Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zdsKgcgibVhJ0YO5CYaHz3QOqVA.roa
File: zdsKgcgibVhJ0YO5CYaHz3QOqVA.roa (raw, json)
Hash identifier: vtboabWpdX/oikQkzeABFvcCRnvjdbJVa9Oy5rw+uCQ=
Subject key identifier: CD:DB:0A:81:C8:22:6D:58:49:D1:83:B9:09:86:87:CF:74:0E:A9:50
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 54
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zdsKgcgibVhJ0YO5CYaHz3QOqVA.roa
Signing time: Tue 23 Feb 2021 08:57:38 +0000
ROA not before: Tue 23 Feb 2021 08:57:38 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 2527
IP address blocks: 202.238.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Feb 23 08:57:38 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=CDDB0A81C8226D5849D183B9098687CF740EA950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:af:90:50:11:83:96:e2:d4:2c:5f:3a:65:
b4:54:30:a4:7f:96:68:84:77:8b:da:10:27:8e:27:
3d:02:29:52:df:d3:d2:55:56:48:28:c1:2a:35:5d:
2a:6d:34:f9:07:78:2c:95:5d:06:7e:cb:42:42:1a:
19:91:6f:88:bc:86:d2:55:c2:26:85:c1:44:a6:d6:
e9:a4:fa:a5:81:05:cf:53:34:58:ea:f0:0e:16:68:
0f:90:6d:b5:e2:03:b2:f3:8d:75:e6:92:85:0e:89:
76:bf:09:d9:97:ac:8d:aa:86:fe:31:db:1b:de:a3:
de:81:9e:f6:04:34:e5:b2:69:1e:9d:36:6b:19:66:
ce:b4:69:ab:ed:6c:f0:5a:ef:c2:68:02:3b:00:f5:
a9:31:b2:67:96:cb:e4:c1:b2:e7:1c:d1:05:ee:c1:
d9:12:fe:77:74:8f:ea:6a:5a:72:2f:a6:1f:08:d5:
20:20:f7:ab:45:d7:02:3b:35:83:a0:45:14:a2:04:
24:e7:fd:88:39:cf:f4:94:0f:0f:96:2f:22:fa:e3:
b1:52:b4:8a:7e:32:9b:8a:66:bb:16:8e:73:e0:b4:
e5:92:4c:c2:05:98:05:a8:13:1f:d8:c7:5f:c0:08:
3a:5a:4b:22:f6:c2:d1:97:19:7a:fd:99:ed:60:e5:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:0A:81:C8:22:6D:58:49:D1:83:B9:09:86:87:CF:74:0E:A9:50
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zdsKgcgibVhJ0YO5CYaHz3QOqVA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.238.64.0/18
Signature Algorithm: sha256WithRSAEncryption
72:85:d6:1a:98:19:1d:8e:d9:1e:e8:f6:1a:bc:83:1b:ac:d7:
a5:8d:14:15:c7:85:21:0a:eb:f4:6e:66:ae:d0:a5:b1:8e:2e:
21:9f:dd:ae:2d:01:66:f5:ee:8d:09:8c:db:b2:48:45:c8:4b:
a1:02:2f:de:11:f4:53:8f:60:7b:d0:3f:24:fb:87:c9:eb:dc:
e3:0c:fd:04:65:88:d8:2e:b8:5a:d5:78:1e:b0:98:18:e5:cd:
83:0a:ca:70:f7:17:b3:c5:cd:57:2e:11:28:29:40:70:97:08:
05:26:30:70:7d:1a:01:c2:95:73:29:40:61:4b:4e:ad:62:fa:
aa:07:b2:cc:c6:17:25:43:ab:fe:7f:1d:4c:4e:71:66:9f:16:
7b:7b:20:b3:e5:a7:0a:b2:db:1f:99:c8:c9:87:40:31:8f:71:
1a:db:b1:9c:0b:40:25:a6:49:e0:f3:d5:3a:17:87:b5:32:03:
46:a6:19:80:26:2e:75:db:4a:48:9b:45:2c:f8:5a:c0:76:e7:
93:40:8d:ea:ab:56:94:a9:f3:76:64:b8:af:28:7f:aa:4d:0c:
cc:20:30:ae:9a:87:03:0b:6e:3a:7f:99:62:c9:13:3f:aa:63:
ab:27:e1:46:7f:80:d8:55:88:7f:f3:69:38:31:10:19:08:4b:
08:4d:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org