Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/1RySXEbHpISZwxsTDUFLiDvrnm0.roa
File: 1RySXEbHpISZwxsTDUFLiDvrnm0.roa (raw, json)
Hash identifier: OYOyBN7GOAJFx+DXpi1agYxRnzMK8cQHrpeDFOpvDao=
Subject key identifier: D5:1C:92:5C:46:C7:A4:84:99:C3:1B:13:0D:41:4B:88:3B:EB:9E:6D
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 3C
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1RySXEbHpISZwxsTDUFLiDvrnm0.roa
Signing time: Tue 01 Feb 2022 01:31:18 +0000
ROA not before: Tue 01 Feb 2022 01:31:18 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 143.189.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 1 01:31:18 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=D51C925C46C7A48499C31B130D414B883BEB9E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:a9:e9:57:ff:36:9e:e4:62:9f:39:b3:da:
cc:bb:95:b2:92:6c:9f:ec:f1:10:4a:78:28:fc:ea:
47:b1:a2:ea:95:fc:b6:60:e0:15:a3:97:99:88:89:
33:62:59:6c:c1:ef:e6:fd:89:79:9f:72:e9:2d:e8:
de:f8:ff:01:2b:42:b8:89:93:cf:cd:08:4c:aa:79:
32:0a:2c:ff:37:68:c7:97:41:79:cd:e8:47:f4:1b:
89:79:dc:77:a3:fe:d3:05:4d:18:94:6a:16:b3:dc:
4d:a7:b1:31:6a:81:54:22:4e:e8:42:33:af:6d:96:
11:e4:a8:7a:1c:8e:b3:81:0e:d5:25:6d:c4:fb:cd:
f2:c6:4d:d1:ec:f3:21:17:d4:a9:3c:65:3b:84:ef:
59:bf:fc:2c:4b:94:2c:ec:c8:bd:fd:f0:07:35:05:
d0:b2:4a:5e:7c:92:9b:f1:c2:ee:8b:ae:79:59:f7:
b2:c9:d6:d8:53:c2:76:12:5a:fb:e9:f4:58:09:dc:
49:8c:47:56:19:20:31:96:a0:dd:3e:e6:90:9f:de:
72:64:9b:ff:4b:0b:89:14:9c:13:c2:bd:77:ef:16:
b6:da:a4:a8:47:91:36:82:1f:a9:ed:4c:db:d1:22:
da:7d:6c:0f:82:18:b4:ef:87:12:43:0a:4c:51:b6:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:92:5C:46:C7:A4:84:99:C3:1B:13:0D:41:4B:88:3B:EB:9E:6D
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1RySXEbHpISZwxsTDUFLiDvrnm0.roa
sbgp-ipAddrBlock: critical
IPv4:
143.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:01:c5:de:2b:48:ed:71:83:c4:a6:90:7d:94:5d:a1:e6:66:
25:be:07:f8:a2:91:fd:6e:9f:95:f4:77:75:3b:30:4b:1c:41:
4d:1c:fb:13:c6:d2:19:87:51:3b:98:68:39:41:2d:13:32:6c:
6c:83:1b:50:d4:ec:1b:ff:27:b7:cb:fd:e1:e8:9d:02:67:ae:
0d:21:0e:08:16:99:37:52:8a:54:96:89:21:58:84:aa:4a:b8:
3a:c2:e4:a0:70:07:4c:f2:1c:7f:76:8e:f2:90:f5:62:f4:dd:
77:9e:ee:99:e2:26:93:a1:39:c3:1a:3c:d7:4b:81:4f:d4:de:
df:40:31:4b:1d:28:a1:85:d1:e9:19:a4:cd:8d:0f:bd:c2:30:
80:1e:8d:c3:fe:a3:ac:da:25:ae:76:15:66:9d:b2:61:85:c8:
a0:d5:ae:7b:0c:14:63:d1:1c:04:64:2d:46:f2:43:2e:98:39:
e3:3d:ac:00:b5:a2:0d:3b:d3:88:76:bb:d9:15:b5:8e:8c:9b:
6e:c5:dd:71:84:ff:4d:b2:a4:19:d8:b0:48:cf:1e:50:57:48:
51:24:a7:f5:b6:d0:5e:50:dd:13:d0:58:12:28:b8:e4:a9:fb:
00:a7:e6:f7:f1:b7:6c:fa:98:2c:06:4d:b2:44:ad:21:63:dc:
79:a0:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org