Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/V96myUygJ3921VX9gWtT-kfWMrw.roa
File: V96myUygJ3921VX9gWtT-kfWMrw.roa (raw, json)
Hash identifier: caZqDvoWhFdkYszSIuH2PvZk8YJyXfwaeXcI8R7sdC8=
Subject key identifier: 57:DE:A6:C9:4C:A0:27:7F:76:D5:55:FD:81:6B:53:FA:47:D6:32:BC
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 1F
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/V96myUygJ3921VX9gWtT-kfWMrw.roa
Signing time: Tue 23 Feb 2021 08:57:36 +0000
ROA not before: Tue 23 Feb 2021 08:57:36 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 164.70.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:36 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=57DEA6C94CA0277F76D555FD816B53FA47D632BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:9f:d0:cc:b8:f7:10:0e:97:5d:83:3f:f9:
b2:a9:82:41:ad:e0:71:3b:b6:bd:fa:cc:c9:d2:4e:
ce:a7:c9:99:7c:00:32:89:85:67:eb:5e:b8:43:d4:
3c:6a:91:7b:76:d4:c6:4b:5b:60:50:56:05:02:77:
f6:11:6f:bd:b7:7b:b6:6c:cc:aa:89:11:50:17:dc:
29:cf:99:ac:fc:d4:a9:16:a2:42:a6:5d:25:cb:3f:
7f:8c:fd:28:8f:b1:fa:25:84:26:aa:40:b6:95:73:
41:ab:90:3d:f8:8f:45:64:50:3d:db:9a:82:3d:a1:
f8:87:59:96:44:1b:18:8b:0e:b5:f8:74:4f:dd:11:
ca:b9:d2:97:f8:71:37:c8:ef:b9:d2:f7:e1:a5:37:
10:28:63:55:63:c7:0d:66:f6:e3:18:03:72:2d:2a:
c8:17:c4:8a:b6:a1:01:b9:ee:2d:56:ab:e4:1a:6c:
d4:d5:77:4c:8b:02:09:2f:ef:34:2b:ec:25:e5:f2:
bc:0e:e8:33:e2:6b:68:91:6e:0d:80:2f:9d:1a:9b:
f2:85:b3:e9:41:27:44:d4:68:a3:cb:41:00:9c:76:
86:11:c5:fa:9b:62:68:2f:67:d8:ab:c3:1e:92:1d:
20:33:9a:fd:a6:60:9e:be:1c:61:6a:b8:9f:e7:18:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:A6:C9:4C:A0:27:7F:76:D5:55:FD:81:6B:53:FA:47:D6:32:BC
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/V96myUygJ3921VX9gWtT-kfWMrw.roa
sbgp-ipAddrBlock: critical
IPv4:
164.70.128.0/17
Signature Algorithm: sha256WithRSAEncryption
99:50:bc:fc:f0:84:04:f4:9a:b7:77:df:c8:29:a8:82:72:f7:
dd:11:72:d8:67:b5:09:1a:00:d8:28:81:ed:4c:3a:15:73:5e:
63:c5:e7:93:95:59:ad:e0:d4:b0:53:c7:d2:bd:d6:05:c1:6c:
7a:ae:a7:64:7a:fc:f7:21:0e:a4:7b:52:4d:19:f0:8b:e7:63:
02:d0:96:88:aa:44:91:e3:68:b3:46:31:fb:67:e9:8c:43:11:
a9:00:59:51:36:84:9e:82:e8:10:e9:5a:ea:c4:d5:86:5a:49:
03:d6:48:65:8f:4c:42:7b:6e:c9:85:0f:32:ed:9a:0f:ba:c4:
3b:f2:8e:66:b0:91:2e:97:30:cf:8c:6c:c3:10:f3:a0:bc:96:
29:10:68:a1:b5:27:45:47:98:4e:3b:7c:1d:a1:b7:f4:d0:6e:
dc:f1:9f:7c:50:25:bc:59:41:3e:89:30:15:87:00:b0:83:ed:
bb:41:5a:2c:3e:23:4e:b3:a4:ab:3c:a2:67:e1:e1:01:cf:d5:
97:33:b9:78:a9:cf:8a:ae:e6:66:43:23:e2:b4:97:0e:04:d3:
15:d9:31:7f:de:c1:ac:bf:e1:ad:b7:90:29:e3:36:d6:a0:38:
7b:99:3f:a9:85:ac:c0:6d:bd:45:26:12:d6:41:4f:b5:75:4a:
0a:96:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:27 2025 by rpki-client