Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Cg0f_4GnqzlHj5gF5IMdTtJDW_4.roa
File: Cg0f_4GnqzlHj5gF5IMdTtJDW_4.roa (raw, json)
Hash identifier: 2UL3GURqJCpqTI4sBQY0vwKHa7gPCOjmI09IYMMdFiU=
Subject key identifier: 0A:0D:1F:FF:81:A7:AB:39:47:8F:98:05:E4:83:1D:4E:D2:43:5B:FE
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 43
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Cg0f_4GnqzlHj5gF5IMdTtJDW_4.roa
Signing time: Tue 23 Feb 2021 08:57:32 +0000
ROA not before: Tue 23 Feb 2021 08:57:32 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 124.219.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:32 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=0A0D1FFF81A7AB39478F9805E4831D4ED2435BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:c9:a1:82:c6:1c:52:1a:d3:52:ea:4d:a4:
35:d1:fe:92:4f:02:51:d5:a3:37:af:19:4e:aa:d1:
d5:49:25:15:01:44:29:67:30:82:3e:c6:1a:aa:5d:
2e:d4:7c:00:66:80:80:e4:4d:c6:a2:0a:a7:54:8d:
5e:c7:44:1d:50:00:1e:e9:f1:3d:16:f0:c9:96:03:
d2:c3:c5:20:37:d1:96:24:47:84:5b:d4:25:6a:b0:
d5:e2:cf:3f:0b:be:87:71:0c:73:a8:a4:76:22:2a:
aa:ab:91:2a:1f:96:66:63:07:a9:e9:69:51:d8:6a:
f5:23:08:f7:c8:c3:d7:0b:a3:ba:2d:34:a7:41:63:
09:c0:7b:67:98:61:10:e5:71:49:20:52:89:9a:0b:
09:33:b8:13:a8:fa:bf:99:82:b2:5d:0a:c7:31:ae:
97:de:be:71:77:bd:c9:b1:e8:d2:bd:0f:7a:2b:48:
42:49:0e:fb:78:db:3d:f7:7b:08:4a:a9:8f:7e:6e:
ac:52:50:c6:22:e1:c2:cb:cb:5a:20:28:4f:d8:5b:
89:d0:d3:b1:83:f1:91:78:ae:f3:2b:06:04:06:c5:
29:64:cc:b8:75:d7:25:de:7c:e4:2b:4b:fa:26:61:
10:93:16:e1:0a:14:31:92:0b:22:a1:83:f1:0c:a4:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0D:1F:FF:81:A7:AB:39:47:8F:98:05:E4:83:1D:4E:D2:43:5B:FE
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Cg0f_4GnqzlHj5gF5IMdTtJDW_4.roa
sbgp-ipAddrBlock: critical
IPv4:
124.219.128.0/17
Signature Algorithm: sha256WithRSAEncryption
03:48:80:9c:66:f5:c3:33:10:a7:d4:cd:1d:5d:06:d4:33:60:
32:9b:46:f4:fa:6a:e5:68:c0:5d:9b:5e:d7:87:d1:29:21:5b:
e4:6b:92:13:d1:12:13:da:63:fb:ed:b1:ec:d6:dc:6b:bf:cb:
3d:e6:14:1d:bc:6d:d3:3d:90:a8:66:ca:53:84:e0:01:d6:d0:
b9:f6:5c:f3:45:47:98:49:84:06:a1:59:ef:3f:f8:35:fc:1a:
94:65:34:cf:b0:5e:5a:3c:4e:9b:6a:d1:e9:66:c1:3b:74:31:
d9:77:12:9f:1e:3f:74:d5:93:ba:73:24:bd:6d:4a:54:21:47:
d0:5a:4e:cf:6d:6b:b3:67:dc:89:9c:8b:96:81:84:fb:4d:d1:
31:2b:df:2a:25:b7:d2:ce:db:03:b8:4e:79:3a:c7:a4:ad:c5:
b6:40:fd:66:7b:1c:ed:b8:78:2c:f8:40:08:29:3c:4f:09:c5:
65:8b:36:a0:d3:6f:6f:34:45:ea:09:fc:e1:c4:17:69:12:6f:
d3:2f:b8:84:91:70:11:e5:46:3b:a0:41:9d:35:f0:b7:95:88:
85:5f:72:da:54:7f:d1:9c:df:17:c1:c4:85:5e:c8:a2:32:bc:
69:00:90:25:17:74:c9:44:7e:84:3e:1e:54:37:a6:9c:7d:b7:
27:62:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org