Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/mNoIvKrN8z0Ttr0lkxLCsrposC4.roa
File: mNoIvKrN8z0Ttr0lkxLCsrposC4.roa (raw, json)
Hash identifier: 8FHsTyeQ9rR8x37QA7muGrN7ileFRy2HME4lFPyGpwk=
Subject key identifier: 98:DA:08:BC:AA:CD:F3:3D:13:B6:BD:25:93:12:C2:B2:BA:68:B0:2E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 4A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/mNoIvKrN8z0Ttr0lkxLCsrposC4.roa
Signing time: Tue 23 Feb 2021 08:57:35 +0000
ROA not before: Tue 23 Feb 2021 08:57:35 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 218.221.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:35 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=98DA08BCAACDF33D13B6BD259312C2B2BA68B02E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:9f:84:53:b7:b9:20:8d:3c:bb:fb:73:b8:
8f:a3:19:b9:51:48:84:61:00:fa:2c:c5:73:33:c4:
5f:aa:3d:58:a5:7a:51:c3:32:45:5d:01:5e:09:df:
16:c8:10:20:29:75:e2:42:62:15:fb:9b:a5:92:ce:
47:bd:bc:03:39:94:01:ea:38:c9:c9:99:3e:7c:b6:
0f:1b:a5:a2:fd:1e:a5:8a:30:d0:b5:e1:7e:3a:22:
8a:f9:86:b7:ce:db:b6:16:42:2e:c4:19:94:04:fe:
a2:ff:0d:4f:a3:53:74:0e:ff:34:37:0c:33:b4:51:
21:7d:8d:ca:5c:86:7d:ed:be:e7:7c:a5:d1:59:e3:
53:57:5e:15:b7:95:6a:a5:82:09:a8:1f:e2:35:98:
f5:f7:aa:47:42:82:41:af:49:06:b6:2d:20:c7:34:
4a:af:0d:bd:ff:ba:e3:df:93:30:c2:24:78:7a:be:
6e:af:30:f8:9b:f4:7b:63:36:62:6e:f9:17:73:c4:
0d:99:13:4d:f1:31:db:cc:d2:b7:0a:c5:1c:dc:b6:
30:8d:0f:3c:60:51:35:65:6d:d7:1d:17:c4:bc:65:
17:ed:0e:fd:fc:e7:f8:c1:65:fc:7e:dc:12:da:5a:
7d:99:83:be:00:c8:32:9f:cc:3c:81:47:b0:3f:71:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:08:BC:AA:CD:F3:3D:13:B6:BD:25:93:12:C2:B2:BA:68:B0:2E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/mNoIvKrN8z0Ttr0lkxLCsrposC4.roa
sbgp-ipAddrBlock: critical
IPv4:
218.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:44:10:2a:af:d9:67:da:20:dd:bd:d5:e8:27:a8:bb:59:11:
bd:47:28:f3:5d:91:6a:53:7c:74:32:6b:e7:7f:af:c5:2f:9b:
f3:8e:df:5d:e1:12:92:75:c9:aa:46:f7:2b:1f:31:b0:77:93:
1f:a9:c0:cd:64:e9:17:47:c3:c5:04:b8:09:03:28:c4:f9:c8:
98:39:10:53:f0:c3:ee:ad:91:14:6b:58:47:38:88:ca:b1:a8:
73:23:96:c6:c2:db:81:67:d7:f4:90:56:79:49:28:1e:a6:d9:
06:f6:c0:3a:b3:69:90:ba:96:65:2c:75:1f:d2:07:bd:27:2f:
fc:19:7d:f9:69:35:2d:1b:9c:fd:ca:67:fa:63:fc:a1:62:57:
1a:11:e2:7e:86:1f:98:60:09:b1:5d:d5:e7:f1:28:22:79:46:
e2:19:c8:fa:7a:b3:d4:29:5e:b8:c5:0d:36:ef:7c:72:1b:62:
bd:15:b3:b6:a5:d4:e4:be:e9:00:28:e2:00:7b:30:b1:87:c6:
d3:19:cd:21:32:a4:56:f1:c0:fe:8d:68:ed:c1:63:14:e0:e4:
6f:45:5b:e1:0b:62:06:ef:2d:32:40:f1:44:50:d3:4b:56:85:
69:9d:10:03:c6:17:75:9d:a5:db:70:37:4d:40:f4:51:68:16:
2f:e6:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org