Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/r4Fm_3SBVYuQYxsjRA7oBmQHjUw.roa
File: r4Fm_3SBVYuQYxsjRA7oBmQHjUw.roa (raw, json)
Hash identifier: 46vGRR+o9JoOeW18QcJ20YlsRWVp1mIhXs8bZShXFYU=
Subject key identifier: AF:81:66:FF:74:81:55:8B:90:63:1B:23:44:0E:E8:06:64:07:8D:4C
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 9B
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/r4Fm_3SBVYuQYxsjRA7oBmQHjUw.roa
Signing time: Tue 01 Feb 2022 01:31:50 +0000
ROA not before: Tue 01 Feb 2022 01:31:50 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 211.10.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 1 01:31:50 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=AF8166FF7481558B90631B23440EE80664078D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:db:bf:fc:1e:ca:c7:c2:1c:3d:72:cd:a8:
47:23:26:0a:d6:80:02:da:6b:3f:13:77:89:96:9f:
56:1a:9a:bb:14:ab:4b:b1:b1:aa:23:a5:81:13:b6:
c1:58:75:ee:b3:59:96:84:c0:5b:df:59:53:4d:85:
a5:7e:df:64:16:f4:02:ae:57:dc:74:c6:8e:d6:bb:
97:52:ab:f9:7a:50:e8:b5:42:3c:15:fb:d2:6d:15:
e1:d3:8a:f7:97:0d:15:7e:2d:cf:47:90:a7:cc:7e:
32:cb:56:c2:7c:fa:30:3c:3f:94:74:b7:13:21:40:
4f:2d:4a:bc:ab:11:20:c9:1b:09:a9:25:b0:a0:78:
23:19:11:ad:97:34:80:a7:6f:7f:ec:85:78:85:e0:
a9:d0:23:13:88:e6:6e:86:8d:4b:79:99:10:4a:d3:
6e:4e:e3:5f:70:64:d0:98:c7:95:fe:62:52:ec:e6:
13:c4:02:e1:61:d7:a2:ee:f1:4b:3f:05:e6:03:93:
61:e1:db:fd:d6:5b:0c:86:1c:56:7b:17:e1:5a:38:
35:eb:17:2b:0c:f2:57:1e:9f:d2:5d:1d:e8:cf:55:
ee:16:83:14:30:c8:30:4d:8a:97:7b:e3:60:75:9c:
63:4a:b2:df:4b:4a:f8:ea:e1:33:0f:95:de:a6:67:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:66:FF:74:81:55:8B:90:63:1B:23:44:0E:E8:06:64:07:8D:4C
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/r4Fm_3SBVYuQYxsjRA7oBmQHjUw.roa
sbgp-ipAddrBlock: critical
IPv4:
211.10.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:90:13:68:60:85:e4:ec:7a:da:cb:9a:87:fe:0d:7d:bd:78:
c5:05:8c:18:3b:03:66:9a:45:a0:2a:06:6e:7e:4f:cb:2c:7a:
2d:63:49:aa:17:63:52:0e:b8:9c:d1:5d:c3:4a:ad:1f:e7:d4:
98:6d:86:be:c4:e2:e4:f0:ab:e5:cc:06:cc:7f:2b:8f:c3:0d:
55:13:c2:8d:47:65:84:3e:9c:9f:16:97:6e:e9:78:1c:b5:e1:
12:a5:20:f1:f4:62:ca:e8:ff:f4:c3:b1:8b:41:dc:42:4b:cb:
cf:e9:b1:b0:9d:03:d9:15:fc:8c:34:6c:ca:72:0e:88:32:3e:
3d:3e:ac:88:f6:81:75:96:c2:6e:74:eb:f2:04:3c:22:5a:14:
18:70:d3:a0:f4:89:e1:f5:59:88:22:fb:b9:a2:af:95:4e:cc:
15:01:8a:3d:08:f2:2a:c3:90:90:a3:a1:23:3d:35:d4:19:d3:
ef:06:b2:73:e6:29:a2:59:51:b3:43:67:35:5f:19:2f:4f:17:
40:6b:b6:96:1b:a5:84:f5:4b:19:24:51:79:43:cc:20:c2:b6:
8e:04:84:a5:53:8b:e0:f5:fa:a9:2e:f4:b7:88:a0:92:8b:89:
05:6e:05:b2:71:d3:8f:a3:ef:31:cb:8a:4c:fc:72:9a:91:fc:
04:c1:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org