Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/cKv-6r5ECaz_huqOzuUwlWTCVOo.roa
File: cKv-6r5ECaz_huqOzuUwlWTCVOo.roa (raw, json)
Hash identifier: zb2IsxlYxO2W+53pfLPHQcaPy7XsbmeYTndNSatugJs=
Subject key identifier: 70:AB:FE:EA:BE:44:09:AC:FF:86:EA:8E:CE:E5:30:95:64:C2:54:EA
Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial: 20
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/cKv-6r5ECaz_huqOzuUwlWTCVOo.roa
Signing time: Tue 01 Feb 2022 01:31:06 +0000
ROA not before: Tue 01 Feb 2022 01:31:06 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 9621
IP address blocks: 157.120.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Validity
Not Before: Feb 1 01:31:06 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=70ABFEEABE4409ACFF86EA8ECEE5309564C254EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:24:0c:6a:ec:2a:1d:31:d3:f4:c2:48:19:
b3:3d:dc:54:f3:27:32:73:8f:cb:65:4b:e6:92:72:
0e:a3:23:c3:ad:a5:32:85:91:b2:d4:78:45:79:7a:
b7:bc:9c:cf:65:51:9a:e0:69:8b:34:0b:89:ae:18:
54:2f:52:c4:19:56:f1:6e:47:4e:ae:65:4a:59:48:
3b:ec:e6:ca:9b:96:fa:c9:c0:14:25:02:cc:f6:e9:
fa:e2:7e:1e:c6:24:a6:22:78:15:b3:08:eb:03:26:
fc:be:82:56:cf:aa:04:07:48:e8:5e:fb:a6:3f:b7:
ab:62:3a:b0:bb:89:96:4d:83:5e:22:d5:82:c2:ab:
32:66:0a:e2:f8:10:2b:43:79:d7:f7:64:3c:73:df:
ba:29:a6:3c:18:9d:51:6b:bd:f6:10:dd:76:fc:22:
f0:03:8c:43:0c:20:c3:dc:67:e6:e8:ee:29:47:e6:
be:3b:85:ba:1c:7c:67:a4:99:70:41:23:31:6a:7e:
1c:57:d0:0b:6a:df:b9:7b:32:7d:6c:91:50:b1:ec:
2a:7b:9c:76:75:74:05:58:07:f3:d7:11:c9:c1:a4:
a9:0a:5c:d4:f5:db:93:f6:d5:a7:96:e2:56:a9:30:
44:0d:ab:98:48:10:42:51:fe:e2:af:7c:c2:fd:6f:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:FE:EA:BE:44:09:AC:FF:86:EA:8E:CE:E5:30:95:64:C2:54:EA
X509v3 Authority Key Identifier:
keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/cKv-6r5ECaz_huqOzuUwlWTCVOo.roa
sbgp-ipAddrBlock: critical
IPv4:
157.120.96.0/20
Signature Algorithm: sha256WithRSAEncryption
55:5f:0f:55:18:ab:60:3c:5f:e1:3d:d8:b3:a4:11:26:30:e7:
70:83:93:80:2e:14:12:1d:95:5b:9c:b4:71:de:b7:57:1e:00:
84:fa:d0:b7:f9:da:f9:4a:30:5b:21:ec:93:5e:59:9c:5a:53:
87:9d:61:50:6c:03:53:ad:22:e6:30:6b:3a:3a:ba:f6:4c:31:
d4:25:f7:6b:6a:b8:8c:d4:3a:d4:32:e4:cc:8d:9c:20:87:5a:
19:66:41:71:b9:ca:93:9d:6f:d6:f7:f0:99:18:a7:4a:fa:a6:
ce:4d:71:cf:f0:95:a7:d2:da:8a:eb:d8:99:02:67:cb:a6:b7:
5e:6c:07:b8:19:b4:3d:18:cf:61:1e:17:02:2a:6c:f2:8a:24:
e7:a8:78:1e:e3:23:c4:a5:d6:99:63:b7:03:fc:66:05:32:17:
d8:42:7e:d2:a3:e2:b6:52:27:50:86:22:00:ca:fa:ed:f4:05:
65:d0:b1:5e:fc:2f:13:ad:b2:99:c5:37:97:6c:9f:f1:ce:e1:
bf:49:2b:c0:af:a7:de:81:5a:e6:84:8b:b8:87:88:f8:ac:56:
74:1d:67:e6:3b:b2:69:56:fd:7d:b0:e5:94:6b:d6:4f:9f:4a:
82:07:aa:3f:54:ea:8d:0e:4b:1a:f1:62:d4:14:5d:b2:92:8a:
a3:cc:ea:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org