Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/wz6lGP1surrfxxZXUE3s3NDkVIE.roa
File: wz6lGP1surrfxxZXUE3s3NDkVIE.roa (raw, json)
Hash identifier: xEzMc45ipQQ0MMScNj3QaVromhzIajgu1G2HEY2Bi4o=
Subject key identifier: C3:3E:A5:18:FD:6C:BA:BA:DF:C7:16:57:50:4D:EC:DC:D0:E4:54:81
Certificate issuer: /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial: 04
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/wz6lGP1surrfxxZXUE3s3NDkVIE.roa
Signing time: Fri 15 Apr 2022 01:12:32 +0000
ROA not before: Fri 15 Apr 2022 01:12:32 +0000
ROA not after: Fri 14 Apr 2023 08:17:47 +0000
asID: 18094
IP address blocks: 219.109.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
Validity
Not Before: Apr 15 01:12:32 2022 GMT
Not After : Apr 14 08:17:47 2023 GMT
Subject: CN=C33EA518FD6CBABADFC71657504DECDCD0E45481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:be:a3:23:85:c7:45:9b:2d:df:ee:ba:b3:
42:1f:a6:81:b7:51:13:f9:be:df:e1:94:ca:f2:6e:
95:fa:d1:a0:09:34:68:71:1d:f2:61:e8:08:90:0b:
63:a1:fe:86:7c:df:cd:bd:88:b9:31:3c:cb:b1:63:
7c:52:96:cd:d4:22:7c:dc:c2:49:49:18:6e:44:d2:
7f:79:25:ca:8e:20:0d:d5:92:aa:73:e1:cd:1e:c1:
60:8a:cb:27:6e:8a:26:3c:3b:a7:94:7a:41:d5:88:
a7:18:52:d3:3c:e2:09:03:7a:0c:07:bb:fc:ee:64:
27:0a:20:bf:62:47:79:95:8b:60:bb:3a:12:92:61:
57:72:26:96:4a:c5:ee:70:e2:7c:10:c0:1b:53:43:
e8:d9:90:0d:07:af:7c:9a:b7:8e:b8:27:3e:de:28:
d9:08:30:84:0b:e7:c0:07:b7:62:e6:a8:ad:31:e9:
49:5d:68:e0:84:e2:0a:5b:ee:78:4f:c9:2d:3f:0f:
1c:20:1a:34:f8:f3:1f:2a:f3:0b:f3:12:ce:a1:93:
fd:61:c4:fa:23:35:4c:16:f9:dc:30:04:02:8d:35:
d6:27:42:d2:a7:73:71:64:cc:0c:fe:52:a9:43:9b:
9a:8a:0a:b6:b3:30:bb:1f:16:79:d2:cb:bf:f7:59:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:A5:18:FD:6C:BA:BA:DF:C7:16:57:50:4D:EC:DC:D0:E4:54:81
X509v3 Authority Key Identifier:
keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/wz6lGP1surrfxxZXUE3s3NDkVIE.roa
sbgp-ipAddrBlock: critical
IPv4:
219.109.192.0/20
Signature Algorithm: sha256WithRSAEncryption
26:51:22:f4:3e:60:c8:35:c5:b7:79:34:b8:ba:cf:8f:5e:1e:
e6:52:58:95:48:09:e3:ba:a9:68:c2:3e:9e:a8:0d:70:38:d4:
67:f9:52:31:a4:c4:2e:ed:b1:57:7a:71:54:f2:e8:a3:23:b4:
85:cb:0d:45:25:5f:d0:95:31:b5:61:05:53:2c:4c:85:df:c1:
60:0b:e3:0e:22:5c:0f:07:45:07:23:e0:50:20:fd:19:e8:4e:
05:38:b9:b5:7e:b5:bb:6c:da:0b:c4:01:c3:bb:c3:01:9d:8f:
d9:cb:3e:9f:0e:b6:80:e3:6d:68:2d:0b:82:f0:21:b4:02:49:
69:5a:72:f6:a7:2e:92:69:b0:3a:fe:c2:48:a0:10:4a:45:7c:
1c:6b:e1:f9:07:3e:cf:28:cd:39:ab:de:8b:a4:fc:82:13:5b:
77:e8:b3:e4:77:fa:11:fb:d8:c8:8f:30:ef:04:2c:8a:75:ba:
ae:23:3a:10:16:2a:90:ad:03:f5:c2:92:1d:55:dd:a4:1a:da:
0e:a0:18:8c:32:0c:c8:50:cc:a9:cd:fc:45:dc:cd:e7:41:19:
04:29:de:32:4d:e4:71:80:77:5b:7f:f1:b8:30:7b:72:52:27:
9e:0f:d2:bd:aa:13:94:f2:8c:eb:be:30:52:44:bf:7d:4a:29:
aa:b1:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org