Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/HLK2fW8EzGJPWaJ04GGgK7idP3k.roa
File: HLK2fW8EzGJPWaJ04GGgK7idP3k.roa (raw, json)
Hash identifier: BZOUP3pLB/9iQ+b4ovxZ4iv75BpHSTZyLt1NfgdjlF8=
Subject key identifier: 1C:B2:B6:7D:6F:04:CC:62:4F:59:A2:74:E0:61:A0:2B:B8:9D:3F:79
Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial: 16
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/HLK2fW8EzGJPWaJ04GGgK7idP3k.roa
Signing time: Wed 18 Aug 2021 07:54:14 +0000
ROA not before: Wed 18 Aug 2021 07:54:14 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 17675
IP address blocks: 122.200.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Validity
Not Before: Aug 18 07:54:14 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=1CB2B67D6F04CC624F59A274E061A02BB89D3F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:6a:26:49:ed:7b:63:22:6e:fc:41:b9:18:
9f:c5:12:9a:ee:b7:98:e5:93:1f:70:fe:9c:e8:44:
d2:fd:bb:08:ad:68:b2:5b:48:1d:23:73:d1:11:bc:
60:7f:e6:3f:f6:75:d3:34:27:f5:b3:36:57:1e:75:
d4:81:6e:d7:72:84:fc:d6:c7:a8:4d:7e:41:21:bb:
45:4c:3d:b0:b7:f2:63:8a:e1:03:fc:d3:7b:c7:7b:
10:fc:d2:dd:26:53:91:3a:26:86:22:ba:21:3e:be:
3c:d1:b8:09:3d:8b:87:4d:e9:14:f6:aa:7c:5a:df:
da:e9:17:1d:09:4c:02:d7:b0:51:df:77:01:4f:ef:
ba:b9:13:e2:8d:0f:9d:f0:84:2f:84:bb:e6:ac:55:
87:69:3e:e1:d9:64:a0:b3:a3:cd:18:a9:7f:e9:9a:
d4:85:54:21:29:86:3d:7b:54:4d:aa:af:23:df:7e:
41:64:fe:a0:d0:7c:61:dd:c8:9e:63:0d:ed:cf:83:
c5:91:74:c5:40:4f:3a:06:8e:4e:aa:78:2e:00:b4:
92:29:a9:9e:92:cf:93:9f:a8:0f:19:2e:bc:9f:41:
d3:e9:ce:56:98:5f:e4:14:d5:fc:45:f3:66:af:59:
06:1a:49:96:f1:eb:45:61:8a:a9:fc:2b:85:c0:07:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:B6:7D:6F:04:CC:62:4F:59:A2:74:E0:61:A0:2B:B8:9D:3F:79
X509v3 Authority Key Identifier:
keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/HLK2fW8EzGJPWaJ04GGgK7idP3k.roa
sbgp-ipAddrBlock: critical
IPv4:
122.200.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:58:29:41:4b:44:41:32:3f:a5:24:26:6e:7e:57:de:f9:f3:
56:aa:7c:6b:9e:49:32:0a:79:e6:66:5d:ce:70:2c:e1:da:0c:
c5:3d:57:88:00:b7:84:3e:c6:2c:07:bc:ad:84:e0:6a:06:20:
df:3f:e4:61:35:5e:5b:2e:da:e5:82:0c:54:be:2a:15:ed:3f:
6a:ec:03:93:94:48:e8:8d:0f:54:57:13:3b:27:d5:5a:a9:e4:
f1:08:45:18:56:24:12:e4:cd:29:17:b6:f2:c7:d1:89:b1:99:
16:0c:37:fd:7c:7b:5d:59:0c:30:8e:9d:f0:78:bd:f5:e7:4d:
42:de:d6:9d:64:4e:a1:e7:58:2b:86:5a:ed:91:d2:d1:f5:a2:
ba:64:ec:b4:bf:3a:44:a0:26:74:72:8b:c9:41:7e:c7:cb:ff:
5e:9a:93:43:c5:25:3f:53:83:b5:1a:0f:9c:ad:f8:f7:62:cc:
81:4c:0b:1e:6d:17:dd:49:ae:a0:4e:7e:4a:c5:ff:09:eb:c7:
ec:4b:49:fd:ab:ac:20:94:29:94:ad:39:e4:0f:52:9e:4f:b8:
77:96:30:0c:f2:0a:cb:56:d7:33:e2:1f:14:4f:03:89:7b:3a:
36:ee:2d:a3:ad:82:46:1d:f6:df:0c:04:a5:5c:66:8d:9b:d9:
a6:ac:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org