c6:4c:78:13:30:fe:22:02:a6:
43:83:c4:48:bb:7a:d2:c6:43:8d:6f:d2:f7:45:39:
a8:69:42:bf:68:fc:60:e0:4c:8d:b1:eb:bc:1c:a8:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:52:C9:F0:F5:86:62:90:D9:C2:54:92:38:9A:DA:CD:63:F8:70
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-A9SyfD1hmKQ2cJUkjia2s1j-HA.roa
sbgp-ipAddrBlock: critical
IPv4:
209.17.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d2:83:e8:0b:58:ee:16:5d:aa:81:18:ad:19:f7:d0:29:36:26:
62:4b:7b:cd:0a:e4:2e:cf:b4:e9:8b:12:61:9d:81:d2:14:11:
a8:75:7f:36:dd:73:5e:f5:a3:b4:d7:7b:82:83:d7:79:43:27:
2e:de:b2:46:37:e7:48:91:30:9b:82:fa:d5:67:df:a5:0f:a6:
05:7a:59:df:78:a9:1e:9f:43:ba:03:ec:72:39:e3:90:ae:78:
df:a5:e3:15:c6:ce:66:fb:92:3c:07:1f:99:db:a3:33:49:ab:
78:ad:64:8c:d7:f7:65:08:fb:e6:fa:17:35:33:7d:96:f9:70:
50:d9:38:e8:09:5d:61:40:56:8a:26:9a:2f:6c:41:4c:81:9d:
28:53:7e:f7:29:1e:fb:01:c6:69:b6:99:84:70:c0:34:f6:0c:
ab:1b:eb:cd:bc:41:50:8f:fb:aa:19:90:b0:0e:6d:d6:6f:01:
0f:74:f4:a9:3f:88:7b:4f:63:a5:cc:fc:15:93:39:10:32:fe:
fc:7b:c2:c9:dc:9d:b8:99:b9:c2:0d:4f:91:f8:53:24:5f:a8:
bc:56:2d:f9:a3:98:1d:3a:15:db:ab:a9:bc:f9:22:fd:25:b3:
a9:49:32:7e:b2:bd:d3:a1:d6:7c:be:cc:08:71:a6:bd:14:e5:
f7:42:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org