Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/DdsdVtMa5Z7YYQz1LcBYwOVCSAo.roa
File: DdsdVtMa5Z7YYQz1LcBYwOVCSAo.roa (raw, json)
Hash identifier: 6p/IvGMo8arwMC3NA8WWyMSoeBIb768+2TmLfoUehag=
Subject key identifier: 0D:DB:1D:56:D3:1A:E5:9E:D8:61:0C:F5:2D:C0:58:C0:E5:42:48:0A
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 51
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DdsdVtMa5Z7YYQz1LcBYwOVCSAo.roa
Signing time: Thu 01 Dec 2022 01:28:47 +0000
ROA not before: Thu 01 Dec 2022 01:28:47 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 2527
IP address blocks: 209.17.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Dec 1 01:28:47 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=0DDB1D56D31AE59ED8610CF52DC058C0E542480A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:b5:bf:94:1d:f3:0c:bf:ac:6d:a6:ef:f7:
5f:dc:c4:3b:b4:64:8b:e1:80:c9:d6:a4:8c:7f:c9:
51:99:e9:58:84:7c:3c:ef:97:2b:d4:9d:96:e4:b1:
af:14:a9:3d:0d:64:b4:65:59:c2:05:e2:fb:28:db:
1f:3d:f7:58:cf:e8:bc:65:4a:55:a6:c3:56:8a:5f:
18:9a:0b:88:32:4c:2e:e0:47:26:ab:2a:05:61:0a:
3d:d5:61:bf:e9:a1:30:68:e0:63:47:f7:6c:69:13:
98:9b:b6:1b:89:39:4f:f2:23:e0:ed:49:8c:2a:24:
63:fc:37:63:ce:04:37:ba:4b:aa:58:b9:26:84:26:
d7:07:55:f6:65:21:2c:a9:0b:81:dd:d3:da:da:f9:
57:eb:65:95:7f:e1:a6:ac:39:8a:77:bd:c5:f7:f6:
a8:94:ed:90:fb:bb:a1:09:23:fc:6c:2d:2b:57:91:
80:50:f4:e9:13:3e:13:81:35:3f:1c:f4:21:f7:7b:
8b:f4:38:2f:6a:4d:be:0a:6d:a9:aa:91:59:c1:47:
f1:9b:01:71:a4:f4:2e:72:0b:4e:45:01:62:3f:d4:
98:36:fc:d8:24:3e:8e:9e:c8:40:17:56:19:19:1c:
f6:91:47:46:e1:c6:0f:38:57:7c:db:71:ad:3f:5c:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:1D:56:D3:1A:E5:9E:D8:61:0C:F5:2D:C0:58:C0:E5:42:48:0A
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/DdsdVtMa5Z7YYQz1LcBYwOVCSAo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.17.64.0/19
Signature Algorithm: sha256WithRSAEncryption
58:37:1a:ce:e1:5b:20:58:8c:95:d7:0f:62:4f:13:35:d7:0c:
90:1d:f5:9f:32:67:44:a3:f1:13:57:5b:f9:99:17:7b:bf:23:
35:3e:ee:bc:a2:de:74:bb:da:fc:ab:80:3a:ca:7b:97:83:b5:
93:98:0b:2d:e8:8b:10:c5:2e:68:9d:1b:7a:d8:a1:34:4a:5d:
79:ba:4c:ba:ef:db:4e:18:e3:0f:87:09:16:b9:fd:d0:ea:f4:
25:43:5a:11:ee:e2:73:12:ae:76:6d:20:bf:9f:4f:cf:f0:58:
d9:b9:31:49:c7:82:9f:02:84:1f:6a:96:08:bd:93:ae:12:72:
e1:9d:cb:9e:3b:6c:ec:5c:a2:47:42:94:af:59:30:82:fb:68:
03:c3:9b:71:c7:25:69:0e:48:0a:60:f2:e3:3f:ef:b1:20:c6:
ba:54:fc:8b:29:50:1e:19:d3:7f:0c:81:8c:66:0d:d0:9a:a3:
ff:39:8d:f2:60:50:bf:59:8b:17:5b:93:0b:9d:55:09:de:4b:
6c:5a:c0:23:9b:e7:68:cf:25:8d:df:84:76:c8:75:3b:5a:80:
e5:b9:25:08:cb:ba:20:22:c4:37:1b:02:75:a0:2c:1d:4c:77:
ed:35:54:97:6f:ae:91:b5:8e:d0:43:d9:ba:9c:83:25:c9:38:
2c:3e:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org