Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/lyn3vcKW2CQ7IHRuCxuK6k81F40.roa
File: lyn3vcKW2CQ7IHRuCxuK6k81F40.roa (raw, json)
Hash identifier: Yb3mL6gGXHcE2vQkeXavMcXDUpU4TuOOxA1TVHMizA0=
Subject key identifier: 97:29:F7:BD:C2:96:D8:24:3B:20:74:6E:0B:1B:8A:EA:4F:35:17:8D
Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial: 33
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/lyn3vcKW2CQ7IHRuCxuK6k81F40.roa
Signing time: Mon 01 Aug 2022 01:28:55 +0000
ROA not before: Mon 01 Aug 2022 01:28:55 +0000
ROA not after: Sat 15 Jul 2023 01:30:03 +0000
asID: 17675
IP address blocks: 218.40.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Validity
Not Before: Aug 1 01:28:55 2022 GMT
Not After : Jul 15 01:30:03 2023 GMT
Subject: CN=9729F7BDC296D8243B20746E0B1B8AEA4F35178D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:5d:51:42:56:a9:a9:72:f7:14:47:15:ef:
e2:2b:43:0c:ca:29:d0:a4:d8:40:a2:6e:7d:97:e8:
dc:78:24:86:03:c9:35:5e:b6:8a:1c:48:1a:75:c0:
b5:65:3e:54:bb:00:31:5a:2d:e4:28:f3:4a:8f:ea:
46:8d:c9:5a:5a:b9:9a:9d:01:8c:b5:fb:b2:77:df:
29:de:ee:bf:73:f6:8f:a4:0d:f9:02:87:7b:fa:d7:
bc:b4:32:d4:95:58:98:bd:57:01:e3:22:af:45:eb:
71:65:d2:89:a4:f9:1b:d1:e3:11:f6:f0:59:c9:ad:
96:ca:2f:41:af:5b:01:16:0e:e3:31:91:e5:f5:f5:
95:ae:c6:9e:77:06:ae:71:02:27:dc:15:ed:c7:c6:
12:75:fa:0a:24:02:88:99:ba:7b:fa:6e:96:d1:28:
4e:20:b0:30:79:ce:85:5e:6f:36:ca:55:70:68:c4:
d1:d8:4b:fe:69:b2:16:ab:30:f9:d9:f7:d4:f5:a6:
89:65:f6:82:28:f7:79:91:4e:e5:38:20:2e:7e:60:
cf:6a:ba:28:f5:ce:f4:66:c3:b8:ac:ae:94:b8:50:
08:99:52:11:b5:70:68:f5:16:bd:67:f6:85:bb:66:
6a:92:98:cc:33:92:77:0a:ec:6d:27:82:80:e8:dd:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:F7:BD:C2:96:D8:24:3B:20:74:6E:0B:1B:8A:EA:4F:35:17:8D
X509v3 Authority Key Identifier:
keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/lyn3vcKW2CQ7IHRuCxuK6k81F40.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.40.144.0/20
Signature Algorithm: sha256WithRSAEncryption
48:a6:c0:bd:11:3f:39:71:e3:e2:73:4e:d5:2c:14:00:f0:40:
52:21:21:47:2c:22:5f:17:77:00:dc:f9:fb:de:3e:85:60:87:
79:36:53:ac:d2:42:ab:ef:b1:81:a3:4b:5c:30:b3:d5:bd:c8:
3a:84:fa:2e:99:69:4b:f5:25:5c:9c:9f:d7:35:fa:c9:84:b9:
8d:e3:88:a1:cc:a6:b6:7d:b4:73:dd:0a:97:04:ed:c4:26:c9:
d3:4d:5d:af:d8:8d:81:73:49:10:b9:81:0b:6a:43:a6:0f:f3:
24:a3:8d:3e:b9:cd:90:5d:f6:52:80:6d:64:b7:bc:9d:9a:f4:
3b:1b:bb:b8:32:bd:19:da:7c:53:ec:41:fa:c8:bf:a4:d4:4b:
e9:e7:46:73:f1:39:ed:f8:3b:52:35:41:18:ca:ad:48:a1:3f:
1d:41:12:e9:49:cd:f2:c2:55:6b:41:04:db:89:b4:6a:dc:3a:
96:eb:92:6b:7d:f5:12:85:fb:35:77:69:e4:68:4d:9b:88:ab:
a3:79:4b:b9:b1:2a:cc:04:dd:a2:06:a0:e7:1f:44:2e:73:3b:
39:dc:0a:f8:f9:40:32:dc:5e:7f:94:30:3d:22:e9:49:e6:c7:
cf:28:c4:d6:76:20:7b:f6:55:72:aa:50:68:35:14:c8:5a:15:
63:53:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org