Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/1IZ6u1NZA2UgA0Euzjj-WBsgrUQ.roa
File: 1IZ6u1NZA2UgA0Euzjj-WBsgrUQ.roa (raw, json)
Hash identifier: 85jVfyJajRQVeM7xASruZLK/FlorS8Usqcxr3uKBHrE=
Subject key identifier: D4:86:7A:BB:53:59:03:65:20:03:41:2E:CE:38:FE:58:1B:20:AD:44
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 24
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/1IZ6u1NZA2UgA0Euzjj-WBsgrUQ.roa
Signing time: Tue 01 Mar 2022 01:28:04 +0000
ROA not before: Tue 01 Mar 2022 01:28:04 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 10011
IP address blocks: 223.27.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Mar 1 01:28:04 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=D4867ABB535903652003412ECE38FE581B20AD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:e4:ae:f6:a7:01:a1:3e:b9:41:b9:b7:87:
12:8d:bc:17:5a:e7:32:39:a7:ea:e8:61:6d:ff:ec:
e4:7e:e1:d6:ed:6a:7f:91:77:98:68:19:37:3a:98:
e4:0f:2a:9b:e9:03:fb:9e:e3:a0:a4:27:be:3e:de:
71:66:b6:fe:14:9e:f3:57:66:5f:5f:36:99:6d:02:
bd:9c:20:6e:5e:46:0d:79:64:ce:32:83:7f:d7:5f:
52:89:ef:1a:f9:af:9b:0c:72:ff:43:ee:74:0c:09:
7d:8d:f7:f7:77:05:df:d1:75:6b:ac:9f:7a:06:67:
dd:14:ac:1f:af:f3:ad:6f:49:80:e7:0d:e5:ad:49:
6a:a6:ee:69:e6:b0:cf:37:d1:71:28:c5:3b:03:80:
d0:e3:1c:af:02:15:16:fe:7b:30:ef:d2:80:88:83:
90:2f:4e:13:56:10:8f:c1:e5:52:b1:ba:25:a1:c3:
80:f7:5f:74:c0:fa:8d:32:3d:6e:da:63:03:d8:3a:
93:ae:e8:f7:a6:47:c6:69:6a:67:f2:ea:2c:fe:40:
4b:98:a2:ee:fa:b8:21:d5:f8:3c:d3:b4:a1:98:ba:
2f:23:ed:82:53:ea:e4:a8:e0:2f:cb:5c:95:80:af:
25:e9:e1:1d:4c:01:25:09:b8:40:12:88:2d:df:e5:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:7A:BB:53:59:03:65:20:03:41:2E:CE:38:FE:58:1B:20:AD:44
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/1IZ6u1NZA2UgA0Euzjj-WBsgrUQ.roa
sbgp-ipAddrBlock: critical
IPv4:
223.27.72.0/21
Signature Algorithm: sha256WithRSAEncryption
14:0a:47:1c:15:a2:51:b2:d7:58:83:38:f1:f7:59:69:70:92:
6f:8f:dd:4d:c1:5e:a5:4c:f0:6a:6c:cc:47:99:7d:a2:29:5a:
c5:bd:76:24:02:6b:b7:78:e4:30:a3:d0:2f:e5:5c:e4:b4:c8:
b8:37:a9:a6:f3:8f:dc:36:29:d6:a2:2f:ec:ff:11:4c:43:a5:
07:20:9f:16:f1:48:5c:88:50:e4:c2:a6:6c:a4:3e:00:32:2e:
49:7e:59:98:75:c1:ca:f9:be:b8:de:d3:3e:8c:ae:0c:88:d0:
ee:13:0c:1e:79:83:5f:ab:33:47:c4:90:79:23:16:4d:90:06:
da:e9:8e:c4:8d:a4:a0:97:24:54:f2:53:53:a0:d1:b9:d0:3a:
63:73:a4:cb:1c:cc:cd:6b:6f:63:d0:38:43:61:fd:14:87:f2:
fc:e8:a8:71:cc:73:eb:e3:11:e3:ec:d2:89:22:13:e7:71:b7:
25:21:ea:82:45:35:06:70:41:d0:a7:3c:9a:f8:c3:e3:9d:c2:
8f:2f:da:99:8f:28:d3:15:a0:61:37:13:f2:77:a5:07:51:ab:
21:04:99:a0:c6:7f:ee:4e:b0:26:8e:02:e5:99:9e:19:41:a4:
c2:35:c7:1e:5c:bc:b2:5a:e6:61:3b:be:4b:3d:4d:11:29:0e:
b4:06:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org