Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q848bGX33YBOV4KnRN1v53uIXn8.roa
File: Q848bGX33YBOV4KnRN1v53uIXn8.roa (raw, json)
Hash identifier: TfJadAWt+5y+Xlpmz6R44/vRXi/aolAiHdrUiYsiiGI=
Subject key identifier: 43:CE:3C:6C:65:F7:DD:80:4E:57:82:A7:44:DD:6F:E7:7B:88:5E:7F
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: C1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q848bGX33YBOV4KnRN1v53uIXn8.roa
Signing time: Sun 01 Jan 2023 01:29:31 +0000
ROA not before: Sun 01 Jan 2023 01:29:31 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 150.147.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:29:31 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=43CE3C6C65F7DD804E5782A744DD6FE77B885E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:f4:9d:ab:56:66:2e:31:43:15:3e:ad:05:
70:63:47:bd:ba:2b:6a:5e:db:93:63:dc:42:24:21:
9f:36:f4:f2:0b:eb:29:fc:df:b0:6c:a2:08:11:f7:
fe:bd:ab:56:0b:25:be:03:3f:67:ac:12:d5:98:d5:
68:ce:11:7f:bb:bd:7f:d5:9c:82:5f:38:b1:cc:fb:
36:f6:82:74:ba:97:4e:25:13:1f:f9:50:69:6c:7e:
6e:87:a0:cf:1a:27:ef:95:28:fa:73:34:e9:d1:c2:
dc:6a:fa:76:e8:4b:13:fc:ee:07:a3:f0:fb:b7:38:
6e:08:62:dd:ed:91:56:e1:c2:a7:95:ea:50:16:c0:
6b:28:82:d1:d0:da:80:71:70:66:2a:0c:1e:8a:aa:
f6:d1:42:09:17:73:94:9b:38:77:e8:af:ae:28:2d:
8c:6e:75:1a:3e:dd:d2:f1:f6:89:0d:2f:c3:39:44:
21:31:c6:fd:f4:28:ea:04:8e:3b:67:75:e8:6a:ac:
fe:f9:2d:99:55:90:84:a3:9b:7b:d8:ae:80:80:95:
82:48:50:a4:0a:5e:a6:45:55:7f:16:6b:ef:48:61:
74:9a:84:ed:09:f5:19:91:56:67:98:0a:47:2a:3f:
3b:6c:58:4f:80:32:68:82:96:07:aa:a0:22:5e:65:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CE:3C:6C:65:F7:DD:80:4E:57:82:A7:44:DD:6F:E7:7B:88:5E:7F
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Q848bGX33YBOV4KnRN1v53uIXn8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:56:d7:a5:81:af:2d:4e:64:9d:3e:49:e2:b3:51:2e:6d:a5:
92:c6:71:e4:18:73:82:2d:fd:59:c2:32:fe:6a:cd:da:cd:11:
06:35:c2:d2:e3:5f:56:61:75:e4:19:7d:be:44:c5:20:79:59:
62:df:1b:6f:d3:11:d0:59:b3:91:80:16:15:87:98:16:35:08:
0a:4e:ed:46:7a:43:07:f1:33:a0:aa:1f:dc:70:7c:13:f8:12:
ef:36:70:ed:5d:1a:52:d3:89:00:d9:60:a6:f6:0a:2e:bd:bf:
8c:6b:9d:f7:df:c0:e9:d5:2f:d4:54:a6:de:c3:15:8e:86:11:
49:7c:b3:ec:a9:70:6d:3a:91:e3:22:90:75:6d:0b:3b:a2:8b:
0f:58:67:3f:dd:94:31:61:91:d9:40:4c:3f:67:1c:b6:0e:4a:
70:ff:5b:43:1e:6e:13:cd:21:33:7d:7f:b0:d7:dd:f6:70:3d:
62:5d:a7:02:80:72:21:b7:96:4c:b4:46:9e:23:6c:87:68:f5:
8d:2f:fd:ad:ed:8c:3c:fc:65:bd:dd:bf:fc:52:c9:e2:2b:75:
d9:9a:56:2d:46:67:54:a4:c4:f9:13:3e:25:c6:32:a9:a1:29:
37:34:b2:4a:ae:7a:4e:5f:e7:84:a6:58:04:c2:83:59:06:ca:
66:43:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org