Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qy1SaIZANmNNdKTYYVzqDXLoctY.roa
File: qy1SaIZANmNNdKTYYVzqDXLoctY.roa (raw, json)
Hash identifier: BLA+bY523EIJZmyY6Vlj3kmtqA5t68Xr0OSIkePbmF0=
Subject key identifier: AB:2D:52:68:86:40:36:63:4D:74:A4:D8:61:5C:EA:0D:72:E8:72:D6
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 24
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qy1SaIZANmNNdKTYYVzqDXLoctY.roa
Signing time: Tue 23 Feb 2021 08:57:55 +0000
ROA not before: Tue 23 Feb 2021 08:57:55 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 157.147.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 23 08:57:55 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=AB2D5268864036634D74A4D8615CEA0D72E872D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:17:45:09:3c:0e:a2:b7:f1:35:ae:32:e7:7f:
af:aa:f6:d8:7e:8b:c0:fe:90:83:c6:cd:60:ea:2b:
0f:b2:d6:36:b5:96:cd:08:eb:92:5d:7f:07:99:60:
0b:86:6b:1b:4d:b6:69:fa:5d:c8:ca:2a:b2:f6:b9:
66:4b:f1:f4:fa:a1:c2:f7:18:57:4e:fe:65:72:ff:
e9:1b:17:81:ac:3c:aa:33:99:7f:c4:33:84:b3:ba:
10:4a:69:d8:ba:a1:45:7d:b1:10:ae:99:c1:c8:dd:
e6:91:69:db:ec:60:96:c4:0a:c5:29:f1:e0:55:2d:
29:e0:0c:32:0b:e0:74:49:65:47:34:df:d2:f0:64:
20:3f:f4:ff:82:8f:71:52:54:d2:1c:97:26:8e:73:
70:0b:d4:5d:d4:fb:45:77:46:24:2a:4b:3c:5f:81:
ea:e8:3a:8a:a8:ba:9a:2c:68:ea:1f:30:9d:85:ed:
78:9a:e2:38:66:6d:67:1c:84:ec:e2:7f:8e:2d:8d:
35:c1:b7:01:55:f3:65:f5:d0:ff:83:21:25:35:96:
42:6a:27:60:20:4d:f3:cc:f2:5f:5b:3c:7c:aa:d1:
c0:9d:34:5c:5e:6c:57:87:c6:54:21:95:04:1c:f2:
ce:44:63:7d:09:e2:0d:c1:d9:e0:ef:81:55:13:63:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:52:68:86:40:36:63:4D:74:A4:D8:61:5C:EA:0D:72:E8:72:D6
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qy1SaIZANmNNdKTYYVzqDXLoctY.roa
sbgp-ipAddrBlock: critical
IPv4:
157.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:b7:a3:56:c6:1b:0d:12:09:a3:6a:b2:ef:03:e8:a8:fa:69:
e9:f6:fa:c6:24:ca:4d:04:cc:6a:7b:c2:2c:eb:02:bb:b0:75:
50:5c:39:91:be:3c:fd:50:11:15:89:9b:f6:36:38:87:41:f3:
b6:e5:ff:de:e6:dd:a7:d6:ef:bd:0d:98:57:e1:eb:11:1f:8d:
03:68:ac:82:39:13:5c:e3:21:82:8a:1f:6f:4b:41:2a:4a:6a:
fb:e1:26:7e:b2:88:f2:5c:bf:b0:2f:ef:f1:c7:a6:d9:4a:b0:
d6:5d:f4:57:02:a7:df:ea:4f:1b:3d:97:43:f1:62:bc:de:0e:
d6:6b:9a:2e:6b:b5:75:b9:24:75:14:d8:45:f9:d5:ef:1e:6e:
a5:5c:d1:3f:a5:a5:bf:1a:50:d6:48:6e:86:cc:8a:4d:cb:de:
93:e6:9a:3a:39:27:ee:96:8d:36:8f:06:02:4f:20:37:d1:0b:
e7:5c:82:73:0e:7e:16:fb:e4:73:8d:f9:31:aa:63:cd:86:35:
7c:ff:0a:c4:50:b0:83:44:a3:5e:6a:6e:44:2a:98:a3:74:c3:
c9:cc:e9:4e:f1:f1:2f:57:5d:35:70:98:92:ec:a6:4a:d8:be:
0f:4c:06:e6:36:30:5a:b7:26:89:26:80:4a:52:34:3e:e3:a5:
73:80:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org