Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/yuxoD3E5T-0IqTV79XJ8BlFwiHc.roa
File: yuxoD3E5T-0IqTV79XJ8BlFwiHc.roa (raw, json)
Hash identifier: uODp9ir1U7r80wDjMgcfFYf+98FmEN1Q3hGW1BcHC1U=
Subject key identifier: CA:EC:68:0F:71:39:4F:ED:08:A9:35:7B:F5:72:7C:06:51:70:88:77
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0390
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yuxoD3E5T-0IqTV79XJ8BlFwiHc.roa
Signing time: Sun 01 May 2022 01:29:47 +0000
ROA not before: Sun 01 May 2022 01:29:47 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 10010
IP address blocks: 42.125.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 1 01:29:47 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=CAEC680F71394FED08A9357BF5727C0651708877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:c4:e6:a8:5f:18:58:8d:f0:34:71:d2:c7:
fe:7e:23:3c:ef:c2:d3:5b:c2:c7:54:1b:07:82:09:
3d:f6:a6:e7:b9:d0:5f:78:e6:80:08:49:83:3b:15:
41:4b:98:da:73:b2:e5:da:c9:33:3d:d2:30:c7:72:
43:9b:d6:b7:19:b6:d5:eb:56:8c:69:2d:cf:e3:8f:
15:74:b7:5d:cb:f7:95:2f:ae:c9:b7:d6:c6:e3:ac:
36:52:bd:0e:8e:df:de:bd:ad:0f:26:71:e7:91:38:
fa:4b:43:99:ad:22:26:2a:b7:83:f0:97:ba:ad:d0:
d6:25:53:72:54:dd:db:d6:1b:07:48:0e:95:c2:74:
0a:68:a2:c8:95:77:40:29:b9:a9:91:76:6e:79:ec:
48:a4:8c:0e:05:26:24:f4:32:bb:d5:c8:6b:25:19:
09:0f:d4:86:a1:7b:7b:fe:18:0e:15:88:62:68:ac:
aa:3c:3d:2c:cf:a9:50:08:c2:2d:a8:2d:c3:dc:80:
b5:fa:b9:d7:a0:e5:29:10:14:68:6b:f9:7f:ae:d5:
72:92:54:e9:0a:4e:3e:28:7e:88:4d:5b:79:fa:6d:
80:0f:b1:a5:a5:c3:e9:66:1a:c0:c1:47:42:90:73:
e2:cb:7e:55:c3:e6:7f:15:d0:1a:ef:8f:9e:ab:28:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EC:68:0F:71:39:4F:ED:08:A9:35:7B:F5:72:7C:06:51:70:88:77
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yuxoD3E5T-0IqTV79XJ8BlFwiHc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d1:ae:52:39:f9:80:01:ab:2b:e9:35:4b:f5:e6:d6:cb:81:
3d:f2:d0:68:8b:7a:d3:ec:8f:57:6d:55:3d:99:e8:2b:aa:19:
22:79:8c:47:f6:29:29:96:19:8f:b7:2f:87:8c:61:9f:15:81:
ee:60:80:fc:26:d2:13:29:61:13:0b:f4:d6:19:b4:f4:42:d4:
f4:d6:fc:cc:1d:59:95:f3:67:4a:93:65:2a:9c:48:1b:d3:be:
e3:7e:cc:b2:b3:dc:a4:ba:b0:6c:5e:33:23:7b:65:61:c8:7a:
ca:1a:ee:f1:3c:07:44:e3:38:e5:58:97:db:1c:d5:7e:41:45:
05:e8:37:db:63:80:fd:9a:27:5a:07:01:d2:89:9a:9a:f5:d3:
cf:f3:2c:14:65:22:15:3a:dc:83:d2:a4:c8:c0:67:73:3c:e3:
7d:88:5a:e5:e0:14:d3:25:38:7c:b8:23:fd:a7:13:83:49:ba:
18:46:65:a8:c3:b4:0a:1d:78:2b:d7:bd:e1:c8:47:0a:83:ad:
04:9f:3e:32:11:e0:3a:89:c4:b7:be:9e:69:43:1b:48:e1:48:
1d:c3:21:6a:5d:45:3c:43:54:64:c9:a1:64:bf:96:39:c7:48:
60:98:28:3f:17:ad:11:19:19:a3:ab:ab:d9:0d:3e:93:79:34:
f2:42:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org