Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/POhM0CytKWQDsKlxopBlSwqMSu0.roa
File: POhM0CytKWQDsKlxopBlSwqMSu0.roa (raw, json)
Hash identifier: ztXEw8p5zO15YCtBUn6X1hQxcFJ9Tkt6RtGY/lIiW0I=
Subject key identifier: 3C:E8:4C:D0:2C:AD:29:64:03:B0:A9:71:A2:90:65:4B:0A:8C:4A:ED
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: 0B
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/POhM0CytKWQDsKlxopBlSwqMSu0.roa
Signing time: Fri 25 Feb 2022 07:12:40 +0000
ROA not before: Fri 25 Feb 2022 07:12:40 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 17676
IP address blocks: 61.193.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Feb 25 07:12:40 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=3CE84CD02CAD296403B0A971A290654B0A8C4AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:35:36:17:6f:1e:82:ad:ee:88:15:48:ab:
42:4b:be:07:91:09:4a:de:33:26:ea:1c:ce:88:f4:
b7:59:65:cc:b4:48:52:0f:fc:86:22:ed:27:ea:57:
2a:58:2f:d8:d9:0d:98:06:3c:35:06:fd:7f:a0:05:
77:a2:aa:73:9e:8e:2c:f6:f2:b4:5b:89:c7:c6:f1:
a1:f0:fe:57:ce:b6:0c:33:37:b6:ba:ad:a4:0d:fb:
61:3a:1d:09:2a:af:0d:81:d2:81:61:54:f8:f7:9b:
ec:ab:77:87:ef:65:bf:c0:5f:cc:51:c6:f6:92:0f:
4d:99:01:39:91:54:9b:fc:93:fd:9d:cb:64:3c:19:
f7:0d:5e:fa:01:ea:f9:42:c6:80:db:76:ee:71:03:
28:a4:54:b3:94:06:e9:62:3b:2f:60:e2:9d:7b:5f:
b1:f9:d8:35:11:06:27:b1:ae:5e:40:05:10:60:1e:
ff:ce:88:33:f9:13:e4:b0:5e:7a:c1:4e:df:68:f3:
5e:6e:2d:0a:ea:cd:f5:43:e0:9c:49:52:a2:3a:a6:
f9:a1:0c:c8:e3:2a:c1:7c:05:27:35:2e:91:40:77:
f5:ae:42:6a:99:bd:82:47:ad:48:73:cc:97:3d:c4:
95:4c:a5:b4:e2:a7:63:46:58:c8:f8:e0:6d:73:e2:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E8:4C:D0:2C:AD:29:64:03:B0:A9:71:A2:90:65:4B:0A:8C:4A:ED
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/POhM0CytKWQDsKlxopBlSwqMSu0.roa
sbgp-ipAddrBlock: critical
IPv4:
61.193.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:40:cd:84:a2:5d:ef:6d:ef:23:82:9a:c6:0e:dd:c7:54:70:
40:72:15:9f:b1:24:1c:3d:3f:e8:8a:2d:40:9f:35:89:9d:81:
b2:cf:ba:4c:81:ae:3f:b2:ba:2f:eb:63:10:57:4a:27:e1:b7:
c9:f8:93:f5:d3:a1:18:e4:13:25:92:25:93:dd:81:98:cf:de:
80:70:2c:7e:7e:9e:3f:26:b3:bb:46:13:12:47:e3:0a:7e:68:
48:81:a4:61:21:67:bd:b1:77:ba:4f:3b:4d:f8:5a:01:40:ae:
70:2f:98:e5:68:df:6a:81:e9:4d:f3:93:67:69:0d:5f:89:6f:
49:2a:4f:0b:c4:25:1e:3a:7c:8e:ee:26:fe:91:02:3b:d8:2b:
ba:6b:f6:45:f7:ef:5c:7e:b0:c4:26:7c:01:2e:d3:c9:85:45:
9a:93:19:0a:45:9e:6c:b1:d7:64:72:89:95:8a:a1:37:9c:51:
0a:22:a8:cb:00:32:83:b5:1b:95:11:39:12:4a:2d:a9:97:a1:
28:ca:24:68:70:c3:17:0d:00:d5:2c:73:d0:f3:36:63:39:50:
41:e4:57:35:c2:3a:ca:7c:38:71:9d:9a:b6:66:00:d0:65:73:
3a:76:2c:c2:c2:c0:09:fc:b1:28:67:bb:04:55:a7:ef:34:b1:
21:78:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org