Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/iTyHJQS8-cQRjXVpU9ITT6pW6CY.roa
File: iTyHJQS8-cQRjXVpU9ITT6pW6CY.roa (raw, json)
Hash identifier: L942QfcqsY5en7l0Z4Zq7HDE2oboEohPPGT/Ox6FERM=
Subject key identifier: 89:3C:87:25:04:BC:F9:C4:11:8D:75:69:53:D2:13:4F:AA:56:E8:26
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 8A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/iTyHJQS8-cQRjXVpU9ITT6pW6CY.roa
Signing time: Tue 01 Feb 2022 01:31:18 +0000
ROA not before: Tue 01 Feb 2022 01:31:18 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 210.139.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:18 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=893C872504BCF9C4118D756953D2134FAA56E826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:0d:5b:eb:d8:20:99:ae:a7:e7:d7:8c:56:
07:99:f7:b1:ea:4e:77:56:5d:04:19:88:b1:dc:2e:
3c:09:b2:cb:50:64:eb:6c:73:46:09:99:76:15:bc:
39:1a:ac:fa:1a:71:89:a1:08:41:9c:e5:79:3f:a8:
3b:5e:bb:7e:fe:d5:7e:e5:7e:d4:8d:cb:79:73:f0:
60:3d:ee:d5:ad:eb:2f:2d:87:7c:15:53:bc:af:93:
62:b2:90:b5:5b:00:e6:62:95:a1:e2:5f:33:08:f9:
cb:e2:1a:80:58:98:4c:ac:3b:f3:f8:09:c3:62:e6:
85:7b:72:24:cd:b3:f2:06:0b:9c:2e:11:3c:5d:68:
81:f6:89:03:e0:70:76:ac:83:17:2e:d9:e7:1f:57:
b5:17:b4:27:f0:59:4a:24:4c:92:bd:58:d9:c1:e8:
5e:86:95:6e:10:d9:56:e4:87:56:65:d5:7b:62:08:
6b:f4:f6:c2:a4:8f:c6:b4:aa:7f:74:af:96:bd:76:
60:f3:1e:33:9f:42:b6:3a:f7:02:c3:3c:da:fb:31:
06:a0:88:70:ab:fd:52:74:8d:6f:93:01:3c:d3:22:
00:2e:62:ac:40:b7:3d:9d:e5:62:11:e7:49:ec:c4:
3d:bb:ee:2e:87:1b:b5:89:1d:13:46:35:9b:8e:b4:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:87:25:04:BC:F9:C4:11:8D:75:69:53:D2:13:4F:AA:56:E8:26
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/iTyHJQS8-cQRjXVpU9ITT6pW6CY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.139.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:9a:04:2b:c1:e7:2d:b3:7a:28:d6:9c:85:f9:93:56:c6:4e:
88:ab:34:fd:0b:fe:28:be:5c:08:d5:6f:86:c5:ea:5a:4c:59:
e2:2c:5d:a7:3a:32:4f:44:05:54:9e:4e:f0:9d:7f:39:3d:c9:
8e:a3:36:9a:eb:43:75:59:31:a5:36:75:d3:c6:7d:1a:35:b8:
74:24:73:c5:7f:48:02:33:24:93:a2:42:6b:7b:2b:12:23:6f:
bc:47:e8:f1:77:40:cc:58:8e:94:83:4d:49:f1:36:83:dd:1b:
51:71:1a:a7:f8:db:f1:37:40:cb:45:91:17:a1:11:55:9b:f3:
9b:46:fd:c7:e6:07:2d:ea:1a:4a:64:fb:cc:0a:f0:ae:f1:2a:
80:85:a0:d4:7c:d7:80:32:2f:97:c0:f8:ca:de:39:c6:f7:89:
0f:19:1c:2e:2e:bb:5e:92:9f:fb:6d:e1:93:de:31:fd:50:f9:
00:f7:87:9e:fa:04:63:6d:55:eb:5d:15:bd:0c:59:52:cf:9a:
e8:52:8f:f9:9f:28:46:29:46:d4:c8:b3:e4:be:cc:1a:84:24:
05:52:02:7e:5c:3b:4b:2a:bd:c6:18:15:1f:6f:01:5d:e6:a9:
55:48:57:f9:21:1b:7a:5a:84:24:7a:40:21:2a:07:56:e7:4e:
2e:9d:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org