Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/hXCxeGiVVEHWIuS1UDYThYmPqaQ.roa
File: hXCxeGiVVEHWIuS1UDYThYmPqaQ.roa (raw, json)
Hash identifier: L6lI2LRYHnWiCjN3fk7CmkfLV8Ch9MGmFuU7Q7erLm0=
Subject key identifier: 85:70:B1:78:68:95:54:41:D6:22:E4:B5:50:36:13:85:89:8F:A9:A4
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 3D
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hXCxeGiVVEHWIuS1UDYThYmPqaQ.roa
Signing time: Tue 01 Feb 2022 01:31:25 +0000
ROA not before: Tue 01 Feb 2022 01:31:25 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 216.153.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 1 01:31:25 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=8570B17868955441D622E4B550361385898FA9A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:28:0b:72:7e:5e:f5:0b:1d:66:b7:bc:68:
7b:e4:d5:7f:d8:75:d1:a2:ec:5b:5c:30:3f:43:8b:
17:7f:a9:f3:aa:99:1f:78:b3:bd:a9:6f:38:3c:3d:
40:4e:23:09:7c:6d:3f:7b:e4:25:04:ea:11:68:bf:
0a:fe:6d:27:0c:96:55:ee:f6:a1:6c:60:64:9a:3a:
3b:d7:2d:43:2e:cf:9e:5e:06:94:27:4d:8b:24:65:
0b:4d:8e:5e:52:e6:5f:4f:7e:c8:3b:2a:1a:79:b3:
a5:52:ef:b2:96:4d:08:4f:a4:e6:98:84:c6:20:c3:
6d:3a:74:59:99:19:61:ed:a7:dc:26:1a:11:1d:e0:
d5:dc:7a:6c:58:5a:88:c2:6f:a1:8b:24:f6:f6:0f:
83:8e:ee:f7:8d:ab:01:55:27:20:58:ca:87:95:a1:
b4:33:db:a7:1d:a8:a1:5a:2c:77:94:d7:0b:44:a2:
69:32:38:bd:ed:7b:9c:05:67:35:6f:b7:e3:92:18:
65:e3:c0:80:42:a3:1a:45:8e:1e:a3:db:8c:ae:60:
6a:a1:4c:bb:c6:ad:93:0a:56:1f:c2:79:cd:32:97:
2f:df:40:78:34:83:a8:19:fc:2e:e9:1a:a3:d9:c2:
d2:b9:5f:4f:f3:75:bb:c0:35:33:50:e3:d2:2c:7c:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:B1:78:68:95:54:41:D6:22:E4:B5:50:36:13:85:89:8F:A9:A4
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hXCxeGiVVEHWIuS1UDYThYmPqaQ.roa
sbgp-ipAddrBlock: critical
IPv4:
216.153.64.0/18
Signature Algorithm: sha256WithRSAEncryption
99:d4:ac:99:24:82:7c:27:1b:6c:b5:a3:0a:85:86:f9:b1:33:
2e:8e:a7:79:ce:6c:30:d7:82:98:d5:89:cf:3d:18:a9:ae:fb:
bd:b7:45:a1:d3:47:40:90:78:c0:8c:59:83:7a:95:cc:61:8a:
2f:14:04:67:3c:02:55:8f:df:53:37:00:f7:66:ee:58:d1:46:
09:63:26:1f:a7:36:7d:d4:ca:9c:4f:94:40:a8:a3:96:7d:2d:
7b:1b:a3:1f:1a:b5:1d:b9:68:6a:20:1f:a6:a7:d3:5d:56:bf:
64:59:31:7e:e5:17:36:48:54:61:2c:84:ee:4c:a8:2c:e3:84:
7e:0f:87:88:5c:f2:2b:3e:a0:7c:44:e4:2a:f3:d5:26:d8:37:
1b:b8:32:8f:9f:e7:6c:b5:48:6e:49:4c:61:c5:1c:51:7f:80:
ea:32:25:4e:32:f0:e5:be:1e:85:60:2a:05:da:24:5c:bf:b8:
0c:d3:bd:45:1c:61:89:56:5b:6a:ee:a6:91:e2:06:4e:81:81:
4d:87:ab:e7:1d:3d:6a:34:30:04:25:d3:9b:11:27:0f:f3:9d:
85:be:fd:58:b9:fe:01:5d:39:69:39:42:30:63:ef:34:7f:49:
5a:87:66:b4:4d:6b:b2:18:8a:9c:2c:8b:a8:1b:a5:fa:aa:fa:
e3:3f:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org