Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/p5DCVSdZcvfFnSGmGeOCuPiLI2U.roa
File: p5DCVSdZcvfFnSGmGeOCuPiLI2U.roa (raw, json)
Hash identifier: Ybn7zgu9Dbt8uQcTSI+txbJynccjhStslDvXDqw7Yl8=
Subject key identifier: A7:90:C2:55:27:59:72:F7:C5:9D:21:A6:19:E3:82:B8:F8:8B:23:65
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 8F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p5DCVSdZcvfFnSGmGeOCuPiLI2U.roa
Signing time: Tue 01 Feb 2022 01:31:21 +0000
ROA not before: Tue 01 Feb 2022 01:31:21 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 202.223.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:21 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=A790C255275972F7C59D21A619E382B8F88B2365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:46:bd:0a:85:f3:f8:3a:62:08:15:58:0d:
db:30:49:39:46:3d:32:24:a8:a6:12:3a:f9:a3:7b:
68:c1:e0:da:d4:ad:f9:5a:e0:fc:0b:ee:e7:18:bd:
96:ff:bc:a5:c2:a5:31:21:16:fd:4d:b6:fa:3e:b5:
dc:8c:72:3a:b2:b8:2d:51:63:e3:91:b5:df:85:30:
7a:ca:3e:47:82:d1:a8:32:94:2d:ea:c1:66:c2:9a:
b3:5b:2a:01:bc:fe:3c:f3:a6:e6:2a:4e:0b:1e:70:
93:3e:93:83:17:bb:c4:99:68:c6:43:23:c2:8b:dd:
c6:ee:a0:50:98:d7:16:80:de:45:e9:f8:eb:b1:bc:
18:72:39:16:a0:9c:f5:a2:c6:fd:f9:8f:7a:03:c2:
65:ca:b3:56:d7:cf:8e:86:50:aa:df:cc:76:d0:8f:
fd:23:a2:cc:9c:3a:34:16:f9:01:f5:ad:a2:96:81:
68:25:66:74:ae:5f:4d:e0:55:93:4c:44:86:ed:5f:
f1:0e:70:6e:8a:18:93:04:15:46:75:87:a6:4e:a8:
14:2e:7c:09:ea:58:f6:5f:ba:3b:44:7a:f4:38:93:
36:e5:95:66:38:c1:d7:29:1c:c2:1a:b8:52:18:77:
68:22:9f:ed:16:e7:59:9f:1a:1c:6c:49:17:c6:dd:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:C2:55:27:59:72:F7:C5:9D:21:A6:19:E3:82:B8:F8:8B:23:65
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/p5DCVSdZcvfFnSGmGeOCuPiLI2U.roa
sbgp-ipAddrBlock: critical
IPv4:
202.223.64.0/18
Signature Algorithm: sha256WithRSAEncryption
13:9e:72:8f:d5:f7:fb:aa:e3:3a:47:fe:b8:7c:40:66:b0:45:
8f:8e:80:cc:97:54:d9:31:58:93:a3:33:8c:81:44:b5:4a:5d:
00:a7:37:cd:a7:ef:6d:7b:b5:4b:98:de:ab:9c:22:59:5c:b3:
37:31:f1:3d:77:95:33:cb:0a:c1:b6:78:1a:1b:f7:29:5c:1f:
56:c1:72:0e:b6:0c:c3:7a:4b:f2:a3:9c:d8:f0:a5:c9:a3:77:
1f:22:eb:cf:ff:81:95:9a:b2:ff:43:37:19:a7:bd:98:52:23:
99:7a:b5:b2:82:1d:d7:e8:a0:53:9e:28:8e:08:28:ee:f3:17:
fd:aa:18:e6:15:71:08:6c:6e:30:3e:69:21:ef:ce:d9:09:e8:
5a:c0:9d:f1:2b:9a:15:f5:03:a7:c7:93:1e:e0:e4:3d:28:31:
64:68:e5:e6:dd:a2:60:80:70:06:67:87:3a:79:a7:31:2e:1b:
35:f3:46:0c:a2:80:64:a8:86:d1:fb:80:06:64:a2:a5:92:c4:
f1:16:92:13:4a:e6:fe:b0:ec:21:10:a6:49:a8:be:ad:74:b5:
74:ed:db:c3:d3:db:6d:5b:bd:33:bc:82:e6:b1:73:4f:99:97:
1e:fd:04:8c:b6:cc:4e:6d:2b:bb:bf:2b:fa:21:86:7c:fa:04:
61:17:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org