Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/PMB8QaXDRNQLl1RqIjJhYXs4Eqw.roa
File: PMB8QaXDRNQLl1RqIjJhYXs4Eqw.roa (raw, json)
Hash identifier: j9wopaQxeFDB1nsHm1qIJ9pX4Fq9cpNeIsf1bB2LH4M=
Subject key identifier: 3C:C0:7C:41:A5:C3:44:D4:0B:97:54:6A:22:32:61:61:7B:38:12:AC
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 82
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/PMB8QaXDRNQLl1RqIjJhYXs4Eqw.roa
Signing time: Tue 01 Feb 2022 01:31:14 +0000
ROA not before: Tue 01 Feb 2022 01:31:14 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 118.236.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:14 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=3CC07C41A5C344D40B97546A223261617B3812AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:27:74:85:e3:2f:84:94:f7:24:85:09:6a:
cc:52:7e:a3:fc:70:e7:01:da:20:de:17:d7:33:18:
80:37:5c:eb:1c:5c:d1:e5:29:0f:70:50:bb:cb:09:
b2:db:2e:85:2c:c4:bf:44:81:00:24:d2:7a:77:c9:
6e:34:0c:58:c2:be:fe:a4:3c:32:c8:48:0b:cc:f7:
06:78:66:5d:b7:37:72:40:ad:cf:05:ea:d1:19:26:
2d:a2:f1:44:4c:81:cc:8d:ab:1c:21:49:3a:30:c3:
24:39:e0:8b:86:c2:5b:b4:88:d4:da:0c:50:fb:5d:
31:fc:48:ff:f8:44:0f:89:74:b1:2e:d5:70:83:0c:
be:93:d4:a0:9b:28:e5:40:df:1f:18:54:10:e2:77:
44:bb:64:45:3d:26:de:9a:dc:5a:bb:80:dd:76:39:
f8:4b:58:c4:7e:fc:f3:5b:47:ee:38:80:3e:01:80:
b4:0a:66:0e:7a:d3:43:04:43:e7:6d:8a:f3:88:51:
51:92:c9:55:e5:66:78:68:3b:ed:8e:fc:e3:c3:c6:
4d:f2:1c:85:33:9c:2b:1e:36:69:2e:7d:45:0c:71:
e0:db:18:01:ae:af:d0:5f:e9:a9:bc:4a:eb:7e:f6:
c8:e1:b3:a1:a1:3b:45:ac:ea:49:7c:69:af:35:6f:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:7C:41:A5:C3:44:D4:0B:97:54:6A:22:32:61:61:7B:38:12:AC
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/PMB8QaXDRNQLl1RqIjJhYXs4Eqw.roa
sbgp-ipAddrBlock: critical
IPv4:
118.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1d:2b:bd:53:04:6e:08:ea:af:0d:24:ce:68:34:da:c8:15:93:
98:b6:f2:e4:5e:67:50:a0:5b:78:c3:dc:f5:85:15:00:89:f6:
44:43:db:c1:1b:05:c6:16:11:45:fa:2a:72:5e:5d:bb:f4:91:
60:9a:c3:67:70:13:d9:f1:c9:bd:37:d0:ff:32:1f:90:a4:cd:
2f:4d:4d:cd:b9:30:00:37:5f:5d:1f:94:3b:23:55:23:97:2b:
eb:08:25:8e:0d:2e:e6:ac:65:70:dd:f6:a6:fc:7e:80:44:18:
28:98:87:f3:24:84:3b:ff:0b:d7:55:65:fd:13:6a:fd:d1:35:
9e:7f:b5:9a:eb:ca:2d:f4:d5:ed:70:d8:4b:23:35:90:bb:7a:
94:9a:d6:5d:d3:9b:48:84:7c:9f:a3:13:b1:3a:75:77:86:33:
e8:e3:71:2c:70:ff:86:91:22:86:93:ec:1a:80:fd:b8:3c:ff:
6c:67:ec:93:30:1e:14:ea:04:99:96:74:9b:d2:c7:31:38:0f:
0a:22:4e:6b:b5:45:8e:9b:e0:2d:c1:ae:ba:18:d1:93:93:6b:
cb:e7:09:bc:52:0d:21:db:78:43:fc:73:06:91:5f:eb:fe:f4:
e2:a4:42:9c:10:99:cc:1b:c1:8f:80:b7:f5:83:bf:e5:a1:b6:
80:51:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org