Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jUTgMQQAuQoJ3voVyB4KfoVS0n4.roa
File: jUTgMQQAuQoJ3voVyB4KfoVS0n4.roa (raw, json)
Hash identifier: 0S37X0hGteDJTSBdmRi98T7wnTy4GbpTYjiNg8teAsw=
Subject key identifier: 8D:44:E0:31:04:00:B9:0A:09:DE:FA:15:C8:1E:0A:7E:85:52:D2:7E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 8E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jUTgMQQAuQoJ3voVyB4KfoVS0n4.roa
Signing time: Tue 01 Feb 2022 01:31:20 +0000
ROA not before: Tue 01 Feb 2022 01:31:20 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 103.2.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:20 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=8D44E0310400B90A09DEFA15C81E0A7E8552D27E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:09:99:dc:e9:38:60:fa:cd:52:5e:90:21:
0f:1d:86:9c:19:21:da:26:a9:c5:8f:ce:3f:b8:db:
81:1e:a4:ce:f2:9e:3b:0b:6b:60:eb:9d:cc:09:09:
0e:95:fe:7d:ed:2f:7d:9e:ea:f7:ed:1d:aa:a6:78:
73:f7:2c:8a:bb:ae:c9:85:b9:e7:0e:80:50:0d:ca:
1f:9e:e4:67:56:30:a3:5a:62:dc:6a:ec:4e:58:b3:
93:bd:ae:0e:b0:55:5d:1e:4b:b1:03:8c:6d:6f:76:
dd:59:e1:5e:42:c9:df:ef:93:af:7a:b9:2f:6a:e2:
b2:f4:2f:81:bb:46:6b:71:ea:7e:8b:23:d2:6b:16:
68:de:21:b6:f8:9e:3c:f9:73:d4:a0:65:bb:a5:b3:
76:69:b0:c1:93:4a:24:58:0c:2d:e0:65:e8:ab:ab:
cb:89:ac:df:38:62:a7:b0:fa:04:39:ae:f4:83:8c:
44:75:0b:1c:96:b4:5e:6c:0f:ee:8b:85:ec:d6:10:
7f:70:c9:ee:0a:5d:35:00:55:c2:e0:de:b3:10:1e:
b3:32:72:6e:e5:a7:d7:fd:c1:b8:1c:13:40:07:16:
4d:a2:f6:9a:90:68:e5:c9:b1:0c:58:64:0d:aa:8c:
ca:56:b3:4c:dd:07:19:b0:a3:4a:39:72:b9:bd:cf:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:44:E0:31:04:00:B9:0A:09:DE:FA:15:C8:1E:0A:7E:85:52:D2:7E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jUTgMQQAuQoJ3voVyB4KfoVS0n4.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:89:5f:34:44:cd:42:93:a1:b0:93:91:9a:8d:22:d9:1b:86:
02:21:bb:57:c5:e4:5f:2d:dd:77:69:88:0a:f7:76:3a:01:03:
25:a6:f6:d8:42:e8:45:85:19:48:74:f1:f8:d5:ae:40:c2:94:
fd:f1:e4:ea:4d:bb:fd:20:f6:9c:a2:2c:14:87:b7:37:39:94:
fd:c8:63:ff:31:45:0b:56:8a:08:55:49:38:2c:59:ab:84:3c:
d3:7d:bc:58:25:27:3b:a8:4a:8b:af:ef:fb:2c:85:e0:c5:e1:
b3:09:7a:36:55:fd:69:f4:27:63:0b:58:8b:0c:a7:26:b8:eb:
c5:ca:2f:be:53:2b:7b:81:7f:f5:0d:1d:d5:b0:d5:31:8c:5b:
92:8a:2d:47:7a:b6:59:39:ea:12:bb:88:be:30:97:48:3f:e9:
67:2c:5f:14:92:b7:25:56:d7:c2:73:c4:7e:81:a6:93:f9:7e:
53:0e:51:5d:75:d4:bf:a0:06:6d:46:eb:65:1d:87:17:1c:4c:
5d:6a:e3:e1:fc:00:3a:44:d1:ea:50:90:04:f8:1d:01:f7:9d:
67:5c:6f:12:44:18:60:e8:dc:37:08:a8:ff:b9:d3:c0:75:58:
de:ad:02:4d:7f:2c:e9:4d:4b:7b:5f:d1:5d:46:a5:4f:6b:b8:
95:fd:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org