Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/hvGCx50ZBcZ7UQgZzIHV1mHjYYE.roa
File: hvGCx50ZBcZ7UQgZzIHV1mHjYYE.roa (raw, json)
Hash identifier: 3Tb0D6GPcheP+LBNTRSEqGJYd/zV3jY11bNs+j0IRk4=
Subject key identifier: 86:F1:82:C7:9D:19:05:C6:7B:51:08:19:CC:81:D5:D6:61:E3:61:81
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 63
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hvGCx50ZBcZ7UQgZzIHV1mHjYYE.roa
Signing time: Tue 23 Feb 2021 08:57:43 +0000
ROA not before: Tue 23 Feb 2021 08:57:43 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 150.246.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:43 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=86F182C79D1905C67B510819CC81D5D661E36181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:a7:55:7f:fc:a0:35:d0:12:d8:05:dd:13:
87:57:c6:26:46:a2:41:66:43:66:91:e4:25:91:41:
be:71:56:e3:9e:a7:08:6d:68:41:31:19:08:52:7c:
ac:f7:80:1f:58:52:53:f9:2b:5f:69:4f:b9:3c:b0:
15:35:7b:dc:ec:04:64:aa:22:96:16:37:2b:f4:e7:
55:a7:73:0d:bc:c3:f8:eb:1e:68:02:23:93:be:0d:
3d:c1:a4:42:04:2d:fc:61:c1:12:e8:0d:07:05:8b:
1d:a9:cb:b1:b1:74:e3:b6:67:b1:a5:04:74:09:3a:
9d:89:9d:a0:70:b3:34:64:8c:20:34:7c:92:96:40:
ab:b1:74:ab:75:f3:94:c2:c5:3b:d8:67:00:b8:31:
61:82:71:c0:79:3f:dc:1c:d3:48:01:42:24:a2:a3:
fa:35:d5:e6:c2:75:b4:cb:48:69:fe:d5:49:1f:f8:
a6:99:3e:8e:b1:0c:84:17:94:05:6f:ac:0e:4f:33:
51:60:bb:20:45:d2:55:ba:ab:5b:f6:db:00:f6:40:
5b:88:41:41:85:e3:3e:a0:97:0c:76:96:92:b8:d5:
4d:7a:82:56:8e:4b:c0:93:4e:a2:da:14:fd:24:41:
eb:dc:43:8b:44:87:df:7a:66:5f:04:60:df:78:83:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F1:82:C7:9D:19:05:C6:7B:51:08:19:CC:81:D5:D6:61:E3:61:81
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/hvGCx50ZBcZ7UQgZzIHV1mHjYYE.roa
sbgp-ipAddrBlock: critical
IPv4:
150.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bc:dc:ca:ec:93:ef:18:cd:79:e1:f7:64:82:6b:00:9d:d2:bc:
d6:61:ff:77:1c:0f:8d:53:7d:d6:6b:b3:51:aa:83:4c:74:f9:
a1:d7:db:5f:91:fd:d4:4f:3f:10:d0:84:42:32:6f:73:12:80:
2e:98:05:66:8d:74:16:57:c3:3f:cf:8a:d5:1b:76:5f:8a:99:
e9:d6:7e:41:c6:85:17:9f:c5:20:89:b0:0d:2d:44:f7:16:44:
bc:f9:4e:89:0f:cd:d1:fc:30:28:7d:e1:c3:3d:09:12:21:67:
37:8c:79:a8:21:ca:3f:24:fa:ba:cc:72:28:ac:b8:8f:58:14:
8f:2a:3f:00:38:46:f6:61:6e:a9:93:a1:20:f5:10:2b:2a:46:
48:1a:7d:1a:89:b7:81:ff:8c:49:f6:67:56:99:a2:09:31:6a:
eb:bb:6c:75:3a:df:07:05:ee:c4:7b:77:4c:8c:8d:03:d6:4a:
99:97:6f:9a:9a:97:2c:cf:60:41:a4:9c:0a:41:a8:21:b6:93:
36:20:a9:ab:49:49:d7:0d:eb:7e:64:87:29:9f:7f:e1:cd:bf:
71:d1:8c:79:88:2d:2e:84:bd:bc:65:1f:3a:ca:0e:36:da:48:
4b:31:09:b7:ec:de:e0:58:71:57:eb:bb:74:18:9e:f9:a4:6d:
88:8d:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org