Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/AQeZQqCJdoElo5bfMjXinOFX7Rs.roa
File: AQeZQqCJdoElo5bfMjXinOFX7Rs.roa (raw, json)
Hash identifier: 8COrH0KgywfRX0OKafzAFXlBcNPIJi+FWRyZUhHt07M=
Subject key identifier: 01:07:99:42:A0:89:76:81:25:A3:96:DF:32:35:E2:9C:E1:57:ED:1B
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0339
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AQeZQqCJdoElo5bfMjXinOFX7Rs.roa
Signing time: Tue 25 May 2021 02:42:57 +0000
ROA not before: Tue 25 May 2021 02:42:57 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 203.95.48.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825 (0x339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:57 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=01079942A089768125A396DF3235E29CE157ED1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:24:35:7b:e4:6a:f2:4c:b2:f9:6d:cf:2e:a6:
ce:db:47:b1:f3:f1:76:fd:51:85:fa:f1:54:05:f5:
5e:26:0b:78:d0:d3:65:7d:39:58:b9:a7:c2:85:5d:
ca:b1:4d:69:1d:c0:d8:b0:fd:90:84:ec:9b:e1:e4:
cd:b7:d5:6d:84:89:e6:5b:c5:95:32:fa:76:cc:32:
e9:2f:b2:2c:0a:cd:bf:46:bc:90:1d:43:e1:20:2d:
80:6d:16:41:90:de:c3:50:a6:42:c3:1a:e7:50:c5:
b1:83:43:4b:e9:3e:58:41:c8:82:d0:64:bc:d9:ff:
80:ef:d5:0f:9f:89:62:cc:8e:29:fb:67:4d:4f:f4:
bf:20:98:bf:a2:ea:86:2b:5a:54:d6:55:f8:a5:0c:
cf:fb:88:70:32:7c:d4:6a:2c:e2:ff:e4:45:60:90:
26:93:97:46:60:63:ce:73:1e:a1:55:ed:3b:e3:43:
ad:ae:d5:ba:09:29:d0:a9:dd:a3:11:76:1e:7f:b0:
0b:49:84:d8:bf:27:c9:cc:88:51:94:28:b9:94:32:
04:f0:77:61:26:d7:08:7b:fd:57:fb:22:ac:b1:a3:
29:9b:92:02:1c:61:8c:f2:71:0e:1d:c6:69:92:61:
b5:e7:6f:2b:b3:0b:c0:42:d3:04:fc:9d:13:9e:a7:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:07:99:42:A0:89:76:81:25:A3:96:DF:32:35:E2:9C:E1:57:ED:1B
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AQeZQqCJdoElo5bfMjXinOFX7Rs.roa
sbgp-ipAddrBlock: critical
IPv4:
203.95.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:51:db:96:e4:a3:c0:11:a6:c4:51:d9:62:91:70:33:b8:09:
91:6f:7a:14:60:16:39:0d:88:85:d6:a3:4b:a1:c1:26:4c:66:
9f:51:68:e5:8c:c3:f4:2d:e3:4c:10:08:3a:84:78:af:40:4d:
72:62:6e:46:58:3c:b7:0d:cc:cd:c4:8e:f6:4a:bd:8e:4e:1a:
be:d5:d6:2d:18:75:ea:78:f0:40:9f:f5:8f:1a:d2:68:d2:5a:
12:5f:51:51:9e:58:dd:c9:e0:50:b2:dc:eb:8f:2c:d6:41:dc:
1b:ee:d0:c3:74:85:53:cd:32:41:b8:7b:1c:37:64:70:14:c8:
33:1f:13:53:07:52:c5:44:d2:56:72:95:87:b1:6d:27:98:aa:
d7:d7:d3:43:43:1f:a2:f1:2e:06:75:b9:98:d5:b3:4b:d2:0d:
fc:c4:da:1d:62:06:b1:91:45:d8:41:ef:bd:2f:ab:42:0f:12:
11:f7:ca:a9:ef:98:b6:6b:73:cc:0b:54:9b:ce:5f:10:35:0d:
98:fa:6d:dd:a5:e1:62:9f:6c:5a:48:3b:4a:1b:55:60:24:7e:
21:1c:c1:fd:22:bc:b0:45:ff:1c:29:07:ae:57:9e:0c:be:67:
8f:92:fd:c4:40:33:fb:b5:39:25:e5:52:9b:23:00:1c:49:aa:
a0:d4:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org