Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/a2mb48Iumn8R5EXVgKMpktX3aqw.roa
File: a2mb48Iumn8R5EXVgKMpktX3aqw.roa (raw, json)
Hash identifier: Eobd1r5pYGWEfmwZ/Y/5KYO61pP8ZP1UIJOJqQq5oNM=
Subject key identifier: 6B:69:9B:E3:C2:2E:9A:7F:11:E4:45:D5:80:A3:29:92:D5:F7:6A:AC
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 84
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/a2mb48Iumn8R5EXVgKMpktX3aqw.roa
Signing time: Tue 01 Feb 2022 01:31:15 +0000
ROA not before: Tue 01 Feb 2022 01:31:15 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 110.66.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:15 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=6B699BE3C22E9A7F11E445D580A32992D5F76AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:89:df:23:10:b3:31:b0:89:88:06:4b:56:
7b:c0:15:77:7c:2a:bf:d4:25:97:b6:ca:a0:99:40:
be:7b:1b:13:66:10:3d:7a:c6:93:9a:c8:46:7d:6c:
03:09:8b:40:81:52:ad:6b:e2:01:b7:da:53:8f:89:
53:d8:d9:44:e5:0a:04:b8:34:5c:64:d8:18:90:56:
35:a1:9b:0e:b5:c0:e0:72:67:87:9b:f4:09:5f:d5:
fb:8e:9e:38:be:dc:1a:18:52:5b:1b:e2:9f:0a:69:
92:f0:9d:b6:28:93:3d:be:0c:44:67:50:49:cb:d3:
f8:1d:2f:95:7c:b3:70:40:71:43:ce:a7:cd:d9:e8:
9e:d5:26:5f:75:11:cf:75:4c:85:19:52:e0:9e:36:
e5:6f:97:e6:8a:01:a3:97:41:62:b4:54:30:58:e3:
6f:1f:f4:af:cf:bb:03:24:03:82:d0:84:2e:38:2e:
94:94:9a:a1:1a:16:33:89:62:2a:11:a4:34:84:8a:
b8:aa:d4:f6:8e:eb:c2:2d:6c:27:97:45:6f:da:6c:
0b:6c:a4:fd:a3:db:f6:84:71:04:7e:aa:a3:a9:22:
2f:8e:5b:f2:a0:56:6b:8b:29:aa:e9:1a:64:82:51:
98:91:ff:5e:3c:d8:b5:d5:9c:8b:57:07:4b:7b:94:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:9B:E3:C2:2E:9A:7F:11:E4:45:D5:80:A3:29:92:D5:F7:6A:AC
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/a2mb48Iumn8R5EXVgKMpktX3aqw.roa
sbgp-ipAddrBlock: critical
IPv4:
110.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
37:b2:9c:94:38:65:4e:35:0c:ff:f1:2f:83:38:13:ad:c7:8c:
ec:6c:8f:f2:a7:e9:76:32:5f:c8:5a:57:bc:a2:29:4a:09:da:
3b:60:f2:8d:80:c2:8d:b5:62:0b:87:63:73:b4:0f:ae:bb:cc:
83:b4:bb:e0:97:a5:11:5e:ea:a0:4b:02:c5:71:da:0f:b7:ed:
95:a2:11:9a:02:ca:21:08:3b:a2:3f:b3:e5:8d:0f:dd:24:49:
b0:22:27:64:e6:97:1a:94:e0:41:73:82:1a:b9:9a:22:ec:94:
be:a0:25:a7:5a:39:0b:7c:90:44:28:1d:fd:57:83:ab:35:c5:
0b:a7:7d:f4:3c:aa:4d:32:92:c0:a3:52:12:6b:16:dc:42:44:
78:61:c6:eb:8d:81:ad:e2:77:ea:d2:a6:09:5b:d1:5b:44:e2:
51:8a:fb:78:ff:4b:12:94:ce:db:b5:6f:99:fe:c9:1c:d4:5c:
e4:5a:18:e8:e3:34:cf:57:c8:ce:cf:07:17:16:8f:3d:ef:1d:
49:fc:da:00:59:79:89:78:ec:fe:94:d0:4b:d3:63:46:5a:43:
65:81:69:3d:a5:81:23:17:64:b5:75:29:d6:01:f4:7f:a6:51:
a3:2e:48:8d:46:27:4d:08:cc:31:2c:8c:6b:29:37:ee:4e:84:
3b:d5:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org