Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zyZtXMlM5Ztbo11pKhznIg6vUCw.roa
File: zyZtXMlM5Ztbo11pKhznIg6vUCw.roa (raw, json)
Hash identifier: yEb5r47Sh91FK884TWiC3O1taL8MGtGboUhvN3tPnoU=
Subject key identifier: CF:26:6D:5C:C9:4C:E5:9B:5B:A3:5D:69:2A:1C:E7:22:0E:AF:50:2C
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 3F
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zyZtXMlM5Ztbo11pKhznIg6vUCw.roa
Signing time: Tue 01 Feb 2022 01:31:50 +0000
ROA not before: Tue 01 Feb 2022 01:31:50 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 159.28.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Feb 1 01:31:50 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=CF266D5CC94CE59B5BA35D692A1CE7220EAF502C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:c2:e0:3c:07:37:ee:93:e9:95:17:92:90:
84:38:a0:e7:7c:3f:13:2f:30:43:6f:2f:df:0b:90:
4d:c3:52:22:19:51:8f:0d:41:f0:f7:37:a2:b0:80:
15:c3:2f:59:9e:6f:55:8d:bf:4e:0e:64:2e:ca:86:
27:39:28:d7:d6:b6:49:b6:67:ac:f3:a8:de:a9:c4:
91:bf:a4:34:26:03:7c:6e:34:17:13:1b:09:b8:a4:
45:d9:4d:ef:7c:83:72:2c:c0:c8:7c:a0:77:74:a8:
20:25:f2:f4:94:63:37:e8:ba:25:8f:8d:ed:cd:e4:
41:79:e0:b5:b6:06:26:48:12:0a:72:a5:3a:3e:f1:
5d:30:3d:f3:c0:0f:28:37:55:49:56:d0:c3:0e:4b:
1a:05:87:12:57:61:32:3b:4a:ea:f4:ac:bc:a0:c1:
ff:53:00:e6:f5:5b:ab:99:06:67:df:29:cb:d4:94:
35:d5:ae:fe:68:e3:8f:fa:e9:88:b0:cb:ad:62:0f:
8e:bb:24:26:52:74:98:fc:d4:3f:81:78:06:12:82:
1d:8d:bd:71:06:32:70:9f:ec:bb:39:bc:fb:c0:46:
46:b8:9c:70:92:ae:14:21:b5:0d:a4:8f:bf:76:c7:
2f:fa:e2:f5:75:c8:4c:29:1e:8b:b8:01:d2:ff:6d:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:6D:5C:C9:4C:E5:9B:5B:A3:5D:69:2A:1C:E7:22:0E:AF:50:2C
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zyZtXMlM5Ztbo11pKhznIg6vUCw.roa
sbgp-ipAddrBlock: critical
IPv4:
159.28.128.0/17
Signature Algorithm: sha256WithRSAEncryption
cc:31:df:ca:cd:b0:d8:2a:1d:a3:0c:0d:3b:14:d1:21:39:72:
f1:69:76:55:c9:f3:b6:15:fd:0b:39:f3:35:29:b1:00:1f:d1:
6c:df:7f:4b:b5:b3:e0:c7:e6:5a:af:bc:4d:09:06:1f:04:db:
6d:d4:a6:a7:a4:1a:48:f6:be:c4:f4:8c:6e:b9:8f:9e:27:13:
bc:24:f8:fc:b7:42:2c:91:d9:9e:b1:93:45:ef:e6:25:6c:e1:
af:df:f9:dd:d2:02:9f:89:87:74:98:02:af:d0:7f:ad:22:ea:
78:65:ed:c5:f7:8d:88:44:76:d2:d0:ec:e5:3b:23:38:57:fd:
9b:24:b2:f3:7b:76:60:d9:56:4f:f1:02:96:1b:da:35:9c:fc:
82:c9:aa:ac:c4:a9:0f:b9:28:89:e7:b7:42:4f:57:7b:f5:3d:
f0:91:d6:bf:29:7c:b8:c5:7c:8c:8b:2b:e9:1d:ce:9c:6b:8d:
90:94:5d:01:50:a7:63:65:5b:24:78:ef:b7:e4:32:b7:a0:b2:
a2:8e:8f:79:54:8f:9e:55:86:4e:f0:8b:df:bb:43:90:61:07:
ae:02:a4:1d:4a:98:56:05:72:7a:a4:90:2f:07:a1:04:18:ed:
77:48:c1:60:cf:e9:19:fb:76:84:2b:2e:1a:c2:4f:05:10:cc:
55:bd:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:25 2025 by rpki-client