Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/asPLMArArF5Jq_IaE-3zDP7CYUc.roa
File: asPLMArArF5Jq_IaE-3zDP7CYUc.roa (raw, json)
Hash identifier: Qu5Oi3ag4IpIKKSSPS9wVGL8nMv8ReYrQXtXaqZtdr8=
Subject key identifier: 6A:C3:CB:30:0A:C0:AC:5E:49:AB:F2:1A:13:ED:F3:0C:FE:C2:61:47
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 22
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/asPLMArArF5Jq_IaE-3zDP7CYUc.roa
Signing time: Tue 23 Feb 2021 08:57:42 +0000
ROA not before: Tue 23 Feb 2021 08:57:42 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 131.213.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:42 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=6AC3CB300AC0AC5E49ABF21A13EDF30CFEC26147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:af:5e:d7:78:ed:c0:fe:01:ae:00:45:cb:
b6:9a:cb:eb:15:3a:f0:17:d1:21:85:64:e5:6e:23:
ef:65:4b:a2:a5:80:22:ff:cd:d5:08:ad:b2:af:83:
4b:9f:e3:89:03:e7:6b:a0:2b:c1:df:98:b7:e9:91:
22:fc:4a:41:d5:7b:cc:7e:ad:77:67:fc:39:38:02:
0c:8d:09:e7:85:fc:37:ce:ce:92:66:fd:93:2f:a4:
17:29:2f:cf:86:d2:13:6b:8b:db:f1:76:2d:07:52:
07:a8:8c:57:7a:fa:2a:60:12:13:fe:4e:c2:35:54:
f9:12:40:6e:42:b5:20:37:3f:b7:8e:62:73:ae:eb:
d5:8b:ea:0f:fb:b2:40:16:9b:90:80:01:04:d2:a3:
9c:22:58:4d:76:34:d3:e3:1b:f0:80:12:e7:19:1c:
8c:af:97:1e:32:9b:b3:67:7f:c3:e8:84:b3:78:7d:
24:c5:32:f2:08:20:e3:71:e4:2c:ce:12:d1:2e:be:
5c:13:1b:63:ed:05:3f:39:9b:19:39:36:70:d2:14:
a1:4b:d0:f4:86:a1:a3:5b:c5:cf:e7:2e:ef:ae:d7:
63:2e:6f:22:4f:2e:0b:c0:82:4e:b6:44:72:73:e7:
cf:5a:ae:0c:1b:b3:5a:27:40:16:e7:99:a0:b9:f0:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:CB:30:0A:C0:AC:5E:49:AB:F2:1A:13:ED:F3:0C:FE:C2:61:47
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/asPLMArArF5Jq_IaE-3zDP7CYUc.roa
sbgp-ipAddrBlock: critical
IPv4:
131.213.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:2c:14:ed:c5:b9:5e:7f:ac:b3:0c:72:ca:22:34:61:2d:b2:
c2:db:c9:f6:ea:62:95:36:57:01:17:f7:d8:b9:aa:1b:22:10:
84:00:98:b6:8e:96:27:fa:e6:f0:9b:09:61:f7:83:71:8d:c8:
41:45:ff:20:35:6b:98:65:c8:e7:9e:2f:7a:01:81:48:74:5b:
cd:71:65:8e:23:1f:be:8a:a1:b8:2c:36:c1:7f:50:22:b8:38:
b5:a9:17:fb:bb:8c:ac:15:a4:b1:0e:04:e7:bd:11:ae:d8:c7:
65:6b:2a:70:eb:f2:10:19:93:2d:40:27:89:7d:54:7b:75:e6:
80:e7:14:9b:7e:cb:b2:ae:81:9a:76:c3:ee:05:e0:28:c9:91:
b6:1e:40:13:55:ad:7e:2e:03:7b:90:ea:40:6f:4c:b2:f0:e3:
d0:4b:81:95:72:b8:df:21:e6:14:6e:93:80:76:a2:01:b7:ec:
9f:48:69:18:39:03:39:00:00:19:6c:5a:98:6f:81:f7:93:58:
8c:72:e9:4c:db:fe:06:dc:7a:70:de:6d:f2:57:c9:ff:e3:47:
15:c3:03:cf:9c:14:06:2f:26:a3:ce:a7:94:3a:bb:af:6b:2e:
07:32:7f:d4:35:f1:b3:ec:71:a6:43:82:c9:9a:f8:f7:75:4b:
f5:11:3c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org