Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/A9tnquI6yA2CtrF2yLXcmbwin54.roa
File: A9tnquI6yA2CtrF2yLXcmbwin54.roa (raw, json)
Hash identifier: oSKxXWnJApSRYSQ0Po9jJRk4dp0tQl/5CAOC5JyauVo=
Subject key identifier: 03:DB:67:AA:E2:3A:C8:0D:82:B6:B1:76:C8:B5:DC:99:BC:22:9F:9E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 8C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/A9tnquI6yA2CtrF2yLXcmbwin54.roa
Signing time: Tue 01 Feb 2022 01:31:18 +0000
ROA not before: Tue 01 Feb 2022 01:31:18 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 219.98.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:18 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=03DB67AAE23AC80D82B6B176C8B5DC99BC229F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:0f:f1:b2:4a:f7:b5:77:c4:2d:50:31:ec:
33:2d:b5:b5:2d:c5:b7:a5:5e:3e:df:1c:58:93:df:
a6:bb:ca:72:01:31:f4:f6:c4:b4:75:d8:00:5a:69:
b2:f8:67:01:c0:dd:3e:72:76:65:c9:53:87:12:6f:
8a:97:be:94:be:74:24:c6:99:59:88:56:17:3d:81:
4d:70:5b:a4:ae:67:d2:75:3a:05:df:49:1a:d0:07:
c6:20:f4:4f:0e:45:db:74:92:4b:91:16:58:92:71:
07:ec:e6:d0:67:70:39:39:c0:39:7b:55:28:f1:7f:
59:79:72:ae:9c:27:28:e6:67:c5:7d:ec:97:67:b5:
10:1a:7a:dc:39:44:87:bc:d0:df:2e:45:ca:2a:4f:
93:11:19:cf:d1:b1:00:80:65:2d:87:c8:4c:a7:30:
0c:14:52:ba:82:22:62:a9:cb:19:25:7a:68:31:55:
d7:e2:ed:81:27:06:c1:a8:a3:a6:e4:c5:cf:6c:34:
f7:47:25:18:61:11:c4:12:f1:0f:ec:ee:0d:0e:45:
af:a9:1d:3a:3b:8d:d4:f0:88:82:06:84:da:18:ef:
c6:19:b2:64:51:63:e0:20:8f:19:ff:18:81:83:c6:
95:63:b1:14:41:17:3f:81:9f:a9:59:0f:19:2f:fc:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:67:AA:E2:3A:C8:0D:82:B6:B1:76:C8:B5:DC:99:BC:22:9F:9E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/A9tnquI6yA2CtrF2yLXcmbwin54.roa
sbgp-ipAddrBlock: critical
IPv4:
219.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:5d:b3:7e:2a:e5:27:77:12:be:5c:46:98:d7:58:e9:f1:28:
a8:dc:4c:b6:5c:35:51:43:2c:78:18:d7:34:df:cd:b1:1b:97:
55:52:9a:20:f1:76:d5:ea:c6:05:50:e0:04:76:7c:ac:43:83:
8b:c0:4f:8f:de:68:26:c8:50:61:e6:c6:71:94:25:2f:1e:42:
50:db:34:a6:53:b5:83:37:0f:7a:1c:78:d6:ea:03:84:3e:8e:
a5:96:4e:6e:95:d6:84:b7:5a:55:bd:b9:16:79:18:39:25:1a:
6f:49:a4:50:f2:f8:c6:85:de:90:59:98:b3:43:5e:7d:9f:be:
00:f6:5c:b6:d7:53:87:43:7f:a1:3b:e4:c7:3f:ce:f7:e1:8b:
a5:79:77:c7:3c:5c:fe:cb:d8:fd:ed:7e:48:7f:cd:d0:60:d6:
a6:34:29:3c:50:d0:b1:aa:c1:7c:75:e2:ce:cd:f4:82:95:77:
87:28:23:5b:4b:b6:20:c5:af:4e:7b:0f:bc:a8:b3:30:95:34:
c2:7e:7f:66:e8:96:b2:4c:6f:07:1d:3c:69:28:22:9c:bb:19:
ae:8b:aa:79:48:0f:53:1c:d3:d3:63:23:3b:2f:33:1a:0d:b2:
c6:89:00:1c:63:94:6b:21:54:f2:bc:0c:a4:cf:c9:da:62:a8:
8d:3f:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org