Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/y04OHl30hFCS981C2wGqXUy4zOc.roa
File: y04OHl30hFCS981C2wGqXUy4zOc.roa (raw, json)
Hash identifier: AFm3GFe+qISg3Qim14CImSldjRPZCWWyurVMQfA3iPo=
Subject key identifier: CB:4E:0E:1E:5D:F4:84:50:92:F7:CD:42:DB:01:AA:5D:4C:B8:CC:E7
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 56
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/y04OHl30hFCS981C2wGqXUy4zOc.roa
Signing time: Sun 01 Jan 2023 01:29:33 +0000
ROA not before: Sun 01 Jan 2023 01:29:33 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 2527
IP address blocks: 152.165.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Jan 1 01:29:33 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=CB4E0E1E5DF4845092F7CD42DB01AA5D4CB8CCE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:0c:08:bf:d3:b0:9a:fb:d4:ae:9f:2a:b4:
11:5d:df:aa:a3:93:3a:55:44:f0:ff:2b:03:16:7d:
1f:17:9c:0a:86:20:92:3b:2a:f0:84:29:72:d5:84:
6c:b8:48:e6:8e:21:42:ee:1e:c4:18:5d:ac:b9:32:
7a:90:f7:0e:4c:9e:d1:e2:6f:d6:47:c5:fe:0c:ff:
a5:1a:84:b8:ab:cd:63:44:04:a6:b5:d8:33:90:c0:
d4:3d:e5:dc:5d:fb:a0:15:18:f9:3b:87:cf:5d:c8:
0b:9e:bb:29:89:42:ed:84:31:27:7e:35:29:dd:e2:
5f:24:48:fd:92:c4:1e:5f:0e:e1:c3:12:6f:f3:77:
ee:49:04:41:37:f5:19:b5:3c:d1:f7:5f:6c:b6:d0:
74:59:5e:42:fe:ff:e6:ff:79:79:95:35:88:55:31:
14:70:8e:4a:15:00:a2:b6:ea:4e:e0:cc:61:0c:5b:
9d:c5:24:71:21:84:bd:dd:6c:48:0f:37:a8:49:4b:
c8:14:25:a4:16:37:6e:90:78:8e:5e:29:4b:cf:b4:
ed:55:42:3d:59:93:e2:1e:95:b4:e4:42:ce:5a:3f:
6d:5c:82:15:b4:22:25:8d:3b:af:8f:bb:48:52:47:
bf:0e:b4:7c:59:d1:d8:fa:68:82:f1:d9:f5:62:a8:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:0E:1E:5D:F4:84:50:92:F7:CD:42:DB:01:AA:5D:4C:B8:CC:E7
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/y04OHl30hFCS981C2wGqXUy4zOc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:34:c1:d3:61:1e:f6:ca:69:ca:e2:41:77:bb:8e:84:95:ec:
45:13:04:c7:59:46:d8:1f:18:e4:96:a7:bc:d8:9b:3d:47:9d:
22:be:4f:f5:86:7c:7f:41:78:a3:3e:9c:bd:8d:98:97:ad:39:
07:1f:4f:d1:a5:ff:29:6a:74:1b:71:49:af:a6:51:e4:b9:bc:
61:67:1d:ad:08:7b:16:21:bc:39:1a:7c:36:9c:a5:c8:4e:94:
04:0a:89:0e:c0:da:1d:7a:a4:90:a7:6e:8c:0f:5e:16:8e:98:
93:70:80:18:1c:c5:5e:9d:64:40:4f:46:f7:96:70:4f:99:a4:
c5:69:b9:6b:dd:cc:72:aa:db:77:1b:de:50:be:39:a0:6b:d7:
69:1d:7d:d7:94:5b:ca:d6:76:e9:1b:02:0c:48:ad:48:ff:f0:
87:bf:fc:74:61:e4:65:12:27:cc:03:5d:48:f5:93:25:ee:6d:
6c:d4:9c:6a:1d:40:66:92:b7:cc:b2:4c:20:6f:4a:35:3d:ac:
b5:0a:d0:3d:15:c2:05:e4:2b:51:ef:df:e6:20:4b:ac:44:29:
88:b0:30:e4:a1:a2:bb:5d:3e:e7:e8:31:c7:ae:ea:f9:95:1a:
49:a9:67:dc:1a:54:31:03:68:f0:3f:fa:99:c4:e1:8d:d5:c9:
fc:6c:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org