Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/VHP4h8KvA24yqGnZ5WjtfKRvmEs.roa
File: VHP4h8KvA24yqGnZ5WjtfKRvmEs.roa (raw, json)
Hash identifier: R/sOIfq4IzoC3jRKJm+l9QMS8Jl1kFxhz8mdgFHUrPs=
Subject key identifier: 54:73:F8:87:C2:AF:03:6E:32:A8:69:D9:E5:68:ED:7C:A4:6F:98:4B
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 38
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/VHP4h8KvA24yqGnZ5WjtfKRvmEs.roa
Signing time: Tue 01 Feb 2022 01:31:05 +0000
ROA not before: Tue 01 Feb 2022 01:31:05 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 9621
IP address blocks: 123.108.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Feb 1 01:31:05 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=5473F887C2AF036E32A869D9E568ED7CA46F984B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:1e:f4:77:6d:6e:0d:06:54:3c:4b:27:76:
d6:09:4f:8e:e6:e1:fe:2c:2f:34:60:29:eb:9f:b1:
c4:c8:47:66:af:33:dd:42:79:e1:a1:0f:d4:a3:2a:
27:f1:b1:e2:3d:fb:f1:a8:4e:e3:2a:86:88:02:8c:
19:15:04:bb:1c:94:79:45:95:ac:4b:46:a9:67:ec:
91:c1:7f:21:4d:04:4b:66:59:d1:e2:40:9d:4d:91:
b2:b3:ee:a5:14:2b:89:f0:53:7a:9f:51:09:88:ba:
0c:d2:ed:90:ea:a8:f1:bb:83:9a:70:60:7d:6b:84:
32:84:5b:7d:4c:60:79:d2:88:24:e9:9d:85:37:49:
7e:69:84:e5:7b:fe:06:fb:d2:83:55:e0:f3:7e:bf:
a7:4d:8f:7b:28:d8:75:a3:d4:9b:13:32:06:39:7a:
84:22:16:3e:fc:de:d8:da:f3:4f:c5:1b:d7:c9:6f:
5e:3a:32:40:59:9d:d7:b1:81:e3:06:a9:20:89:48:
1c:03:01:7f:79:d8:16:72:3d:41:1d:13:bd:13:1a:
8d:0c:f4:43:e6:fc:08:60:51:ed:96:61:0d:49:32:
59:ad:f4:3e:13:23:38:52:9d:e4:b6:f2:cf:d3:e6:
27:cc:74:ce:cc:ae:5f:d3:e4:7d:07:92:d5:6a:be:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:73:F8:87:C2:AF:03:6E:32:A8:69:D9:E5:68:ED:7C:A4:6F:98:4B
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/VHP4h8KvA24yqGnZ5WjtfKRvmEs.roa
sbgp-ipAddrBlock: critical
IPv4:
123.108.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:cc:ee:da:1c:ed:d2:ac:b2:2e:f5:81:2e:2c:e2:fe:e8:f6:
a2:de:db:45:4b:49:1d:5e:11:02:2c:ff:9a:91:78:d0:a6:94:
de:6a:2f:78:50:a5:07:5a:da:e9:d2:94:50:f7:71:05:77:7e:
cf:a6:22:6c:66:60:84:9c:2c:55:c4:b6:e0:85:ef:2c:82:e8:
3a:35:32:c6:e7:a3:92:18:26:e2:cd:3c:eb:bc:4d:97:08:8f:
e9:0e:b6:97:8f:7f:91:fc:eb:01:01:be:d2:30:3e:77:26:c7:
6c:ea:50:99:ad:d1:a0:e8:5c:db:23:c1:ae:62:82:ad:9f:f6:
08:59:18:c1:e3:89:4e:5a:c1:9f:17:b3:87:4e:e7:36:e9:14:
cf:b7:70:ac:d5:02:7b:e9:e1:93:52:c5:9e:48:b0:0a:0d:93:
60:ae:e5:e7:d9:2b:84:7f:e1:76:b8:4f:09:5f:04:60:6f:2f:
02:9e:05:08:01:47:8b:d8:8a:9c:2c:27:fe:f4:2f:b7:27:4f:
d3:16:6e:00:3c:49:ea:3e:59:c1:6f:ca:2f:e2:96:24:a6:1c:
ca:84:75:12:f4:48:c7:0c:81:a9:b5:e4:a7:b2:31:ec:5e:42:
da:83:a7:cb:c2:75:cc:1d:ca:f1:53:b0:d9:d7:b1:b6:17:53:
81:d6:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org