Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/BH4EzrIA-f9kp64u4EsR38ZfixE.roa
File: BH4EzrIA-f9kp64u4EsR38ZfixE.roa (raw, json)
Hash identifier: 7+TX61UF/3dRE0IY/wHHbvOsBwNoQsGppIJtKvE1L9M=
Subject key identifier: 04:7E:04:CE:B2:00:F9:FF:64:A7:AE:2E:E0:4B:11:DF:C6:5F:8B:11
Certificate issuer: /CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Certificate serial: 24
Authority key identifier: B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BH4EzrIA-f9kp64u4EsR38ZfixE.roa
Signing time: Mon 01 Aug 2022 01:28:53 +0000
ROA not before: Mon 01 Aug 2022 01:28:53 +0000
ROA not after: Sat 15 Jul 2023 01:30:03 +0000
asID: 55900
IP address blocks: 109.236.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Validity
Not Before: Aug 1 01:28:53 2022 GMT
Not After : Jul 15 01:30:03 2023 GMT
Subject: CN=047E04CEB200F9FF64A7AE2EE04B11DFC65F8B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:8d:74:30:ab:43:6d:4d:30:e0:d5:59:7c:
34:69:ce:6e:66:e6:d3:99:23:23:4f:f3:c2:6c:f5:
80:e3:55:95:d5:68:67:ec:8f:04:6a:00:69:04:3c:
15:0d:ae:73:b2:e5:31:cb:43:e9:1e:49:2e:17:96:
ed:5b:00:48:ce:39:3a:18:27:ff:21:ad:76:27:45:
70:63:2b:45:83:0e:04:6e:21:11:4a:91:80:89:bc:
9e:9f:0d:e6:0e:8d:af:32:29:0a:61:89:cf:11:4c:
8c:b8:f2:cd:ee:39:58:5d:59:33:aa:4c:b3:8e:9f:
d0:35:ba:28:c8:b3:87:a0:1f:53:a5:c9:d8:5d:c7:
87:75:b9:78:cd:d6:c8:a3:f6:f2:8b:0b:c7:8f:6a:
81:cb:9d:44:e3:d2:8f:ea:b1:05:7b:2e:2c:fd:61:
c5:18:0e:2c:77:30:dd:69:3c:79:71:8b:90:02:fa:
db:f0:4d:37:43:a3:fa:84:e7:f8:63:61:66:84:c9:
7f:18:14:16:5f:e2:96:10:2f:b0:cc:03:bc:68:81:
5d:1d:1e:f2:26:a9:24:ef:ba:a8:f7:98:58:45:16:
5d:24:1b:32:51:59:86:d2:b8:51:85:a6:11:76:e6:
62:49:59:e4:87:ba:5d:2b:84:38:92:56:aa:64:80:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7E:04:CE:B2:00:F9:FF:64:A7:AE:2E:E0:4B:11:DF:C6:5F:8B:11
X509v3 Authority Key Identifier:
keyid:B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/BH4EzrIA-f9kp64u4EsR38ZfixE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
109.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:84:20:f4:1a:2f:42:b3:44:e3:2f:04:bc:21:99:62:5a:0d:
9a:c7:4d:9c:10:a0:0a:d9:15:dc:90:ce:c0:0f:b4:0c:eb:e8:
f8:9a:c7:0f:e4:87:c2:41:db:2f:f8:45:3e:82:17:9c:3d:40:
f2:7e:fb:9c:bb:68:bd:fe:fb:62:bf:9c:72:23:46:17:04:96:
8d:81:26:95:02:08:5a:00:0d:18:e8:a9:39:9a:cc:16:f2:3b:
47:7d:02:ba:a1:c9:e4:ac:95:48:bf:56:66:b8:ca:74:06:72:
28:80:0f:de:bf:f5:c9:4a:4e:cd:45:67:0e:9a:c3:e6:fe:13:
01:0c:17:db:82:de:21:53:11:76:08:3d:1f:87:97:66:b9:b4:
e4:28:48:44:35:86:6a:2c:f6:6a:3d:83:77:e0:f7:90:d3:e2:
05:e0:89:11:0d:ed:c0:4d:45:50:c4:18:42:9c:2d:e3:8c:9f:
f1:39:14:40:f5:96:f7:4d:0b:a7:3a:b1:34:17:d9:f1:af:92:
09:d6:14:38:b6:92:4a:6f:4f:54:1c:c9:c3:6a:88:c1:42:96:
4c:a3:cf:e6:d3:79:7e:73:99:92:d4:d5:7b:f6:f6:91:70:2e:
83:71:cf:63:44:16:2a:fd:20:0a:e6:bb:e8:12:20:96:f5:7d:
d8:22:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org