Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/S5ptg0jPKqvtuw1uw-J2e8oSj9o.roa
File: S5ptg0jPKqvtuw1uw-J2e8oSj9o.roa (raw, json)
Hash identifier: iqVHlimv4P8Bb4TMqDGagclqHcPjdhgbaTBuRqmG+lg=
Subject key identifier: 4B:9A:6D:83:48:CF:2A:AB:ED:BB:0D:6E:C3:E2:76:7B:CA:12:8F:DA
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: C4
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/S5ptg0jPKqvtuw1uw-J2e8oSj9o.roa
Signing time: Sat 01 Oct 2022 01:29:25 +0000
ROA not before: Sat 01 Oct 2022 01:29:25 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2497
IP address blocks: 219.111.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Oct 1 01:29:25 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=4B9A6D8348CF2AABEDBB0D6EC3E2767BCA128FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:b8:39:c9:ef:39:1f:30:07:08:5c:b4:14:
4b:a8:8c:4a:5a:ac:a8:2c:12:ab:1e:f9:dd:18:bf:
61:cd:cb:e8:cb:23:1d:de:ef:09:82:4c:b2:2d:88:
18:33:c0:30:b2:c3:cf:da:67:a2:23:ee:64:40:83:
d1:68:79:7d:c9:80:f5:79:33:90:99:c6:33:13:8a:
f8:83:00:80:92:b6:ad:44:c4:cc:91:11:49:70:b1:
ba:b6:c3:70:38:1e:e9:ff:fc:3d:51:74:31:c2:c2:
4a:5f:81:01:72:2e:6a:e7:ec:24:c2:6b:4b:dc:6d:
50:e5:bb:13:f0:19:20:5d:12:f8:ab:d4:cc:c6:bb:
d3:10:e9:69:7a:83:dc:48:44:1a:2e:f6:5b:49:bf:
df:46:60:65:c3:54:4d:00:76:67:df:2e:4b:a8:d0:
d4:f2:30:25:9e:08:62:6e:73:b1:b7:5b:65:9e:cc:
28:68:e5:47:b3:07:00:4e:e7:53:df:93:e1:d2:79:
d5:90:52:fb:c2:b7:0d:e8:4a:50:d5:ab:9a:36:a8:
74:d4:f0:f9:a1:c6:93:05:85:f4:9a:21:ec:64:c8:
50:5b:9d:c9:d3:00:38:cd:6a:f1:3e:d5:29:d1:d3:
4c:9a:48:d0:8d:a5:d0:ba:cc:55:dc:6e:3b:30:25:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:6D:83:48:CF:2A:AB:ED:BB:0D:6E:C3:E2:76:7B:CA:12:8F:DA
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/S5ptg0jPKqvtuw1uw-J2e8oSj9o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.111.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0e:39:1d:4e:62:e0:82:a6:b5:80:6f:2d:1a:a0:67:e2:00:bf:
9f:55:2e:fb:e7:69:20:44:4b:37:1d:d1:51:7e:8d:49:db:da:
f8:f3:51:f2:36:7d:ec:03:7f:2e:4f:3c:aa:66:de:53:b0:84:
83:7e:b3:9a:3b:b2:93:27:c6:24:9c:a1:46:d4:94:78:34:82:
fb:85:0e:93:5c:91:a1:87:c0:ea:f2:3f:64:6c:ff:23:79:7e:
41:c6:0b:27:0d:7e:8e:11:94:6c:22:e6:e3:7b:6f:08:8c:40:
c0:b5:98:9c:8e:45:53:19:f1:70:e7:4b:b5:1c:3c:1d:59:db:
74:fb:8c:9b:e5:69:e6:4d:40:f8:ac:ff:ae:83:19:7d:d4:86:
41:a0:63:6a:dc:2c:57:b3:c6:90:39:db:fd:62:cf:97:9c:9c:
ff:14:f0:e2:c0:0f:42:3b:95:f2:62:23:cc:d0:2b:c7:0a:bc:
39:2e:35:1e:dc:39:f2:9b:33:4c:76:21:37:3f:32:e0:ea:30:
af:42:e0:8e:08:46:fe:7c:10:77:46:22:d7:50:3a:15:1f:3f:
9f:dd:fd:32:75:65:f9:a5:f2:af:24:24:14:2f:17:da:62:70:
5e:f4:a7:c7:58:28:53:aa:62:f5:65:5b:e3:86:0e:5f:f8:c8:
32:09:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org