Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/NGTXlP53u8KEd8bOH-Ul5yyKExA.roa
File: NGTXlP53u8KEd8bOH-Ul5yyKExA.roa (raw, json)
Hash identifier: wq32VvluDNI/otVIPK9fA3C8IhU+F3ytraCtaTqQSJE=
Subject key identifier: 34:64:D7:94:FE:77:BB:C2:84:77:C6:CE:1F:E5:25:E7:2C:8A:13:10
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 40
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/NGTXlP53u8KEd8bOH-Ul5yyKExA.roa
Signing time: Tue 23 Feb 2021 08:57:31 +0000
ROA not before: Tue 23 Feb 2021 08:57:31 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 223.132.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:31 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=3464D794FE77BBC28477C6CE1FE525E72C8A1310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:1d:aa:cb:08:3b:eb:ad:2a:71:0d:75:fb:
de:86:35:76:f0:58:5f:47:a3:8f:c6:b8:38:d3:19:
de:34:91:83:ef:15:31:b9:36:80:2a:4c:f8:fc:50:
fb:db:31:6d:8d:a7:da:a2:b3:8e:0d:e3:ae:b0:1e:
01:ed:c8:c3:d3:6e:af:e3:45:63:c6:46:2c:b0:76:
b0:6f:67:61:5f:b2:fa:1a:d6:5c:6f:dc:3e:fa:ae:
b5:d6:3a:64:06:ee:55:45:3f:a0:a2:44:6f:5f:63:
63:d6:43:16:29:95:e8:4c:bc:3e:6e:80:28:a4:16:
6c:00:f4:9c:35:1c:41:38:e9:67:8d:34:99:5c:25:
0a:f2:91:df:70:36:ba:28:2d:45:89:87:7a:0a:59:
94:3b:40:2a:4d:30:f7:e9:2e:3c:b4:9e:b8:83:8a:
41:b0:e0:cf:e8:b0:1f:cf:8a:c9:06:dd:1c:cd:0d:
d7:0a:e6:db:5c:6c:1e:bf:13:76:a6:6c:99:cd:16:
f6:f7:84:ae:ea:46:22:36:4d:55:d6:bd:c4:a7:c7:
32:59:25:a5:90:c0:3e:fa:bd:16:e0:ea:8b:f3:6d:
88:37:65:b0:72:1d:44:bb:30:40:9a:7a:b4:16:a2:
e8:d5:5b:d3:b9:85:61:85:0c:68:b7:fe:f2:bc:26:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:D7:94:FE:77:BB:C2:84:77:C6:CE:1F:E5:25:E7:2C:8A:13:10
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/NGTXlP53u8KEd8bOH-Ul5yyKExA.roa
sbgp-ipAddrBlock: critical
IPv4:
223.132.0.0/14
Signature Algorithm: sha256WithRSAEncryption
b8:ba:1b:77:f9:90:9e:51:b1:50:13:50:bd:f1:83:01:48:62:
1b:e7:e4:0d:e6:be:8e:83:4d:e8:a5:af:aa:02:56:76:d5:7a:
32:03:38:ea:de:61:b1:09:ac:ce:73:67:d0:cf:87:9b:05:75:
3a:4d:27:86:09:bd:3b:ea:1d:40:ce:97:4b:1e:3c:2c:1f:04:
2e:4d:2b:e9:c7:20:9e:6a:6b:cf:5b:76:02:74:00:a5:0d:51:
96:40:df:57:88:f8:5d:11:bb:f2:fa:76:ae:8a:16:ab:d7:1c:
ea:32:a7:fa:41:aa:76:09:44:22:2a:9a:89:87:23:4a:9a:ea:
ea:50:c4:6b:4d:d0:b2:c9:01:b4:45:06:86:3e:bb:31:6d:4a:
b2:c9:f1:b7:30:b9:53:f1:9d:be:cc:a7:f6:58:fc:d4:1d:91:
f3:52:a2:d0:da:8b:3b:84:07:4d:42:9f:73:69:c4:98:1a:2b:
80:dd:2e:7d:ef:ed:a9:ff:38:ee:cc:1f:4c:8c:dc:89:8a:30:
fb:7f:1e:7f:42:c0:b5:ea:b9:85:b1:9c:fb:f4:2c:c9:ee:51:
9e:7f:41:4f:d3:07:19:22:41:cc:ab:28:94:a5:e6:61:4c:e7:
8e:b0:53:2a:00:40:e3:4b:00:f1:fd:77:2f:36:43:dd:bd:0d:
84:3b:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org