Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TN3RJitJasRjfWxknMnxn2X5b_U.roa
File: TN3RJitJasRjfWxknMnxn2X5b_U.roa (raw, json)
Hash identifier: ZRIGdUecsevFCxhqciN6Haz/wUBfNjOqbh8tGJJV18Q=
Subject key identifier: 4C:DD:D1:26:2B:49:6A:C4:63:7D:6C:64:9C:C9:F1:9F:65:F9:6F:F5
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 042C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TN3RJitJasRjfWxknMnxn2X5b_U.roa
Signing time: Thu 13 Apr 2023 09:55:22 +0000
ROA not before: Thu 13 Apr 2023 09:55:22 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 219.106.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:55:22 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=4CDDD1262B496AC4637D6C649CC9F19F65F96FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:b5:03:24:b8:86:b0:2a:5f:0c:c8:88:65:
90:e2:ad:1d:93:c0:3e:c2:b6:97:ad:24:01:96:7d:
a7:b2:13:88:52:66:13:81:2f:ff:01:49:52:25:d1:
7e:56:c9:c2:48:3c:20:09:71:d0:10:12:53:4c:1e:
74:fd:73:b0:b5:f3:ff:9b:98:0b:77:86:fe:ce:7c:
73:16:eb:b6:a9:a3:68:02:ab:de:ce:0f:98:34:cc:
fc:8e:86:b0:8b:63:59:0d:7e:c8:92:ea:1e:d4:84:
1e:e0:95:15:ed:84:9c:c8:29:1a:0b:39:1a:dd:2b:
c9:03:71:b9:b0:d0:af:3f:b0:5d:cf:ad:64:f6:5f:
4c:f8:4d:ca:f9:cd:16:a4:31:9d:10:dd:5e:e7:77:
45:63:19:2c:f6:23:42:d9:6c:2d:9d:63:17:f6:e4:
1e:1e:e2:17:21:a3:a9:44:b9:ab:50:55:ed:3d:49:
f9:37:fc:72:70:eb:57:83:f8:bd:29:9c:ac:fb:84:
05:f1:1a:62:96:55:92:bc:c4:1f:42:7f:16:37:a2:
a4:dd:70:6c:e3:5e:92:4b:bd:60:0b:16:64:cb:98:
78:3a:97:73:25:0d:d0:eb:2f:2e:f3:7c:1c:5a:cf:
d4:4c:b4:f8:7a:b9:ce:56:60:e2:6d:3a:d4:09:89:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:D1:26:2B:49:6A:C4:63:7D:6C:64:9C:C9:F1:9F:65:F9:6F:F5
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TN3RJitJasRjfWxknMnxn2X5b_U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.106.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:6b:df:85:98:8c:89:39:b3:77:6a:c9:1f:6e:4f:c8:26:03:
7b:1a:a1:fb:b4:e3:3f:21:4d:fd:a0:79:36:46:ff:1d:08:04:
3b:5c:67:e3:da:42:fe:23:18:54:12:97:fb:3d:50:9a:66:5f:
f9:8a:86:ec:99:fd:bb:51:cf:a0:e5:30:52:33:d5:56:c2:11:
b5:de:f0:69:32:54:c8:9d:d3:72:98:49:7d:82:75:e3:ff:f5:
b9:ca:dc:e0:1c:54:d5:ed:45:45:12:d8:a9:cc:39:f4:ef:6c:
ab:16:82:37:f1:79:b6:d7:4c:2b:49:dd:b5:91:1a:08:ff:39:
b5:07:5a:54:4b:80:11:6f:9f:a8:39:54:46:8d:2e:03:05:66:
47:72:d3:6f:6d:ae:78:20:9b:fb:d7:83:c4:09:c1:c2:c1:42:
90:55:08:d4:a9:27:da:70:fa:b7:a8:8b:48:f6:0e:70:8d:f1:
3e:4c:02:bb:86:f2:e0:dd:50:b8:ca:d7:ef:db:06:42:9e:60:
1c:9f:8a:e4:bb:27:75:f6:9f:00:d4:40:c9:2c:bd:2b:c2:63:
7b:ea:1f:fe:61:0f:ee:e6:c0:46:26:87:e1:0f:72:98:89:03:
90:ff:e0:86:1a:9b:9d:2e:9a:c4:75:ff:3a:1f:6c:7c:e1:96:
2f:d5:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org