Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CCUALBP6rq5yz65ZHgHBquA_ZUk.roa
File: CCUALBP6rq5yz65ZHgHBquA_ZUk.roa (raw, json)
Hash identifier: GRUJjOw3Z/JT1y0xsKqlDFzsctJ35ul1wHZYXvzGw2Y=
Subject key identifier: 08:25:00:2C:13:FA:AE:AE:72:CF:AE:59:1E:01:C1:AA:E0:3F:65:49
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 5E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CCUALBP6rq5yz65ZHgHBquA_ZUk.roa
Signing time: Tue 23 Feb 2021 08:57:41 +0000
ROA not before: Tue 23 Feb 2021 08:57:41 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 61.120.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:41 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=0825002C13FAAEAE72CFAE591E01C1AAE03F6549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:b8:79:b3:a4:6f:3c:aa:c4:a2:e7:94:13:
b0:62:6d:de:b4:be:73:bb:2b:c3:66:ee:44:dc:d5:
2d:26:fc:4b:70:2f:89:59:6a:0f:e2:e8:80:90:b2:
4d:cf:a5:1e:13:27:8f:cb:66:02:e4:5a:0a:ff:25:
8d:d8:1c:da:ba:90:d7:d1:cc:34:54:35:a1:ef:4f:
5d:2d:82:46:e8:a7:81:0e:b0:3e:2e:05:fb:24:d1:
a6:a0:a0:09:bb:57:e1:f4:ac:b0:3f:0b:c5:e4:fb:
fd:1b:45:a2:a6:a1:d7:1a:52:53:55:6e:e6:ee:1d:
69:5a:2e:57:f8:50:07:85:e9:22:f0:da:66:23:6a:
28:74:3f:2f:3f:80:3e:60:0d:17:ce:e4:d0:4b:ce:
cc:5d:35:e0:c1:ea:2e:cc:88:b2:62:a2:6b:1a:7d:
3c:7f:3a:d5:6a:a5:d9:ce:d7:1d:0e:ea:dd:7e:bc:
1b:0b:f6:ea:7b:b6:f7:af:bc:24:09:a6:2b:c2:bd:
a8:d0:15:71:23:0d:1f:ba:55:0d:2a:fd:38:54:2a:
88:cc:48:ea:20:5f:3f:04:7e:08:bd:24:0f:0f:89:
7f:ad:8a:36:ea:c3:9b:45:02:0d:9b:f8:b4:b4:d1:
0a:81:37:17:d7:d0:76:63:74:c7:cf:31:be:c6:53:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:25:00:2C:13:FA:AE:AE:72:CF:AE:59:1E:01:C1:AA:E0:3F:65:49
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CCUALBP6rq5yz65ZHgHBquA_ZUk.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:ad:6d:02:e3:53:66:05:3f:53:ae:08:be:69:80:23:53:f8:
c2:16:89:dd:fe:0b:7a:6e:2b:db:ee:79:03:16:28:c6:3f:c4:
d9:c8:4a:f2:4f:35:51:53:ac:cc:1c:18:58:e3:ca:93:cd:18:
64:f7:88:78:ce:f3:34:8b:9e:cb:fb:bf:5c:89:e2:07:01:fc:
a6:bc:0a:45:a3:5f:12:32:59:c2:54:9d:38:8c:15:30:a2:15:
1b:45:ac:db:15:3b:cb:7c:a6:9a:ee:55:f5:e3:cf:3b:e2:ae:
6d:a6:b3:35:95:c4:ed:88:9c:0c:e3:17:48:ba:4b:3d:3a:b5:
19:15:73:fc:ec:01:a1:56:19:ac:f7:97:ff:fc:c9:d2:17:c6:
52:1d:bd:ac:43:0b:65:8a:fa:9e:da:f5:a8:ef:1d:a3:46:64:
9d:61:55:61:f9:79:e0:01:7c:e2:ec:be:6b:59:aa:49:8f:cc:
ee:cf:76:31:75:c8:9f:b1:60:93:26:69:0a:7f:30:ec:7a:14:
f1:9e:6e:93:3e:c4:37:90:d6:40:e2:d1:24:fc:b6:7f:ea:3d:
52:fe:3c:ec:0c:55:5e:24:3a:c7:60:18:a2:5b:6a:4a:03:89:
01:b8:b7:fc:ef:d5:a1:1e:ae:2a:c7:5b:ac:ec:a8:81:a2:37:
5f:84:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org