Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/EdQ4aWNa09f2tEPE2u0MBj1dTmc.roa
File: EdQ4aWNa09f2tEPE2u0MBj1dTmc.roa (raw, json)
Hash identifier: pYCM3SrsEx+5qvgvo+zezaSPMXWMidzQeLIUQSLN2NE=
Subject key identifier: 11:D4:38:69:63:5A:D3:D7:F6:B4:43:C4:DA:ED:0C:06:3D:5D:4E:67
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 19
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/EdQ4aWNa09f2tEPE2u0MBj1dTmc.roa
Signing time: Tue 23 Feb 2021 08:57:29 +0000
ROA not before: Tue 23 Feb 2021 08:57:29 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 131.147.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:29 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=11D43869635AD3D7F6B443C4DAED0C063D5D4E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:d2:d1:f4:78:f1:86:db:34:67:4e:fb:9d:
0b:4b:e1:89:1a:a4:6c:5b:e2:50:dd:1e:15:79:65:
3d:7b:f5:e3:6b:e5:ca:b2:27:1c:07:80:c7:a1:bc:
95:11:3e:13:c9:5f:12:93:40:ab:26:d9:b4:d1:0d:
cc:a9:90:7b:f0:4c:71:ec:3b:74:f6:a2:b8:89:ca:
78:d5:48:17:5e:4c:f5:01:4e:67:6a:02:be:8a:fe:
07:aa:15:20:c4:01:51:c4:f8:30:5f:76:b7:04:3c:
00:4b:06:5a:d6:b5:81:52:d7:c8:8f:1c:49:8b:4a:
60:39:29:96:f0:60:db:3e:21:dc:c4:31:21:8f:da:
7d:8e:81:f8:2b:a7:92:4e:92:08:6f:e1:6c:9c:2e:
09:30:77:c8:b2:7d:18:8a:bf:e8:56:ed:54:8a:ab:
13:e8:b1:35:53:3b:06:8e:02:b4:f8:67:19:ae:17:
34:92:47:7d:ca:8f:e5:fb:1f:c0:69:2a:d2:a7:bc:
02:1a:50:0f:cd:e3:50:dd:35:9e:27:b1:65:14:e1:
72:87:6c:34:b7:0d:ed:b6:f0:b9:27:02:e5:5c:f7:
1b:f2:2a:e5:59:89:ba:ea:e2:70:fd:c7:f2:9f:b9:
39:a9:58:89:aa:68:f7:5d:04:c8:86:eb:42:03:ab:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:38:69:63:5A:D3:D7:F6:B4:43:C4:DA:ED:0C:06:3D:5D:4E:67
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/EdQ4aWNa09f2tEPE2u0MBj1dTmc.roa
sbgp-ipAddrBlock: critical
IPv4:
131.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:b5:78:cc:d6:08:ee:97:bb:cd:60:b9:6d:83:00:db:c8:58:
78:39:45:38:23:de:da:49:a1:80:52:ce:9f:96:f7:a4:89:32:
e6:ab:4c:eb:90:69:a5:ad:04:6b:7a:31:3c:78:7d:44:e2:35:
eb:af:2b:5b:23:07:9e:11:b9:21:cc:f6:79:0c:8b:e4:e1:7b:
89:91:02:b8:94:28:b2:57:b8:43:ce:f2:88:4d:9c:bc:9a:4c:
fc:f1:1c:56:32:38:41:ec:62:28:63:29:68:97:d8:31:81:55:
ac:d6:60:09:87:82:09:77:ac:50:97:12:15:70:2d:26:36:3b:
d0:5d:18:a5:7c:59:24:ed:26:aa:11:0f:2b:c6:ba:f2:7b:bd:
42:7c:ae:fb:fd:17:69:01:5b:8e:12:d1:a7:db:cc:91:10:7e:
ff:7e:33:b7:72:61:43:3d:10:19:17:35:02:1e:34:9a:ac:c5:
fc:df:2a:49:2a:dc:7c:0f:ae:ba:88:b8:d9:cf:27:06:5d:78:
39:fb:b1:a6:62:d3:24:63:59:cc:a6:6a:84:c3:b1:56:3d:ac:
2b:76:1c:5b:a5:24:b2:45:0a:7b:cf:f4:a8:a7:43:d1:8e:9e:
85:0a:65:51:ef:93:2a:39:db:6c:99:23:ed:ed:68:a2:71:79:
5d:be:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org