Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/MtdCYUXOrn29g91FlSW38QuGMvw.roa
File: MtdCYUXOrn29g91FlSW38QuGMvw.roa (raw, json)
Hash identifier: EoAYwlW2bSdn8nWbOgQlwmElvQdDh9hBGQhfiN5II7I=
Subject key identifier: 32:D7:42:61:45:CE:AE:7D:BD:83:DD:45:95:25:B7:F1:0B:86:32:FC
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 62
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/MtdCYUXOrn29g91FlSW38QuGMvw.roa
Signing time: Tue 23 Feb 2021 08:57:43 +0000
ROA not before: Tue 23 Feb 2021 08:57:43 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 118.240.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:43 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=32D7426145CEAE7DBD83DD459525B7F10B8632FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:29:16:51:ee:27:d9:9a:da:66:c5:a1:16:
92:fc:e4:07:12:c6:fc:e7:f8:7c:dd:17:9b:d9:16:
7a:85:e5:74:1b:59:d2:9c:55:71:11:6d:69:23:5d:
a1:9a:5a:ce:4f:1b:e7:da:19:8b:d2:9b:82:54:00:
04:fa:b4:aa:47:a2:fc:0b:db:f1:d0:9e:b3:4d:f1:
a5:f4:d3:31:e7:84:50:56:d7:68:9f:0e:0b:4d:11:
d5:1d:45:0d:f6:30:67:5d:54:58:c1:7c:de:e8:54:
7b:35:9d:0c:73:24:5c:59:78:14:d0:b3:c6:6f:56:
bd:f2:a0:84:5e:7f:7f:70:2e:d4:6e:d2:e4:e4:40:
88:52:d2:c7:61:c9:8c:b0:c5:7c:42:26:23:54:e9:
39:53:26:3b:4f:90:74:c9:79:e1:d4:6f:9e:6a:d5:
76:fb:13:47:ec:c7:02:b0:38:dc:c0:26:1b:9f:ba:
82:23:fe:21:ba:7a:0d:90:e9:37:5e:e6:a6:54:a5:
80:7b:bf:85:26:27:f5:c9:50:56:67:c4:c6:19:e3:
79:9f:a9:87:3f:70:7f:99:33:1a:a7:08:60:dd:db:
9b:57:f3:be:46:43:01:4b:28:8d:2f:03:88:66:88:
fd:f4:d5:4d:9e:13:cf:a2:f9:a3:8b:0c:ad:2e:3d:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D7:42:61:45:CE:AE:7D:BD:83:DD:45:95:25:B7:F1:0B:86:32:FC
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/MtdCYUXOrn29g91FlSW38QuGMvw.roa
sbgp-ipAddrBlock: critical
IPv4:
118.240.0.0/15
Signature Algorithm: sha256WithRSAEncryption
11:ab:03:30:93:d9:ed:9d:fd:2d:66:d0:4d:dc:47:df:20:e6:
8e:61:c0:96:c5:ce:3a:24:6b:41:43:c7:da:a3:97:db:ff:c1:
0a:e3:62:1e:62:8b:06:5d:41:1c:03:bd:51:97:42:d0:f5:c7:
68:57:d2:4f:77:b7:21:ea:5e:41:3a:1d:c5:97:47:b4:91:66:
3d:94:df:82:06:c3:39:83:50:ec:de:a0:83:1b:1b:38:e9:e9:
76:54:09:ad:c3:bc:6c:a5:3d:5d:ac:d6:25:25:e8:d1:0e:a2:
a9:3b:70:49:b9:89:bf:8e:c6:6b:82:a3:57:92:e8:c9:34:52:
64:33:28:e2:5d:08:29:25:3e:01:da:01:bc:9b:bb:74:3a:18:
8f:7f:f8:67:93:c5:01:f6:ae:0a:c5:0c:52:1c:8e:d1:f0:81:
73:a5:3e:25:57:90:f7:37:fa:89:53:49:fa:58:1f:26:fb:26:
9c:b0:35:0e:ca:61:26:0e:68:7c:d2:87:2d:10:58:ac:9f:db:
48:38:37:c9:8d:43:ef:dd:d8:c6:2d:c9:a2:40:25:78:e6:04:
b9:bb:3e:f2:b3:d3:52:ac:9b:97:16:ba:6c:7a:22:7a:81:b3:
12:dd:17:45:31:fa:a9:9f:ff:8b:7f:9d:11:1f:f5:9f:6e:e3:
ec:7c:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org