Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BMbXxI5EdhXwXZITvQ8VmLM7t_w.roa
File: BMbXxI5EdhXwXZITvQ8VmLM7t_w.roa (raw, json)
Hash identifier: QALUU/AbRa9YdRQBjzJtjUqxfCpLrJGPQaXuEecyAB0=
Subject key identifier: 04:C6:D7:C4:8E:44:76:15:F0:5D:92:13:BD:0F:15:98:B3:3B:B7:FC
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0328
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BMbXxI5EdhXwXZITvQ8VmLM7t_w.roa
Signing time: Tue 25 May 2021 02:42:52 +0000
ROA not before: Tue 25 May 2021 02:42:52 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 42.125.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:52 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=04C6D7C48E447615F05D9213BD0F1598B33BB7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:a1:72:9e:84:15:d5:07:66:d9:ff:c2:4a:
9d:0c:2b:d5:8f:7d:85:46:8a:eb:7b:f2:4a:e0:ca:
cc:66:e3:a1:c0:96:c8:97:b0:31:d1:7f:b8:9b:a9:
f9:a1:4a:b8:97:a4:f2:e4:91:4e:d1:be:a6:54:fb:
9b:6f:80:66:42:5d:1c:c9:0d:42:f0:1c:b7:75:20:
6e:da:cd:76:ee:cb:a9:51:93:d6:5e:aa:41:3a:6a:
bf:68:81:2e:1e:1a:e6:3d:a2:61:4e:0c:4d:4f:22:
7d:38:ce:bc:9b:e9:f0:ab:26:d2:f1:bc:8e:3f:6f:
44:7a:10:a5:7a:a2:5f:44:3c:ba:dd:91:86:e5:22:
b9:bf:f1:83:27:3d:27:0d:3b:1d:46:fc:23:38:df:
65:f3:35:4e:44:a5:fa:67:10:12:79:a4:25:73:9e:
d0:81:3e:c7:60:b3:68:5a:c1:c3:cf:ec:4f:a2:ee:
54:1e:5b:43:b6:eb:f4:8e:5d:3c:ec:25:c5:5f:02:
65:9d:5c:ea:2e:4a:aa:1c:dd:c4:b7:4e:e2:08:b8:
05:8c:18:a3:34:50:6d:60:c8:f5:08:f9:27:f8:ac:
d9:b4:b8:41:fc:c4:4e:be:37:e7:34:35:8f:94:af:
e9:2b:df:4e:11:25:10:f1:ca:b8:df:c5:a2:b6:2e:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:D7:C4:8E:44:76:15:F0:5D:92:13:BD:0F:15:98:B3:3B:B7:FC
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BMbXxI5EdhXwXZITvQ8VmLM7t_w.roa
sbgp-ipAddrBlock: critical
IPv4:
42.125.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:db:4d:3a:8c:aa:fa:b3:49:07:00:c4:aa:66:73:28:e7:66:
15:de:72:06:69:7b:cb:71:fb:54:3a:20:03:88:3d:6d:28:3d:
53:87:81:f9:7f:c3:f0:c4:f9:68:df:f3:2b:21:a7:c6:87:22:
9b:6c:a7:91:b6:3f:56:bf:80:02:76:23:66:b6:8e:e3:be:c0:
ce:ef:a6:af:8e:c4:f5:54:59:90:d8:4a:0a:56:fa:67:1a:ac:
44:34:cf:be:da:c8:f1:d8:f7:ae:5b:08:9e:94:40:64:5d:29:
d6:7b:fb:89:05:44:59:4f:81:51:72:dc:ca:b0:96:45:2d:c7:
e8:1a:58:2b:9c:0b:a0:cd:e0:30:9f:15:09:3f:13:a0:dc:37:
34:bb:39:a5:ea:6c:09:b2:3e:35:94:c0:51:b0:77:e5:80:d0:
81:24:83:66:0a:1d:fe:cc:5d:af:c5:8b:b5:cc:ab:a2:03:bb:
96:22:65:50:9b:d9:5f:7c:4a:48:d1:fd:c1:76:3f:d6:45:c9:
3a:e6:e2:0c:c9:0e:bf:8e:7f:f9:97:b7:df:dd:6d:89:07:36:
f7:c1:86:da:fa:a6:6e:82:bb:f6:5b:03:eb:0a:18:89:6d:1a:
e3:55:03:22:19:6c:3e:83:e8:63:1c:ac:e9:b8:51:35:20:e6:
62:43:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org