Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q36PGa_ujMpjXCMJJ_Zx1Psnaxc.roa
File: Q36PGa_ujMpjXCMJJ_Zx1Psnaxc.roa (raw, json)
Hash identifier: mxK5EteMMq7hEitg00XvZBqAIBvLpgEQ5Wz9PJCNK14=
Subject key identifier: 43:7E:8F:19:AF:EE:8C:CA:63:5C:23:09:27:F6:71:D4:FB:27:6B:17
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 4E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q36PGa_ujMpjXCMJJ_Zx1Psnaxc.roa
Signing time: Tue 23 Feb 2021 08:57:37 +0000
ROA not before: Tue 23 Feb 2021 08:57:37 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 210.139.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:37 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=437E8F19AFEE8CCA635C230927F671D4FB276B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:40:63:79:5b:76:15:42:26:7c:88:6b:1d:
cb:19:82:87:f3:04:51:01:17:9b:fd:c3:f5:e9:41:
25:96:cd:95:4d:30:d7:5c:33:99:ad:b1:3a:da:22:
2a:ff:dc:91:34:cc:f6:52:e8:f0:ae:54:dd:5a:73:
a9:33:3d:5c:d3:4c:b2:5a:a9:f0:65:0c:b7:4c:1a:
03:5f:d4:65:93:50:69:8b:8f:e0:b0:e5:8a:18:18:
5c:d1:f5:68:59:1f:3b:b2:ed:09:08:1c:2f:f9:a4:
d1:cf:b2:27:d3:63:b0:74:fa:b0:0b:6c:70:3b:d9:
b6:d2:a2:9b:ad:3e:af:89:1d:a2:05:1c:7e:c7:61:
a4:89:c4:1a:8f:c5:39:4d:a3:bb:cd:c9:79:09:36:
7d:61:1e:e2:6b:1d:19:b5:95:f8:d4:2b:83:41:c7:
ac:71:68:19:2a:67:5a:ff:31:db:3b:cc:51:89:29:
cf:33:7d:53:12:4a:a4:de:c0:d3:63:17:4d:3b:47:
2f:04:e9:ef:87:8a:ca:03:aa:e1:27:b7:7f:cd:76:
6c:99:3d:c6:46:b5:d4:77:dd:45:39:45:dd:3d:83:
2b:a5:f4:88:60:83:d4:04:56:7a:be:35:dd:76:dc:
e2:64:15:47:3a:9d:e0:67:aa:fa:4b:76:38:e2:8d:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:8F:19:AF:EE:8C:CA:63:5C:23:09:27:F6:71:D4:FB:27:6B:17
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q36PGa_ujMpjXCMJJ_Zx1Psnaxc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.139.128.0/17
Signature Algorithm: sha256WithRSAEncryption
39:37:22:6c:90:eb:16:c8:2c:60:c1:d5:1c:b8:4f:f8:dc:63:
b1:41:ba:02:16:7f:e6:88:6f:75:b7:14:ab:cd:da:9e:5d:98:
2d:63:3e:66:73:26:b4:b9:1e:97:dd:d1:eb:63:49:59:dc:ab:
4e:3a:1b:73:d9:f6:f0:bc:db:54:8a:a8:64:36:cd:53:6f:9b:
54:25:58:37:87:f9:da:37:c5:8f:d5:32:34:62:90:5d:41:b3:
1e:1f:c5:0c:66:b7:42:97:0e:6e:57:ed:73:43:d6:91:8c:6c:
46:6d:36:d6:88:db:69:b3:7a:36:d6:77:df:9e:f8:f1:49:e9:
cc:b3:a8:77:50:a1:b3:04:28:be:a9:ce:fe:73:43:f2:45:6b:
dc:6c:e3:7d:04:62:d1:9e:08:db:0e:88:99:d5:a3:2d:a1:8d:
bd:df:d9:09:66:4a:51:5e:a7:dc:0d:ee:7e:2b:f4:ef:db:a8:
61:3f:02:f0:2f:a9:d3:50:7d:78:02:78:6b:64:d3:08:a4:43:
25:33:36:e2:45:9c:54:5a:92:0d:b4:93:46:6f:26:7e:3e:cc:
e2:c7:04:3b:38:20:2e:9c:22:a6:bc:ae:63:f9:e5:5e:db:69:
a6:9b:4e:3f:9a:f0:8f:f4:87:f8:61:5a:70:81:bd:96:c0:87:
0e:15:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org