Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/85uKfQGeh9XYQwnpt8h6DKmSENU.roa
File: 85uKfQGeh9XYQwnpt8h6DKmSENU.roa (raw, json)
Hash identifier: dc/Hk83/R5bckd6JQgU4x8SgV3JkfvlCorUHkhiRbYc=
Subject key identifier: F3:9B:8A:7D:01:9E:87:D5:D8:43:09:E9:B7:C8:7A:0C:A9:92:10:D5
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 4E
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/85uKfQGeh9XYQwnpt8h6DKmSENU.roa
Signing time: Tue 01 Nov 2022 01:28:14 +0000
ROA not before: Tue 01 Nov 2022 01:28:14 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 9621
IP address blocks: 218.40.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Nov 1 01:28:14 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=F39B8A7D019E87D5D84309E9B7C87A0CA99210D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:5e:02:e5:39:1a:35:15:28:80:84:47:a2:
b1:2a:00:56:bc:ab:f6:36:a1:39:08:e0:ff:80:04:
ad:cb:a1:65:a7:e6:e5:68:e3:aa:08:38:14:d1:dc:
1f:d5:3b:9b:a6:54:1e:ee:d2:29:1a:de:c5:3c:bb:
f9:8d:7e:81:10:20:db:ec:da:e3:a2:b1:35:f4:8a:
a8:bb:fb:67:51:00:22:9c:f8:b3:5f:f6:26:1d:56:
4b:b1:03:90:41:3b:f1:88:fc:dc:d8:4e:5c:2c:38:
64:6e:82:cf:5e:3b:59:c5:27:8a:09:49:92:d5:8d:
38:d4:8c:7f:59:c0:b0:81:63:fc:9c:64:cc:a4:3f:
4b:61:fc:54:a9:7e:62:8c:3c:92:9d:c0:b7:38:df:
3d:e1:2a:5c:ff:df:95:3d:42:7d:cf:b6:d9:9b:fb:
bf:c0:dd:69:a7:94:78:eb:3e:5b:a7:2d:8a:b7:2e:
f8:59:4e:92:40:5e:6f:16:5d:b7:73:80:df:04:f3:
d5:ff:ff:34:71:32:d7:2d:ce:ed:30:ff:0c:9a:cb:
a3:99:e2:aa:44:73:e5:44:2b:9e:79:77:4e:50:8e:
71:c0:11:c6:ea:4f:be:a9:fe:5c:bf:51:e7:16:35:
88:6c:fa:37:73:3e:b3:c8:fb:3f:71:aa:49:4c:07:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:8A:7D:01:9E:87:D5:D8:43:09:E9:B7:C8:7A:0C:A9:92:10:D5
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/85uKfQGeh9XYQwnpt8h6DKmSENU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.40.160.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:a2:e5:89:fd:91:85:d3:4d:8a:4a:eb:46:c0:3c:b2:da:b2:
94:b5:17:38:c8:8b:40:94:a9:8b:23:6a:96:10:f7:e1:a4:ed:
3d:97:78:7a:00:f3:a5:63:4a:7d:d4:15:15:16:30:97:bf:a2:
40:a1:87:0e:54:9f:d5:9c:af:15:71:23:14:36:cc:b4:e9:03:
40:e3:f0:09:53:fb:3c:af:d8:02:ca:a1:22:c3:61:8b:81:a2:
ba:f6:c4:2b:75:f5:7e:ed:19:2a:2a:1c:7b:da:18:2d:27:c0:
94:4b:01:52:50:04:fd:a2:92:89:b0:37:9a:3c:92:2b:89:ad:
81:91:6b:4f:82:6c:4a:29:08:4a:98:08:a3:b6:98:2d:df:0a:
99:df:d0:df:c3:b4:c5:24:fd:61:c7:a6:b9:a0:2b:a0:42:3d:
6b:0b:98:60:9f:f6:ce:08:1e:93:40:d7:6e:52:f4:c1:11:79:
b8:5c:e2:c5:95:85:64:59:a8:65:23:04:5a:bb:4c:a6:92:e1:
ee:65:d5:36:ca:77:9d:65:06:92:1a:3f:b9:be:f9:89:6e:e1:
b6:cb:02:29:a2:55:65:73:a1:22:16:b1:96:d2:8a:e2:12:13:
3c:6f:d1:1a:77:62:66:4d:3c:96:b7:e9:eb:d9:75:ac:aa:56:
27:bc:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org