Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/cPcIxE2NRsZfnx1KVQWFehegn98.roa
File: cPcIxE2NRsZfnx1KVQWFehegn98.roa (raw, json)
Hash identifier: FWBlTEvKx/kPrdnLEfSdAWJLsDZ/vxftYxfe+MwZYY8=
Subject key identifier: 70:F7:08:C4:4D:8D:46:C6:5F:9F:1D:4A:55:05:85:7A:17:A0:9F:DF
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 1B
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cPcIxE2NRsZfnx1KVQWFehegn98.roa
Signing time: Tue 23 Feb 2021 08:57:30 +0000
ROA not before: Tue 23 Feb 2021 08:57:30 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 159.28.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:30 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=70F708C44D8D46C65F9F1D4A5505857A17A09FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:e5:10:fb:f1:38:8b:72:3d:41:d6:ee:38:
22:67:9f:ba:6b:cd:1b:c2:04:37:09:1c:0b:58:8b:
53:e1:a2:76:58:50:3b:7d:7c:48:82:62:07:7e:54:
e0:06:b2:b8:d9:a0:f8:fb:1c:b6:28:01:0e:df:c7:
4b:a2:a6:ce:78:f6:5c:3b:c8:41:ab:d0:a5:52:88:
81:8c:52:e2:48:93:ca:d9:75:97:ec:71:5d:f1:73:
2f:86:40:69:97:ce:d7:8c:9b:6f:af:66:3e:dc:a8:
24:dc:dd:5f:0c:47:03:29:b0:ff:eb:04:1e:0f:32:
07:11:01:3c:11:df:4d:a8:db:b8:20:ba:70:ed:f0:
fe:b6:eb:75:cf:58:1d:de:f9:01:a2:1f:4c:1b:a6:
a3:d5:26:3c:64:c6:c6:2c:05:bc:82:0f:d1:f5:c4:
87:6f:3e:1a:11:0e:8b:a7:f6:8e:4d:e6:98:e4:c5:
c7:df:6a:b6:cc:98:e5:e1:2b:c3:cc:d3:f9:b1:93:
0f:17:90:b8:6a:33:1a:93:f9:a4:84:6f:42:8d:50:
9b:0d:da:7f:c0:89:55:a0:00:92:fd:a0:a1:1c:b0:
0a:1b:70:75:aa:72:9c:7d:c3:09:11:81:2e:02:0e:
16:6a:8d:70:55:18:ff:ba:c2:f8:40:34:29:9c:3b:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:08:C4:4D:8D:46:C6:5F:9F:1D:4A:55:05:85:7A:17:A0:9F:DF
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/cPcIxE2NRsZfnx1KVQWFehegn98.roa
sbgp-ipAddrBlock: critical
IPv4:
159.28.64.0/18
Signature Algorithm: sha256WithRSAEncryption
01:71:8e:45:14:6d:d4:d8:26:8f:02:9f:44:73:35:e0:3c:65:
15:b1:55:56:f0:62:f9:f1:d0:dc:64:bd:2d:fa:00:ca:17:52:
d1:04:de:eb:b5:f2:6f:66:f9:68:a5:ae:b7:72:29:3e:c8:75:
06:ab:8a:60:9a:25:ea:32:08:b8:93:25:d0:b8:8e:11:18:05:
13:8c:4d:a2:2c:71:5b:30:ee:42:cc:47:4b:cb:d3:dc:0d:8e:
ce:2d:a7:cf:ff:50:25:d8:c4:c4:f1:49:bf:ba:13:1c:73:bd:
03:e1:0b:40:78:41:23:6e:d3:c6:29:75:7a:71:0b:a2:c8:09:
67:9c:4d:75:14:2e:c2:12:56:0c:5c:66:87:7f:17:99:94:c1:
18:41:31:70:c9:f8:be:17:d5:4e:7f:4b:b9:75:e0:14:cd:c8:
c9:30:d3:04:dc:c1:00:b1:8b:4e:1c:d5:22:f5:0e:45:a7:6c:
d5:9c:57:6a:09:0b:26:3c:23:ba:f3:3a:d3:26:29:f3:c7:95:
7c:b6:59:9b:03:9f:c6:24:1f:ca:fa:8a:d7:10:88:fb:04:79:
6c:03:f5:85:bd:12:be:e8:aa:2d:60:99:b5:37:a4:44:3e:9a:
f8:a3:31:67:c2:6b:3e:ac:05:16:51:c5:5f:30:d0:e3:63:55:
e7:27:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org