Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Nmd4mC8nAwOQZsbBE1sqVxbk8Eo.roa
File: Nmd4mC8nAwOQZsbBE1sqVxbk8Eo.roa (raw, json)
Hash identifier: /f9w8u4xktAXZUPiArdPRilCZjtk0f3dIdeR+nh+E8U=
Subject key identifier: 36:67:78:98:2F:27:03:03:90:66:C6:C1:13:5B:2A:57:16:E4:F0:4A
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: A1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Nmd4mC8nAwOQZsbBE1sqVxbk8Eo.roa
Signing time: Tue 01 Feb 2022 01:31:52 +0000
ROA not before: Tue 01 Feb 2022 01:31:52 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 150.249.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:52 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=366778982F2703039066C6C1135B2A5716E4F04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:0b:71:c5:7b:c7:cf:68:49:f1:e2:13:54:
a9:ee:d0:94:b8:01:83:55:60:16:03:6f:ab:14:cc:
b3:f1:e4:89:33:c8:71:43:af:10:23:91:11:01:d2:
6f:ad:cc:2b:a7:b0:d3:ca:4d:c9:9d:b8:a5:c8:15:
4d:e3:33:fe:de:cc:8c:2d:70:3d:d9:fd:1b:40:6a:
27:f2:b4:eb:bf:49:a5:60:a1:38:5e:92:85:d0:fd:
79:e1:c3:c4:e9:70:0c:d5:35:aa:8d:02:10:0a:56:
18:97:b1:71:01:93:32:2c:ff:c8:e9:5f:f6:b0:59:
4e:f6:94:f4:2b:35:01:81:1f:fd:ce:95:0f:89:99:
47:66:29:c6:d2:be:7a:fe:72:fa:de:63:e4:45:e1:
43:a2:84:85:c6:44:5c:db:66:ab:20:95:99:10:8b:
a0:21:75:97:ef:e7:27:ff:d1:d2:58:b0:f0:e0:d5:
9a:66:d0:b5:69:ff:f4:22:fc:62:44:d2:32:ee:36:
73:4c:97:5a:2e:27:5c:eb:43:f0:59:c0:a1:63:80:
7d:69:25:99:5b:d2:e0:e0:f5:a3:39:a7:f0:17:2b:
d4:23:75:51:38:e6:18:3f:c2:d9:49:4d:f0:ec:ff:
96:ed:ed:74:dd:fe:8a:45:dc:07:5a:b6:8c:75:a9:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:67:78:98:2F:27:03:03:90:66:C6:C1:13:5B:2A:57:16:E4:F0:4A
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Nmd4mC8nAwOQZsbBE1sqVxbk8Eo.roa
sbgp-ipAddrBlock: critical
IPv4:
150.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:7e:63:68:99:94:7d:8d:2d:1a:c8:35:ce:81:60:d9:21:8a:
0c:e5:ff:e0:48:0f:8d:d1:be:17:4c:92:ae:ae:5a:d1:50:72:
b9:60:ae:36:26:1f:29:67:30:c5:69:e9:8d:47:b4:7c:2a:40:
78:ef:ba:bb:11:8c:1f:a7:c0:82:ab:ef:38:7f:27:d6:ca:dc:
1d:34:67:0e:7e:24:6c:4a:bd:12:19:fc:2f:1f:41:27:24:f2:
93:f3:35:b4:ac:f5:f1:43:d7:92:a7:0f:36:ed:61:91:fb:64:
84:80:99:aa:44:bb:ac:1a:41:34:f8:36:cd:6a:12:81:22:fe:
74:73:bc:67:ef:44:23:ca:66:db:39:5f:84:1b:e7:b9:95:2a:
a4:f3:8c:a2:2f:db:c1:42:f0:f0:4a:ce:55:ff:ab:40:9d:13:
35:c8:da:6a:7b:0a:b3:0e:5d:64:19:56:a5:1e:9a:d6:a9:fa:
aa:62:f6:33:dd:8e:8c:db:d5:26:c8:4d:96:8c:59:8f:15:e5:
60:3b:b0:56:66:48:57:1c:f7:7f:f0:b5:c4:be:89:6a:47:94:
28:03:68:20:86:00:48:08:aa:77:43:46:2c:65:f4:2b:f5:ea:
19:84:25:ec:81:31:3d:02:c3:17:2e:4a:65:e1:dc:e9:f1:b1:
de:2e:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org