Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/XLImmmpOaVk4LrJArnpKeSyRzps.roa
File: XLImmmpOaVk4LrJArnpKeSyRzps.roa (raw, json)
Hash identifier: pRvHuMAoZfZnylac4VmLRlLZoyuEbdD7IA0VOBWGFiQ=
Subject key identifier: 5C:B2:26:9A:6A:4E:69:59:38:2E:B2:40:AE:7A:4A:79:2C:91:CE:9B
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 89
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/XLImmmpOaVk4LrJArnpKeSyRzps.roa
Signing time: Tue 01 Feb 2022 01:31:17 +0000
ROA not before: Tue 01 Feb 2022 01:31:17 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 118.238.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:17 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=5CB2269A6A4E6959382EB240AE7A4A792C91CE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:40:f7:aa:8f:22:48:96:68:4f:63:4c:f8:
fc:fe:6c:c0:9c:c6:ad:4d:b7:62:43:de:2b:35:8b:
47:5a:78:9d:7b:bd:c0:2a:99:fb:d8:6f:90:40:e2:
b9:16:ef:bb:72:35:e5:ab:7f:05:57:61:df:f8:fe:
ed:01:63:20:d6:71:90:c2:dc:00:20:54:b0:2e:fb:
21:aa:80:ce:32:4f:b0:07:eb:38:a9:08:40:8e:2e:
1b:5c:c3:1a:7e:66:17:25:89:22:f1:ed:da:6a:8e:
d5:2f:12:fe:99:9e:0e:64:99:f8:b3:87:5f:5e:b8:
55:77:3e:d4:c7:1d:8b:09:83:4a:f4:74:5d:2f:f4:
da:10:7c:43:ee:7f:6a:89:c7:c1:d5:e0:66:41:9b:
7d:b1:74:d0:67:21:9d:3b:ff:62:75:9b:b3:1f:e4:
63:3d:54:04:c4:e5:43:be:56:89:c9:2f:dd:b5:30:
73:e9:1c:22:e5:44:2d:c6:11:73:26:41:2e:53:49:
80:69:be:1a:e4:50:a3:0e:a0:95:3d:50:8e:e5:7e:
05:9b:69:c6:70:3a:62:ad:e9:b8:b5:7f:07:e1:37:
3c:68:42:6b:cf:0c:9c:44:c4:ad:4a:90:53:a6:64:
36:d2:48:b8:17:75:0c:8a:49:a5:81:41:46:ba:93:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:26:9A:6A:4E:69:59:38:2E:B2:40:AE:7A:4A:79:2C:91:CE:9B
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/XLImmmpOaVk4LrJArnpKeSyRzps.roa
sbgp-ipAddrBlock: critical
IPv4:
118.238.0.0/17
Signature Algorithm: sha256WithRSAEncryption
10:9e:9e:8c:3c:c4:ed:70:1d:a5:cb:80:f0:c6:cd:4a:1d:e0:
17:b5:cd:48:dd:21:ee:f2:76:91:99:e2:93:bd:fa:66:76:79:
0d:3f:e1:93:71:64:a2:e3:e7:e9:e8:4b:e6:eb:95:16:b7:c6:
c0:29:1a:54:85:5c:ce:88:f8:3d:b0:be:b5:9a:b8:80:64:a9:
f4:44:a1:7f:48:0c:75:41:e5:d5:3b:76:b7:ab:c2:75:07:99:
fa:c0:c6:58:db:48:e5:05:49:96:28:99:a8:1d:bc:39:18:e4:
dd:66:c5:f4:f6:ea:13:e1:c1:a8:93:b9:36:d3:3b:d3:c4:e2:
b4:94:bb:62:47:9e:6f:37:96:8e:60:83:a3:48:97:a5:cd:1c:
26:72:ab:ab:7b:be:78:c9:e9:73:b9:1a:c9:98:d8:41:e0:84:
46:1d:7d:af:db:d8:db:25:b7:cb:1b:d3:98:ff:a0:70:03:a9:
32:ea:69:d5:f6:c1:74:96:4e:12:fb:78:1e:19:3b:1c:29:25:
31:9f:0c:2a:01:90:4a:8a:a1:58:77:af:80:f4:a9:f0:9a:39:
a9:7f:bf:98:e8:ff:7d:b0:ff:0d:76:1a:96:cc:2a:b0:10:33:
c4:6f:35:fb:7a:af:ad:e2:bc:97:32:2d:ca:63:5f:7f:94:42:
87:4c:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org