Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jaQiBokvhLLnacAYzRUAiRRDldY.roa
File: jaQiBokvhLLnacAYzRUAiRRDldY.roa (raw, json)
Hash identifier: scTpMIEiz4tN5/JQIfYiROQvDo2D4WL4GrQCDqo1ZBA=
Subject key identifier: 8D:A4:22:06:89:2F:84:B2:E7:69:C0:18:CD:15:00:89:14:43:95:D6
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 86
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jaQiBokvhLLnacAYzRUAiRRDldY.roa
Signing time: Tue 01 Feb 2022 01:31:16 +0000
ROA not before: Tue 01 Feb 2022 01:31:16 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 218.221.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:16 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=8DA42206892F84B2E769C018CD150089144395D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:97:a9:ae:ca:71:f3:4b:5f:94:e9:7d:28:
60:1a:fe:d3:bb:b3:a4:25:2e:d1:00:fb:88:52:b5:
27:84:e1:ab:35:dc:60:24:ff:a8:d1:be:1c:1b:9d:
3d:be:0b:4d:6e:e1:40:07:3d:c5:0e:be:56:64:3b:
1a:da:84:c5:55:37:03:88:9a:27:de:f3:f9:64:fe:
45:d3:08:ed:2c:e0:6c:3e:b9:53:58:87:5b:3a:00:
01:7c:6d:ce:19:56:72:27:d9:61:d9:85:b7:0c:72:
af:47:ac:dd:71:6c:3d:2b:b1:be:91:b5:32:d0:22:
23:da:40:fc:f1:87:cf:c4:04:63:77:30:e0:3c:ae:
db:b8:5d:50:58:2e:1a:ea:76:63:b4:5a:a1:f8:f7:
97:dd:c2:0e:23:f6:1b:1a:86:57:b2:72:79:fb:b9:
5f:88:2a:f3:a8:39:22:99:0e:21:dd:b3:69:2e:ef:
63:7c:71:8e:1d:99:0a:d2:2e:72:9a:41:6d:85:14:
11:fd:2b:14:d3:bd:3d:28:ac:12:fc:9e:49:3b:bc:
d1:0a:b7:bc:76:38:0d:58:e8:c1:fe:50:66:3b:28:
22:eb:10:22:91:ac:6c:86:a9:62:cf:da:03:c9:3e:
1a:19:14:bb:49:e6:60:f9:80:1b:d5:f3:71:c6:d9:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:22:06:89:2F:84:B2:E7:69:C0:18:CD:15:00:89:14:43:95:D6
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jaQiBokvhLLnacAYzRUAiRRDldY.roa
sbgp-ipAddrBlock: critical
IPv4:
218.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:e9:77:87:84:19:e8:5d:25:d0:89:61:6b:fc:31:ff:5b:82:
69:d5:80:0e:b8:43:7d:50:50:d9:33:f1:ea:2f:75:7e:e7:41:
c0:53:f8:36:dd:a6:fb:09:3a:87:f3:2d:03:0f:76:89:10:e7:
33:e9:6d:3c:55:a0:06:47:5b:f0:0f:b4:a7:2e:e0:cc:67:00:
76:bd:7c:8a:67:97:0b:f9:4b:19:87:e3:f9:2c:bd:bf:3f:ae:
4e:1d:a2:df:41:69:5c:51:d9:31:e9:4f:61:70:11:4c:21:84:
f7:92:e8:c9:0d:7c:34:07:46:35:01:71:a5:d0:2b:27:2f:8b:
d4:77:95:c5:59:c3:7b:72:f3:c6:fa:b4:cf:f6:c6:cf:08:83:
e2:9f:70:0e:0e:86:b9:57:13:43:ee:bf:3e:49:4a:97:72:da:
50:33:d5:6b:6c:1e:67:dd:63:80:93:f0:df:de:c3:79:f6:2e:
01:dd:79:fa:ac:55:8d:b6:c0:85:81:68:fb:86:11:4b:79:44:
e9:56:7b:75:77:94:8d:a9:50:34:46:b5:07:30:f7:6a:21:b4:
59:e9:8b:2c:f9:1e:23:44:c5:9b:5b:4d:6f:09:4d:f8:4e:12:
2f:da:b3:fc:0a:98:cb:3a:f9:c8:3a:cc:79:12:9b:08:62:c1:
52:cb:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org