Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Gi50ETb6OApYQZXTy72TceQzVA4.roa
File: Gi50ETb6OApYQZXTy72TceQzVA4.roa (raw, json)
Hash identifier: 39YPJeIBqM7FLdOyGULd01cm9R4488eehLzrWo5thIY=
Subject key identifier: 1A:2E:74:11:36:FA:38:0A:58:41:95:D3:CB:BD:93:71:E4:33:54:0E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 7C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Gi50ETb6OApYQZXTy72TceQzVA4.roa
Signing time: Tue 01 Feb 2022 01:31:11 +0000
ROA not before: Tue 01 Feb 2022 01:31:11 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 223.132.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:11 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=1A2E741136FA380A584195D3CBBD9371E433540E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:82:29:bb:3a:b3:fe:d0:fc:b1:66:c0:3d:
02:cf:7f:95:f4:e5:2b:59:47:74:cc:a4:e5:67:2e:
e9:f1:f5:a3:53:8f:0b:97:80:93:cc:9d:16:70:76:
8a:cb:25:c0:30:4e:cd:d2:97:b5:a8:2f:cb:ca:88:
60:4d:f0:90:0d:10:02:c9:df:0d:5c:37:54:6c:09:
66:33:b5:22:71:99:17:df:f5:64:61:4b:d8:45:05:
dd:86:c5:69:27:d1:07:00:a4:18:17:e1:07:93:32:
18:ef:89:46:8a:b2:fd:ae:76:58:8c:3e:8e:5f:ea:
ef:27:1c:1a:21:c8:97:7d:be:ee:25:0a:c7:57:0c:
55:1e:10:db:ec:e7:f7:87:00:5a:54:19:89:e1:20:
61:fd:b5:5c:41:02:5c:10:06:bf:12:3c:1e:46:18:
6f:c7:8a:a7:b1:c2:9a:61:f3:56:11:e5:fa:09:54:
88:45:04:a9:61:60:8f:05:ac:f4:71:3c:31:27:f2:
57:c1:f7:cb:42:9b:db:24:7f:c6:b4:db:46:3b:ad:
36:e8:9d:34:dc:a5:4a:58:79:db:17:3d:03:81:28:
51:ca:e1:a0:0d:0d:88:75:90:3b:c9:f1:9a:e3:fa:
40:98:77:70:4d:a4:3d:39:36:5b:fe:2a:10:27:36:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:74:11:36:FA:38:0A:58:41:95:D3:CB:BD:93:71:E4:33:54:0E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Gi50ETb6OApYQZXTy72TceQzVA4.roa
sbgp-ipAddrBlock: critical
IPv4:
223.132.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4e:c8:09:c0:a5:80:01:32:1f:5a:3b:ea:b4:c1:9a:b3:a2:fc:
96:cc:2d:85:5d:e6:3e:be:f0:a5:15:9d:9f:83:2a:59:2f:38:
5e:6b:a5:cb:4b:92:93:5a:1d:a5:a3:d6:14:26:01:c8:e6:a8:
e3:4a:6b:e1:18:62:09:1d:f2:91:cd:1f:14:4c:f0:f1:ce:b7:
3f:40:52:dd:fd:fa:48:98:4f:c5:48:92:a9:a4:88:a5:45:43:
2f:30:3d:87:08:e8:8a:a1:32:2f:fe:70:9c:f2:b4:1a:2c:40:
76:26:65:fc:9e:03:8d:2e:7f:a5:73:3b:4a:51:6c:ae:64:fd:
63:ba:d6:e9:dc:4a:4c:94:87:8d:fd:83:1d:bd:57:97:e5:fe:
8c:80:0a:9a:ff:57:58:66:b1:bc:39:94:33:7c:19:2b:fe:18:
89:15:af:33:99:5d:30:4a:be:a5:7a:3d:ae:c5:29:59:8c:f1:
4b:9f:f4:69:b6:d7:92:b6:b6:fe:e0:38:f0:ed:f6:c2:52:16:
99:9c:4a:d6:0b:e7:f2:35:0a:06:8b:0c:fa:42:f1:62:e4:e6:
3f:04:d1:08:21:a4:df:05:53:a3:4d:63:76:a9:3b:18:be:9a:
a7:ca:ab:ba:e1:96:05:ed:c4:31:5c:bb:ae:e2:0f:7d:11:5c:
7f:23:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org