Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Lx-v0vp-G3sfS3yiuCt3a1cPD1o.roa
File: Lx-v0vp-G3sfS3yiuCt3a1cPD1o.roa (raw, json)
Hash identifier: noDbqEimAWcmw9QEXk078EPf7KTqH0OkyzDzpmCCB04=
Subject key identifier: 2F:1F:AF:D2:FA:7E:1B:7B:1F:4B:7C:A2:B8:2B:77:6B:57:0F:0F:5A
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 59
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Lx-v0vp-G3sfS3yiuCt3a1cPD1o.roa
Signing time: Tue 23 Feb 2021 08:57:39 +0000
ROA not before: Tue 23 Feb 2021 08:57:39 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 211.128.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:39 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=2F1FAFD2FA7E1B7B1F4B7CA2B82B776B570F0F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:69:fa:44:59:f7:ff:a7:c4:52:88:dc:04:
22:c8:7b:9b:93:47:5e:57:4c:57:57:cd:45:5e:2f:
6c:4f:2a:aa:94:aa:b0:7c:ef:c3:bf:78:83:5a:fe:
41:b2:c3:4b:4e:69:0a:23:3e:4a:ec:b4:b4:89:de:
04:57:4a:98:9f:b3:59:8b:e5:61:11:f2:c7:db:f7:
86:01:c5:dd:fa:ad:db:38:30:e6:a0:74:64:46:d7:
78:45:15:8f:95:03:ea:12:9e:03:0a:3e:4e:80:19:
52:11:00:dd:49:cc:fa:83:40:d6:99:89:e1:ca:f1:
ad:32:92:20:f3:f6:e9:2e:83:73:58:d0:c3:89:81:
a7:a9:78:da:a8:27:b4:05:13:27:21:f6:21:5e:c2:
92:ec:32:51:0e:a5:24:be:65:b0:6b:31:ab:3f:b1:
8c:35:14:66:f3:54:af:ad:2b:ce:82:1e:55:1b:c3:
f1:4c:1b:06:8c:0e:3a:76:df:9d:de:fb:ac:57:07:
19:c6:e7:d9:12:10:a1:c4:ae:2a:1a:72:93:09:0c:
1b:eb:67:61:86:60:78:5f:85:9a:23:e4:32:60:bd:
55:03:3e:0e:b2:f9:80:90:15:d9:76:70:d7:69:26:
e3:1d:92:b1:da:fa:0a:d3:fc:f8:23:77:c3:d3:9c:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:AF:D2:FA:7E:1B:7B:1F:4B:7C:A2:B8:2B:77:6B:57:0F:0F:5A
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Lx-v0vp-G3sfS3yiuCt3a1cPD1o.roa
sbgp-ipAddrBlock: critical
IPv4:
211.128.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:37:01:28:14:44:a3:95:7a:d6:b3:f8:3b:32:f3:7a:79:22:
e2:c5:7b:dd:9c:63:46:c9:cf:71:ae:3a:ea:ba:96:4d:f3:a9:
af:e1:da:be:17:ab:c2:1d:ed:67:3d:b9:e5:30:63:84:30:28:
28:d6:bd:52:1c:93:c5:d6:11:5d:ff:04:36:a4:6a:6f:9c:d5:
24:12:ee:96:21:5f:0d:20:0e:cf:2a:5a:82:40:4d:e7:a1:33:
41:db:66:54:d6:f3:6d:e0:c1:e0:0e:57:61:cc:aa:5a:36:11:
73:4b:69:5a:7f:9e:da:9c:74:0a:8c:37:47:af:3f:52:7d:ae:
a4:25:a5:c3:d6:75:75:35:43:ba:1d:e1:1b:23:a1:88:2c:dd:
67:0b:6f:22:96:fd:ab:99:82:26:85:9d:15:96:96:7b:cf:bf:
ba:39:50:6b:a1:0e:d9:3a:6c:65:73:52:f0:59:82:c1:59:2f:
4b:e3:e9:e8:ac:15:05:ea:3d:a9:16:31:f2:47:ed:4f:2a:c8:
70:c7:89:de:1c:37:17:06:5f:32:78:b3:10:5a:1b:f4:17:16:
60:d7:5a:42:94:79:e4:0b:aa:f8:e4:2f:c6:7e:25:0e:9b:1e:
f1:7a:d5:99:2c:e1:62:a0:5a:10:8d:08:6c:99:26:f5:fa:de:
c8:9b:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:57 2025 by rpki-client