Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/X0xmbT_G5P9s6SCSKPiYWEDpyc4.roa
File: X0xmbT_G5P9s6SCSKPiYWEDpyc4.roa (raw, json)
Hash identifier: 0eSRbHWivFfYVATKuHKKawuf2+S/jgzgEXGMkv0bUws=
Subject key identifier: 5F:4C:66:6D:3F:C6:E4:FF:6C:E9:20:92:28:F8:98:58:40:E9:C9:CE
Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial: 3E
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/X0xmbT_G5P9s6SCSKPiYWEDpyc4.roa
Signing time: Mon 01 May 2023 01:29:08 +0000
ROA not before: Mon 01 May 2023 01:29:08 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 10019
IP address blocks: 219.100.20.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Validity
Not Before: May 1 01:29:08 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=5F4C666D3FC6E4FF6CE9209228F8985840E9C9CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:95:39:ee:7e:80:93:af:5e:89:80:e6:5e:
d9:90:aa:5c:65:c6:5b:e6:72:3d:ff:70:14:f4:c9:
7e:5b:7d:92:81:16:82:1e:86:a3:34:66:00:d5:54:
ec:c7:8f:f2:3e:bb:8d:b0:c0:d5:66:aa:0c:d5:92:
5d:9d:85:a7:47:b8:31:da:46:76:50:57:ff:c4:e6:
0e:03:fb:1c:25:44:b9:b3:cf:7f:a7:1b:13:3a:aa:
35:ff:42:2a:8c:d5:20:f9:20:06:88:90:9c:48:d0:
5f:2d:8d:c1:39:ae:09:e2:9d:4f:2f:f2:83:d9:62:
ae:36:48:b4:06:2b:15:da:76:28:55:6b:28:6b:a8:
dc:54:03:43:96:35:bc:14:fc:e7:4d:09:f5:3c:a3:
e0:6f:e6:31:0e:fe:87:4b:8a:61:42:b3:09:a0:9a:
71:ea:47:af:d8:5c:22:01:5c:e4:f4:42:08:35:d4:
e4:99:7d:59:97:46:6c:7a:58:27:7f:8e:19:a6:4a:
ad:72:d4:f7:b7:6d:b5:2e:1f:18:71:0a:c9:66:87:
cb:05:7b:13:4c:27:be:a3:7e:b7:b1:50:4a:f1:b4:
3f:b0:2f:21:7c:7e:65:6e:54:28:fb:ee:3e:96:31:
4b:dd:b1:c8:fc:ab:c7:ec:eb:5d:02:34:a8:c8:f1:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4C:66:6D:3F:C6:E4:FF:6C:E9:20:92:28:F8:98:58:40:E9:C9:CE
X509v3 Authority Key Identifier:
keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/X0xmbT_G5P9s6SCSKPiYWEDpyc4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.20.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c7:d3:a3:08:0a:f7:89:ae:6d:37:11:5e:ac:71:2b:ba:81:
6a:db:aa:da:58:35:09:83:6e:a6:4f:96:c4:56:7a:24:25:40:
05:91:04:be:d3:ca:7b:d5:9c:13:eb:e1:93:18:e7:e6:38:65:
d0:f4:c4:d1:b7:8f:72:46:03:90:26:1e:f8:6e:6a:9a:39:7e:
5e:e7:80:4a:28:79:42:97:59:a1:6d:e3:8a:dc:46:e5:2f:3d:
51:24:5e:9a:7a:42:fb:06:6e:cb:58:60:ed:9f:36:3e:1e:07:
e0:20:8e:5f:cf:5f:e8:ac:98:e9:94:d4:a2:4d:17:e8:0e:f3:
86:43:62:e2:08:e2:47:14:4c:bf:31:28:1e:83:17:35:73:3c:
44:74:6c:6d:38:d9:b3:f6:af:41:68:00:25:78:36:35:1d:d9:
22:02:43:62:73:7b:51:72:39:77:36:0f:da:65:94:b2:c6:ce:
60:be:ab:c4:1e:13:4e:dd:59:3e:87:b4:f2:86:41:eb:dc:cd:
e4:f2:86:f9:1e:b6:58:2d:00:28:fe:e6:91:5d:de:ab:2d:f6:
19:0a:b9:94:98:8f:da:77:82:64:1a:d3:57:ff:39:e6:e4:0e:
32:36:52:e4:a4:0a:27:ac:99:5d:0c:6c:17:2f:e9:9e:34:ab:
ad:a2:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org