Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/8skxOSE0NABDr0fkP2PjgDyGWxY.roa
File: 8skxOSE0NABDr0fkP2PjgDyGWxY.roa (raw, json)
Hash identifier: Jpzd//flmjLM+ei6rBJBMv64QOYMa0rqV1hmur75mB4=
Subject key identifier: F2:C9:31:39:21:34:34:00:43:AF:47:E4:3F:63:E3:80:3C:86:5B:16
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 9C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8skxOSE0NABDr0fkP2PjgDyGWxY.roa
Signing time: Tue 01 Feb 2022 01:31:50 +0000
ROA not before: Tue 01 Feb 2022 01:31:50 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 198.144.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:50 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=F2C931392134340043AF47E43F63E3803C865B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:d8:30:51:95:d3:1e:21:3b:b3:7f:96:a4:
1d:d3:b2:2e:28:eb:9f:d0:dd:b4:cc:6a:53:a7:f6:
66:3f:3c:df:95:95:71:73:b1:3f:f2:49:40:ed:cd:
3f:ec:19:4f:a5:30:dd:87:8d:e8:ef:c2:1a:41:a3:
9c:34:14:d3:32:cb:72:76:4d:ba:9a:93:e3:d6:15:
7a:6c:48:4b:dc:3d:af:5e:02:0e:ba:2f:47:92:1b:
6d:60:93:70:63:fd:05:66:00:43:e9:35:40:61:ad:
da:ea:36:93:06:2b:74:a6:a7:84:9b:04:1e:9c:1b:
cf:aa:34:c0:f3:c4:45:51:2c:c5:6f:a2:64:aa:0a:
1d:9a:4b:a1:b3:a8:94:f8:fe:c3:a8:eb:32:26:c1:
72:8c:12:ca:e0:fd:91:b4:6b:fb:99:97:20:b7:87:
ec:dd:28:20:a1:83:7d:f7:eb:88:5d:88:4a:17:be:
45:7d:0b:c4:d6:5c:6e:78:7d:cb:3b:c6:16:77:46:
14:09:a2:32:53:c0:ed:a0:1e:50:0e:27:76:a3:08:
94:cd:7a:91:c6:18:11:d5:b3:17:f7:54:29:43:25:
01:03:4a:34:62:25:da:51:25:d5:7b:68:aa:33:58:
38:08:57:40:de:83:11:8f:e4:4c:16:d7:82:d4:8f:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:31:39:21:34:34:00:43:AF:47:E4:3F:63:E3:80:3C:86:5B:16
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8skxOSE0NABDr0fkP2PjgDyGWxY.roa
sbgp-ipAddrBlock: critical
IPv4:
198.144.160.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:02:1d:0b:83:fa:80:79:80:d5:5d:6e:e6:cb:77:1f:e8:58:
8f:51:00:b0:26:74:aa:d7:76:08:30:ce:d5:aa:18:3a:48:73:
4b:bf:d1:93:1c:7e:80:8f:77:60:7f:6c:7d:15:5a:c8:bc:0d:
25:9a:39:7f:9b:59:cb:31:1b:20:78:ef:52:2a:8a:52:56:62:
32:8e:c0:79:fe:59:d3:10:17:91:95:c9:1e:2a:5d:8c:08:5e:
73:8c:28:5c:a3:c9:3c:66:1f:24:52:58:eb:8b:9b:f3:4a:20:
08:4e:01:f6:ee:aa:06:36:0a:b3:ef:c6:f1:6c:d6:a3:1a:f4:
db:70:5b:61:3a:08:66:ca:2a:31:46:04:8a:4a:7f:ac:93:6d:
09:c5:79:34:fa:31:4a:4d:be:4a:61:56:e7:a0:d8:36:74:d5:
58:c1:3c:5f:37:99:59:a1:d8:f1:d4:bc:40:82:42:48:83:ce:
ab:11:96:34:61:60:00:e2:77:e5:a5:f2:b8:c7:a7:2b:a8:2e:
cc:99:26:3d:d1:dc:9e:51:30:40:93:1a:2c:75:e2:17:40:74:
8f:2f:e9:76:69:3b:ee:cf:ca:c8:f9:6f:4d:9f:2e:b4:9e:93:
ee:e0:d2:e9:46:f2:db:25:36:21:89:af:4f:26:c2:0f:c3:85:
5a:0f:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org