Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/1SY6HRRZ0cwwjX_YQRpVU6tBGT0.roa
File: 1SY6HRRZ0cwwjX_YQRpVU6tBGT0.roa (raw, json)
Hash identifier: e7IUtR3t7XgkpIDqtqdGMnVVsMv0kgS0j7o7aguAbYg=
Subject key identifier: D5:26:3A:1D:14:59:D1:CC:30:8D:7F:D8:41:1A:55:53:AB:41:19:3D
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 65
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1SY6HRRZ0cwwjX_YQRpVU6tBGT0.roa
Signing time: Tue 23 Feb 2021 08:57:43 +0000
ROA not before: Tue 23 Feb 2021 08:57:43 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 150.249.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:43 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=D5263A1D1459D1CC308D7FD8411A5553AB41193D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:1c:75:c7:25:f7:f7:fd:cb:61:52:d6:c9:
70:99:2d:13:39:cb:7b:71:21:17:99:dc:bc:c3:0e:
9a:67:89:e7:05:bc:18:2c:52:44:ad:ac:aa:73:95:
7f:4f:51:3b:73:ef:d7:b4:7b:f8:70:10:f7:1b:e2:
2d:96:15:60:62:ae:7c:eb:21:28:56:3e:87:fb:90:
65:ed:08:59:7d:bb:34:fe:67:55:ab:02:79:30:35:
a5:79:7d:56:57:cd:27:e1:ce:59:e3:bf:b3:41:73:
28:8d:b2:db:c0:6c:7f:27:5c:ab:d3:89:ad:10:e5:
fc:2b:e1:78:2f:30:49:e0:a5:c8:5f:21:57:12:52:
ff:4f:56:2c:2e:08:58:f8:4e:ae:04:72:dc:96:36:
9d:b0:d1:ed:4e:f9:67:1d:73:33:56:7b:5f:93:72:
0e:1a:19:83:51:6d:37:5e:e2:27:79:e9:ed:8d:25:
19:bf:3b:63:11:11:1d:a0:20:65:aa:3c:85:ff:4a:
e7:2f:9f:77:9a:70:70:72:0a:10:ab:71:83:5d:6b:
0f:2d:28:e7:75:1e:e3:dd:8f:07:21:68:92:48:15:
49:5f:2e:89:4e:36:86:f7:0f:33:56:86:88:27:e5:
32:c6:85:89:62:f1:70:39:2e:02:23:e0:84:32:99:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:3A:1D:14:59:D1:CC:30:8D:7F:D8:41:1A:55:53:AB:41:19:3D
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/1SY6HRRZ0cwwjX_YQRpVU6tBGT0.roa
sbgp-ipAddrBlock: critical
IPv4:
150.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:b2:19:91:b8:58:74:02:d2:59:46:22:96:c0:dc:d4:63:20:
fb:aa:c4:48:e2:31:fc:61:be:cc:70:ff:c6:60:a5:a9:cd:ef:
77:5a:6a:75:4e:86:17:c5:0a:ca:17:5b:f1:d5:89:66:de:1e:
51:24:d6:74:8a:3a:fa:8c:fb:92:ed:fd:f4:68:15:1a:02:4b:
9d:74:a5:4e:14:4b:e7:49:3a:ad:21:70:86:3c:c2:a6:6c:cd:
ff:f3:10:d7:74:c6:a6:85:62:a5:42:8b:f9:c4:df:08:08:88:
53:73:e2:fc:07:8f:43:9c:3e:86:aa:4a:8a:45:bb:32:a7:ef:
3e:fe:c8:9d:8b:d5:e8:6f:c4:35:59:c4:70:28:4d:fc:bf:7e:
ed:9b:20:c0:a9:78:e8:87:ea:0d:cc:62:21:87:c8:6c:03:9e:
81:5d:fd:9a:7a:2f:ea:7b:f4:05:9d:b7:e3:6f:c9:97:84:65:
90:c4:53:d3:f3:6d:85:a1:2d:28:c7:0e:b6:c5:f9:31:6d:6e:
22:a9:ff:66:4d:25:b8:98:a7:52:a0:59:e0:5c:34:ee:0b:1f:
f5:9f:fd:c3:c5:f5:6b:9a:04:6d:ca:6f:8b:d6:fc:b6:e4:b1:
7d:cb:d3:98:2c:03:2d:de:b6:c7:f1:cf:63:79:ad:0b:7c:fe:
65:60:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org