Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/SHKcfhHZmFyvrwDgII7ISZUk67s.roa
File: SHKcfhHZmFyvrwDgII7ISZUk67s.roa (raw, json)
Hash identifier: DHkvTdAZcM9Y69BhLJoSoaWwqGLDDGIk/GEd0H+K5Ec=
Subject key identifier: 48:72:9C:7E:11:D9:98:5C:AF:AF:00:E0:20:8E:C8:49:95:24:EB:BB
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 68
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/SHKcfhHZmFyvrwDgII7ISZUk67s.roa
Signing time: Tue 23 Feb 2021 08:57:55 +0000
ROA not before: Tue 23 Feb 2021 08:57:55 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 210.174.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:55 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=48729C7E11D9985CAFAF00E0208EC8499524EBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:f6:e3:d7:0e:4b:9d:3b:6a:73:52:59:e2:
af:f4:85:bd:14:3e:3e:e2:5c:18:92:fc:60:55:19:
2e:ba:42:c4:19:24:e9:fd:97:5e:39:40:81:b1:2e:
aa:7c:3e:6a:d8:13:83:be:ed:5a:c9:7a:b4:33:c7:
2a:e4:55:f3:ec:ea:78:3c:3f:0c:b4:b3:35:21:49:
a7:99:e8:47:3f:d9:18:eb:e7:81:53:11:04:db:34:
d0:3b:4f:60:a4:d7:25:6e:31:52:5e:5f:69:53:f0:
71:df:59:78:99:df:2a:3f:fe:00:cb:c5:e1:41:00:
89:a5:68:70:13:b2:87:f9:42:12:a3:83:48:00:87:
61:00:52:f9:fe:07:81:f2:f5:37:df:15:02:92:f9:
0c:ae:87:d9:b6:2e:9e:6f:fe:1f:b3:ea:68:af:66:
da:c8:f8:e6:e3:a0:dd:64:73:fc:16:05:8b:39:2a:
79:30:ff:5d:ee:d6:7c:67:a3:96:0b:e3:2d:e6:ec:
da:a2:6b:84:6c:72:92:64:fa:9b:97:e1:f5:b7:a3:
13:41:bf:4a:25:67:51:28:9d:ca:a9:d2:84:7e:a3:
bd:8b:a3:30:b0:ad:3a:e8:c6:60:28:08:d2:fe:bb:
4c:fc:c2:1d:87:1c:c1:80:a4:2c:32:55:23:e7:1b:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:72:9C:7E:11:D9:98:5C:AF:AF:00:E0:20:8E:C8:49:95:24:EB:BB
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/SHKcfhHZmFyvrwDgII7ISZUk67s.roa
sbgp-ipAddrBlock: critical
IPv4:
210.174.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:54:13:fd:c1:5d:97:20:77:30:90:aa:96:69:d3:63:2b:de:
8d:56:90:13:93:87:12:eb:16:05:4b:ff:c1:0b:2f:14:09:fc:
8b:1e:6b:9a:86:a7:aa:34:a4:35:fa:a8:b9:bc:67:3e:1a:f6:
56:eb:71:55:99:53:7a:55:71:8d:1d:ac:5b:59:aa:ff:9e:58:
7f:60:a8:70:94:85:73:5a:72:3e:11:34:d4:ea:d8:f2:9b:b8:
ed:9c:35:15:88:d1:76:54:68:d1:bb:63:6e:d4:8b:5b:24:24:
82:fc:9d:2d:68:5a:31:f4:98:f8:2e:66:ab:58:bb:53:5c:63:
24:b1:a7:2f:c0:6f:58:8c:dd:68:bd:cb:82:67:ba:de:99:a0:
1c:41:e2:04:41:6c:66:42:be:5e:2f:95:f0:27:5e:61:32:d0:
4d:ac:e1:02:0d:fe:ad:c3:f5:96:ed:29:d5:47:d6:7a:68:d4:
80:ca:b0:99:55:0c:ae:f0:65:4f:eb:d4:21:1f:db:4e:a7:57:
73:fc:91:14:00:2b:bf:4d:89:08:2a:a9:40:db:ed:7c:ba:14:
f6:fb:f7:ea:65:ce:e9:0e:65:fb:17:23:31:89:7f:2a:a9:17:
8b:53:49:e0:e7:b8:35:1d:32:06:48:35:5a:28:fb:6a:c5:bc:
f0:24:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org