Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CYWX1O-FKdTVL7LLr8motmGS6xw.roa
File: CYWX1O-FKdTVL7LLr8motmGS6xw.roa (raw, json)
Hash identifier: +cmcGEa1X/pP1GlcC//K7yyG9JPv0fbaaLhF905ExBs=
Subject key identifier: 09:85:97:D4:EF:85:29:D4:D5:2F:B2:CB:AF:C9:A8:B6:61:92:EB:1C
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 2A
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CYWX1O-FKdTVL7LLr8motmGS6xw.roa
Signing time: Mon 21 Jun 2021 08:42:20 +0000
ROA not before: Mon 21 Jun 2021 08:42:20 +0000
ROA not after: Wed 15 Jun 2022 01:30:03 +0000
asID: 2527
IP address blocks: 152.117.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Jun 21 08:42:20 2021 GMT
Not After : Jun 15 01:30:03 2022 GMT
Subject: CN=098597D4EF8529D4D52FB2CBAFC9A8B66192EB1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:77:7f:89:e9:24:aa:df:9b:25:4f:8b:e6:
58:8b:1f:14:26:10:ae:13:4c:41:9b:3a:f7:a1:d8:
86:a4:20:42:39:9d:2f:9f:4d:e8:eb:6c:92:bf:3a:
89:0b:00:8c:0a:4b:70:c4:d1:87:fb:03:7e:57:98:
e1:ac:7f:02:31:63:5c:51:e5:4a:36:09:f5:ff:2e:
66:87:de:4d:cf:b1:e1:49:90:27:ce:b2:f3:d1:b5:
54:62:b4:b7:84:26:0e:dc:61:34:49:cc:84:07:61:
6f:2f:f7:07:2c:f1:a2:f4:a7:73:6f:86:04:69:6b:
3b:aa:c0:4a:a7:f2:e8:25:22:11:22:4c:69:a5:42:
21:30:d0:d3:62:5f:51:52:dc:22:c7:da:9d:b8:94:
f6:bf:e4:8a:5a:03:47:25:93:67:60:fa:26:ac:fb:
81:93:2a:14:3d:38:7f:3a:b4:64:48:b7:34:eb:0e:
04:13:f7:2b:d6:2d:26:eb:a1:1e:02:4b:bc:d8:9e:
0e:06:6a:ab:5c:15:a4:06:89:7a:64:3c:d5:41:61:
03:b2:e9:09:2c:03:02:69:67:58:d5:49:7d:4d:a0:
04:76:98:22:e1:0f:4b:9b:d8:f7:89:b5:c7:98:ec:
5b:36:44:5a:39:82:3b:7a:0b:b6:0e:88:d6:65:13:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:97:D4:EF:85:29:D4:D5:2F:B2:CB:AF:C9:A8:B6:61:92:EB:1C
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CYWX1O-FKdTVL7LLr8motmGS6xw.roa
sbgp-ipAddrBlock: critical
IPv4:
152.117.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:1c:62:16:73:4d:dc:67:ec:cc:18:f9:5d:33:c4:9e:c6:50:
02:b0:97:6f:08:48:b1:5b:36:70:9a:62:26:2c:c4:19:22:fc:
57:5b:00:39:6c:0d:56:bc:e3:a0:6f:b2:5f:55:63:d1:96:34:
11:9e:c7:69:f4:fb:84:cf:95:6d:02:ab:64:f5:c4:72:9e:96:
9d:4e:73:56:01:59:5e:51:f9:7a:e8:b8:aa:bd:a9:8f:62:f0:
bf:87:bc:f5:c9:87:ee:fb:2b:3e:46:19:2a:98:63:c5:3c:c2:
6f:c0:69:57:a5:26:37:72:7b:ea:62:9a:d6:8c:f9:49:a1:e1:
fd:3d:df:e0:0a:3a:64:54:db:b6:64:e6:be:a7:2f:82:55:d7:
e7:60:08:7b:5b:49:cd:fb:2b:f6:51:6f:90:e5:0c:0e:bd:f1:
4f:89:bb:62:c6:18:f4:47:05:d0:76:5b:af:ee:da:79:82:86:
4f:16:09:dc:33:54:c0:b0:e1:d5:d7:25:3e:0d:0f:fa:0c:6a:
ca:5a:ef:11:5a:84:ce:ae:bf:fa:1a:90:1e:33:1d:73:b3:02:
c2:ed:cd:da:e4:2d:0f:11:c5:cb:a7:70:d4:03:db:c9:dd:63:
83:21:29:ae:40:b6:29:83:35:28:95:c6:ab:9b:ff:7b:a4:57:
69:85:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:21 2025 by rpki-client