Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/P3GJIHFyI99iLpsE5Ud5BuGiVZA.roa
File: P3GJIHFyI99iLpsE5Ud5BuGiVZA.roa (raw, json)
Hash identifier: i4Em2wTnKPXspYGMd+phvWCpLEYTJE2gSoO5VCKqJLo=
Subject key identifier: 3F:71:89:20:71:72:23:DF:62:2E:9B:04:E5:47:79:06:E1:A2:55:90
Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Certificate serial: 04
Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/P3GJIHFyI99iLpsE5Ud5BuGiVZA.roa
Signing time: Thu 21 Jul 2022 04:18:32 +0000
ROA not before: Thu 21 Jul 2022 04:18:32 +0000
ROA not after: Fri 21 Jul 2023 02:05:48 +0000
asID: 23808
IP address blocks: 219.100.132.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E
Validity
Not Before: Jul 21 04:18:32 2022 GMT
Not After : Jul 21 02:05:48 2023 GMT
Subject: CN=3F718920717223DF622E9B04E5477906E1A25590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:66:e7:7c:5f:5c:de:bd:ab:b7:7d:a8:e7:
47:a6:3a:9e:82:d8:7a:27:65:a8:d1:d4:21:f0:08:
ef:cb:65:65:8a:56:e7:06:04:59:8f:73:54:cb:f7:
7b:0b:91:c8:c3:81:4e:3f:0c:34:8c:fe:7f:7d:87:
cc:52:cf:db:4e:2a:18:bc:a2:9e:9f:91:e2:b3:fb:
c3:94:24:c8:e7:ce:2e:49:8b:a3:7d:6d:03:74:fb:
aa:b4:21:ac:2f:d8:e3:5f:62:13:cd:59:ef:4a:c3:
b8:ad:93:e5:43:d3:15:f3:4d:a3:d6:b5:41:1f:8e:
17:67:ee:45:b5:f1:2e:93:10:33:f1:63:16:d5:90:
5e:8b:64:2c:03:e1:c6:cc:2d:4f:25:87:ec:3b:0e:
82:b8:7f:86:a0:e6:fe:f1:68:af:3f:75:1e:9e:c8:
b8:ae:9e:fb:bc:35:97:f5:d0:b4:6a:8e:b6:b9:6d:
34:d3:19:8d:30:d4:d3:da:48:93:12:ad:f7:82:99:
38:2f:fc:9a:d4:e4:50:21:72:e1:40:58:4f:d3:ef:
9f:fa:dc:15:bb:e1:b7:01:47:e2:07:ea:47:aa:bc:
56:b2:c5:8d:c8:a1:42:f0:e2:04:2f:a6:01:a5:51:
d2:a2:6a:17:f8:55:08:67:fa:c2:f4:88:8b:fb:31:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:71:89:20:71:72:23:DF:62:2E:9B:04:E5:47:79:06:E1:A2:55:90
X509v3 Authority Key Identifier:
keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/P3GJIHFyI99iLpsE5Ud5BuGiVZA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.100.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:67:4f:c9:d5:ba:df:2d:58:1c:81:38:82:02:ef:4e:13:81:
88:68:aa:7a:36:82:01:b3:54:71:a7:d4:a7:8b:b7:06:3a:a4:
f1:c1:59:7c:7a:75:68:ec:04:30:8a:09:e7:5f:10:73:bc:39:
71:04:13:1c:53:45:ce:aa:b5:d1:a2:02:10:29:45:8d:34:f0:
a1:d6:a9:f8:ba:2a:6d:e9:03:68:db:24:01:4a:10:ce:e1:47:
97:d3:4f:90:66:0b:dd:f2:27:dc:61:3c:42:ff:9c:8e:7d:b5:
5c:ac:c8:03:ae:1b:dc:6b:67:c1:b3:6e:b9:ac:5f:d1:c0:53:
82:47:41:aa:32:f6:77:f5:ba:d5:ed:08:77:69:50:b8:02:c8:
eb:7c:4c:45:5b:b6:07:4a:57:29:00:b7:63:89:29:3b:98:31:
d8:2d:21:6b:df:db:48:96:b3:dc:90:1c:e5:e2:a5:2f:ad:3e:
bf:11:90:cf:84:e1:27:36:c5:ce:77:3c:b6:be:ce:a1:71:a3:
ed:c3:6a:b6:fd:f6:55:ef:46:0a:12:31:70:75:a5:44:d6:60:
1c:f1:71:97:d3:cc:7c:95:8e:08:b9:47:7b:a2:f9:76:7a:60:
ec:c3:2b:2a:34:e8:97:af:a4:8a:08:06:1a:bb:52:22:0f:b0:
04:c8:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org