Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/R17ukDqm-20iWxcBH5V093NF-Y0.roa
File: R17ukDqm-20iWxcBH5V093NF-Y0.roa (raw, json)
Hash identifier: LFmfRe+1Zq+F9h4WbvTlp44Ti3e+ksMDJwqzrjbolUM=
Subject key identifier: 47:5E:EE:90:3A:A6:FB:6D:22:5B:17:01:1F:95:74:F7:73:45:F9:8D
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: CC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/R17ukDqm-20iWxcBH5V093NF-Y0.roa
Signing time: Sun 01 Jan 2023 01:29:37 +0000
ROA not before: Sun 01 Jan 2023 01:29:37 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 58.87.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Jan 1 01:29:37 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=475EEE903AA6FB6D225B17011F9574F77345F98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:86:35:7f:4b:6b:a1:7c:4f:19:a3:c2:6b:
d0:b5:45:28:ac:72:db:bc:49:3a:05:fa:c9:1f:4e:
32:f7:a7:fb:a3:4c:bd:88:67:e8:5a:00:91:69:f9:
93:d0:49:58:4e:72:53:97:53:80:1c:d0:c2:13:c3:
79:90:ce:0c:69:ee:df:d5:d5:bd:67:14:4b:bb:c1:
66:21:da:a6:69:fb:06:38:f1:05:b3:b9:1f:3b:a3:
42:e1:15:46:37:57:9f:e9:3b:91:2e:bf:71:25:69:
a7:91:56:44:52:b3:66:ab:64:49:14:bf:b7:8e:60:
4b:e5:22:ac:08:bd:a4:20:11:1c:81:3e:69:8d:d3:
96:22:1c:35:6a:44:ad:e1:94:01:f4:79:ba:2a:bc:
e3:44:50:3d:31:c3:24:1e:a2:46:a3:57:90:5f:4a:
90:69:41:93:89:88:3e:35:9f:b4:6c:1f:e3:50:03:
6d:23:54:43:46:fa:5a:06:6e:df:3f:ca:f8:76:c0:
b9:6d:f6:d9:62:fb:74:bb:d2:8e:2a:6e:12:67:48:
1a:59:f8:78:85:34:10:cf:8e:53:30:74:80:88:89:
52:ab:11:9e:8a:ef:03:fd:e3:03:d3:44:0f:5d:e5:
dc:c0:1e:b0:b4:86:25:08:b4:31:39:20:e8:e9:93:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5E:EE:90:3A:A6:FB:6D:22:5B:17:01:1F:95:74:F7:73:45:F9:8D
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/R17ukDqm-20iWxcBH5V093NF-Y0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.87.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4e:c8:1e:a0:bb:79:e9:ea:cb:3e:99:c1:7b:9b:dd:d8:9f:82:
d5:bf:f5:ac:05:e2:0e:95:8f:9c:b6:5b:2a:80:14:bc:47:e0:
13:6a:8b:d4:a3:05:af:4c:30:6c:04:8e:54:80:ad:23:af:f8:
f9:3e:d0:3a:83:82:ac:ae:c8:03:df:7f:0d:3b:5b:15:9a:20:
5e:83:a0:d4:ad:8f:dc:a9:a9:91:2d:32:70:02:93:2f:c4:dd:
37:ea:81:2f:9e:ac:cf:59:dc:ab:3a:33:da:18:85:6c:48:8b:
e5:67:2d:50:41:e5:a4:c9:00:ce:3d:ba:16:36:c0:ef:88:3c:
08:25:a1:7b:70:90:92:d6:27:16:4f:1f:f2:ae:19:67:c4:4f:
52:00:92:bd:9d:23:b6:51:83:b5:6f:bf:45:f6:3a:02:63:b2:
db:4d:4e:16:cb:68:dd:ac:e2:78:90:48:ab:21:95:af:3c:4d:
bd:57:4e:32:22:8f:eb:89:3f:29:fa:43:7e:50:ef:bc:80:4d:
ff:73:a2:08:38:b7:d9:e8:92:e2:4e:08:73:c4:a5:95:9c:dc:
3b:ab:f5:66:87:46:19:41:65:de:12:d3:71:5c:16:5d:bf:3d:
3b:99:77:ef:36:d1:d5:a8:aa:16:95:80:4a:38:83:fe:4e:d1:
de:7a:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org