Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa
File: CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa (raw, json)
Hash identifier: Nbtdeoi24VKXwAKBUOsxovrFba25wFFi/XgZ0CjVcZE=
Subject key identifier: 09:F4:BE:1E:4F:8C:C3:EB:63:74:1C:F2:2F:FC:91:0A:06:AB:C8:EE
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 26
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa
Signing time: Sat 20 Feb 2021 08:03:57 +0000
ROA not before: Sat 20 Feb 2021 08:03:57 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 9621
IP address blocks: 119.59.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Feb 20 08:03:57 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=09F4BE1E4F8CC3EB63741CF22FFC910A06ABC8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:3f:35:32:ad:e1:ce:f0:4c:06:13:17:e6:
d9:0a:d3:92:1d:69:b2:bb:aa:7e:10:be:f1:28:29:
19:af:37:08:65:18:d7:99:a8:b8:21:72:95:7f:26:
ee:9b:d0:80:9b:5b:73:03:d9:ff:25:22:8a:6c:76:
b2:6e:54:67:59:d0:80:15:f7:2e:68:89:24:6c:dd:
e4:4f:ae:b1:d4:ed:ff:c5:a7:f1:57:b4:7a:6f:35:
2c:4b:ad:2b:c5:0c:cb:ea:99:e8:7e:b5:1f:63:92:
71:aa:9f:4f:07:e5:a8:bd:ef:5c:1d:a2:d6:8b:dc:
0d:3a:29:65:fe:11:29:a0:9b:9e:81:18:63:f8:49:
9b:c2:4b:fb:df:30:6b:3a:a9:72:3d:24:ff:65:a5:
5a:5c:dd:6e:16:2e:29:3a:ec:96:90:ac:b0:33:01:
bc:a5:7d:94:17:a0:7b:56:a1:75:03:a1:29:1f:d2:
2f:53:39:f0:a6:e5:47:92:4a:ff:82:f2:8b:9b:66:
c0:37:e7:db:9c:6d:1e:ec:05:ab:e5:0c:64:d1:0d:
f5:32:ea:b8:e5:14:d2:60:77:99:d8:d1:94:24:9e:
1a:89:89:38:83:91:44:a3:35:df:76:66:d5:1a:66:
df:b1:38:f5:2b:2a:c1:53:f9:05:44:a2:f0:62:cc:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:BE:1E:4F:8C:C3:EB:63:74:1C:F2:2F:FC:91:0A:06:AB:C8:EE
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/CfS-Hk-Mw-tjdBzyL_yRCgaryO4.roa
sbgp-ipAddrBlock: critical
IPv4:
119.59.88.0/21
Signature Algorithm: sha256WithRSAEncryption
37:51:72:69:db:5b:93:fe:59:f0:9e:4f:ce:83:4b:16:b4:58:
f4:8f:d4:6e:78:f2:25:30:32:5d:30:b6:16:36:f3:e6:0e:cf:
47:f5:4d:4d:ff:1a:85:45:07:15:37:fc:7c:dd:25:19:24:1e:
6e:74:a0:1d:c8:80:e0:95:d7:7c:bf:9d:42:01:2e:81:f3:16:
93:96:09:0a:67:39:8e:48:60:9e:55:68:ab:ca:47:27:d9:6c:
f3:cd:cf:73:93:60:c0:54:0b:dd:7e:7f:36:5a:0c:4d:59:82:
45:5a:b2:08:60:75:c1:ac:b8:da:91:3c:fb:95:73:5d:70:d5:
21:d6:2a:17:33:f7:82:d4:e8:c7:45:2a:38:17:19:7c:05:3a:
bf:c9:de:83:02:4f:2b:be:d9:21:bc:22:a1:d3:b6:d8:fc:d4:
b8:ca:18:b3:eb:59:1b:a4:70:84:20:f6:f4:41:11:c3:88:3d:
7f:95:c5:5d:38:64:82:23:e3:47:4f:92:1d:2d:02:2b:98:11:
5f:a5:60:cc:45:bc:0b:57:24:ef:eb:64:73:a8:05:88:a0:44:
10:67:ca:99:b9:09:fa:53:8c:9f:c8:88:e0:7d:fe:d0:2e:e4:
5c:a3:c7:13:60:05:6e:8c:9e:35:fe:4c:bb:ea:56:5b:51:32:
3c:e1:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org