Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BF0-e-7ScHOEXhtKe9Y2aoD5g34.roa
File: BF0-e-7ScHOEXhtKe9Y2aoD5g34.roa (raw, json)
Hash identifier: RfOYjv7mVdGk7z9ZVozKTRofQUCLuJRKrgcQdYUa2zI=
Subject key identifier: 04:5D:3E:7B:EE:D2:70:73:84:5E:1B:4A:7B:D6:36:6A:80:F9:83:7E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 60
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BF0-e-7ScHOEXhtKe9Y2aoD5g34.roa
Signing time: Tue 23 Feb 2021 08:57:42 +0000
ROA not before: Tue 23 Feb 2021 08:57:42 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 198.144.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:42 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=045D3E7BEED27073845E1B4A7BD6366A80F9837E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:79:c1:96:6f:12:a1:20:a7:31:36:dc:4b:
ec:3f:10:bf:67:33:3d:63:94:6f:88:f7:ca:11:1d:
58:e2:b9:22:32:58:6d:27:62:23:f7:72:c2:6b:06:
4b:61:b3:17:1f:d6:75:a4:0b:6e:4c:25:b4:a2:cc:
13:f0:38:0d:69:90:97:5a:74:e3:f0:ab:f2:ca:e1:
c1:88:18:96:e9:46:75:de:57:a0:c4:f0:21:8e:3d:
1c:e4:63:9a:c1:b4:73:ca:4f:cd:b9:2b:f8:1a:a5:
24:8a:8f:17:11:dd:dd:6e:b3:e5:c9:1e:d0:57:dd:
85:49:26:39:c2:31:ae:c1:90:cb:57:8e:24:c6:c1:
48:59:8e:0b:b7:3c:4c:b8:11:85:57:3a:27:e1:37:
10:04:46:9d:21:67:40:d9:6a:d4:76:75:92:6c:b0:
fb:7a:eb:10:72:19:f8:c7:ad:90:e2:62:9d:ef:97:
bc:78:86:ee:0b:93:7c:4a:3b:0a:10:6c:6c:3d:d5:
0d:92:dd:55:a6:b5:31:73:ee:7f:46:96:4e:20:f7:
2e:aa:8f:cd:e3:6c:f9:0a:9f:eb:7e:d9:03:8b:14:
61:aa:fe:b2:94:b3:f4:97:68:04:a9:e9:49:22:17:
1b:73:f1:7e:a0:1c:d5:d4:8d:71:63:0b:e5:1e:64:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:3E:7B:EE:D2:70:73:84:5E:1B:4A:7B:D6:36:6A:80:F9:83:7E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BF0-e-7ScHOEXhtKe9Y2aoD5g34.roa
sbgp-ipAddrBlock: critical
IPv4:
198.144.160.0/20
Signature Algorithm: sha256WithRSAEncryption
13:b1:1a:32:bd:bf:f8:cb:9b:04:c8:1b:9c:ed:85:93:bd:6f:
14:3b:a3:09:90:a1:c1:8d:f2:6a:35:81:35:7f:57:9f:2e:ca:
2f:5e:e9:c7:06:2a:04:98:33:f0:50:dc:7e:25:c0:b8:2d:61:
41:31:e5:96:a4:f3:6f:7b:e7:e2:4e:94:74:02:34:c9:21:f9:
3a:93:54:07:02:c0:f9:52:a0:90:0b:9e:02:55:73:d8:ef:e7:
d1:39:2a:d8:bf:b3:37:e0:39:65:0e:c1:cd:14:e1:ee:c7:e8:
1d:64:eb:c3:d4:af:90:65:31:fb:ab:92:ca:40:94:ae:1a:e3:
0d:0b:01:16:e4:bb:46:6d:7a:30:4d:63:62:6f:4c:f8:4a:50:
5d:e3:a0:f5:81:67:b5:05:58:73:71:91:54:b3:44:c1:f5:13:
20:01:81:8b:43:ef:39:4b:f0:b9:eb:29:b6:ae:fa:be:f8:5c:
f1:2e:cb:27:66:28:70:fa:c9:e8:05:1b:3f:4d:07:1f:27:5d:
65:81:75:e6:63:1e:d7:3b:fa:81:81:aa:bd:e0:d9:c3:32:82:
82:a8:fe:87:6f:aa:27:20:fb:fa:7a:db:fd:c1:bf:f9:57:b4:
94:0b:4f:4c:e1:63:34:d2:33:6f:e3:3a:f4:06:97:f4:b5:8d:
7a:ea:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org