Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HT84AHugGnC2s4A5qmKfZ3mKxTs.roa
File: HT84AHugGnC2s4A5qmKfZ3mKxTs.roa (raw, json)
Hash identifier: fGuXHPmSNIqU9xXaoklOwD9cHPSyS5rLp8hO9m6Pzqc=
Subject key identifier: 1D:3F:38:00:7B:A0:1A:70:B6:B3:80:39:AA:62:9F:67:79:8A:C5:3B
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0336
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HT84AHugGnC2s4A5qmKfZ3mKxTs.roa
Signing time: Tue 25 May 2021 02:42:56 +0000
ROA not before: Tue 25 May 2021 02:42:56 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 59.85.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:56 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=1D3F38007BA01A70B6B38039AA629F67798AC53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:84:54:09:28:e1:6c:db:65:a0:64:1d:f6:
c2:0d:a7:62:e6:5a:69:fb:c0:6b:4a:b5:79:88:de:
44:73:7f:c1:83:e9:a8:fc:66:8f:ff:47:9d:03:be:
3a:78:08:49:06:af:96:21:b8:ef:31:b7:24:fc:b0:
b1:b1:a0:df:c9:16:c6:6e:e5:13:6d:2c:8f:24:ca:
b4:cd:c4:ed:a3:45:8c:5c:40:f8:15:df:7d:b8:1b:
65:b4:86:e5:02:8d:1d:5b:ee:c7:b6:47:c2:98:e5:
66:ca:3e:b5:8e:ff:82:d5:06:a0:da:8c:96:3f:8b:
07:64:df:10:4b:65:13:c9:96:70:ef:f6:fc:6c:8c:
06:78:83:46:35:10:ff:44:44:52:71:ae:5d:a1:3d:
a6:1f:bb:85:2f:26:72:5f:aa:ef:85:0c:6c:57:43:
28:b3:7c:71:2a:17:89:be:ff:0b:70:f8:ed:d2:18:
44:5d:3c:a5:7a:5f:7a:68:95:2a:ab:bf:d2:c8:5a:
4b:d6:73:f3:ed:af:ba:f3:3d:fc:90:4d:2e:9c:89:
30:9c:09:36:65:85:09:0b:86:ab:39:42:7c:8a:7a:
ec:df:b5:a0:96:b6:3b:78:15:f7:54:d9:57:8e:52:
44:2d:e9:8c:30:54:02:ae:53:66:f5:cc:a5:16:ce:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:38:00:7B:A0:1A:70:B6:B3:80:39:AA:62:9F:67:79:8A:C5:3B
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HT84AHugGnC2s4A5qmKfZ3mKxTs.roa
sbgp-ipAddrBlock: critical
IPv4:
59.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:da:96:c0:86:b8:98:6b:a3:5c:7f:b0:00:b5:8e:6b:0d:d6:
ac:db:a8:27:d9:09:76:15:2f:de:c2:89:8c:06:fb:d5:3c:1d:
75:6a:9a:9e:19:0b:a1:8d:15:b0:88:ba:92:64:b9:63:00:bb:
a7:3a:a3:c1:cf:3a:dd:c2:91:25:e2:71:e2:00:1f:3b:58:6a:
0c:aa:00:89:fa:db:f2:ac:2b:3d:d2:d6:7e:29:c9:3e:da:5e:
af:90:5d:a7:23:e5:c0:21:aa:e5:49:01:13:5d:dc:ec:d4:c1:
f5:75:97:21:04:34:96:88:10:fb:1b:3f:28:3f:73:c3:23:8d:
00:19:b2:92:05:f6:e4:d2:1d:cc:0c:d8:d2:f6:39:cf:d7:2e:
c3:d6:d8:7c:65:76:e4:7a:de:eb:f0:2f:b1:b4:b7:20:f4:d1:
f6:4f:d2:06:65:0f:cb:2c:32:af:49:c7:fb:b9:1e:4a:86:af:
8f:3b:60:74:96:6d:6b:99:f6:5a:83:9d:6a:50:04:33:3f:ed:
ce:a5:6c:14:5c:b9:76:d6:c0:0a:bd:16:a4:e7:8b:8c:1f:ed:
8f:c8:06:33:b8:73:7f:94:f9:16:df:fd:a5:8b:08:90:6a:c7:
d4:33:a7:1c:51:a5:ea:17:a6:a6:81:09:31:e5:bf:b3:64:41:
89:04:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org