Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/kXLYXEXhh8XQZTyzzjbdHXtA8FY.roa
File: kXLYXEXhh8XQZTyzzjbdHXtA8FY.roa (raw, json)
Hash identifier: VDVjOAfVq7gJTChxrDU1AhcPY+vmG72faKA5r7kxFgI=
Subject key identifier: 91:72:D8:5C:45:E1:87:C5:D0:65:3C:B3:CE:36:DD:1D:7B:40:F0:56
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 07
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/kXLYXEXhh8XQZTyzzjbdHXtA8FY.roa
Signing time: Wed 20 Apr 2022 08:37:17 +0000
ROA not before: Wed 20 Apr 2022 08:37:17 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 1.5.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 08:37:17 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=9172D85C45E187C5D0653CB3CE36DD1D7B40F056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:7a:4b:82:67:2b:e4:21:47:f3:71:00:88:
67:57:53:22:ee:7f:09:de:b7:42:fa:04:f6:0d:56:
0f:6f:75:b2:4c:76:91:5a:72:86:a4:e4:c8:9c:33:
9c:77:cc:7f:70:6e:54:2b:65:17:12:59:33:a1:1d:
ec:56:5e:82:aa:e2:9d:e3:c2:e9:82:30:46:21:d0:
a6:39:e4:c1:87:21:e3:a5:4f:2c:a3:7b:06:89:03:
9b:28:b7:ad:e8:31:18:93:bb:6f:06:9a:56:d5:7b:
04:db:17:3b:d5:db:87:34:9a:a9:d1:43:92:45:99:
71:6a:90:be:28:84:aa:ff:da:fc:7e:e4:9c:4d:52:
82:4b:6e:80:d8:7d:e9:b0:ae:56:29:fb:68:7b:5d:
4a:fd:c1:64:0f:c4:b3:75:54:83:25:3b:dd:2a:42:
05:09:ea:44:af:3e:b0:09:af:c1:b1:07:74:f1:32:
fc:52:ff:9b:0a:ab:97:26:7e:f4:75:e0:34:65:3e:
4c:d6:5f:d5:5b:7d:6d:38:64:b1:27:d7:97:2d:69:
ea:37:86:3f:d0:9b:dc:fe:e5:15:e9:56:7a:6d:26:
9c:8c:d2:8d:31:77:7b:37:11:72:f4:b7:46:22:69:
0b:a1:13:0c:98:1d:89:82:84:41:d5:66:92:c2:bc:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:72:D8:5C:45:E1:87:C5:D0:65:3C:B3:CE:36:DD:1D:7B:40:F0:56
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/kXLYXEXhh8XQZTyzzjbdHXtA8FY.roa
sbgp-ipAddrBlock: critical
IPv4:
1.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:39:00:89:e9:56:2a:fb:bd:c0:d1:ba:3a:3e:c9:19:75:6b:
ab:d6:3a:bb:34:e6:73:b9:b6:14:95:bf:ea:26:61:e6:6e:f9:
4b:d0:30:3f:ad:dc:1c:15:70:24:f1:5d:79:87:00:61:96:70:
96:25:f4:01:39:65:8a:b5:22:5e:f4:a2:db:48:e5:ae:04:21:
75:60:ef:5b:ea:a1:58:0f:ae:62:a1:16:00:54:0b:a3:87:57:
f3:9f:1d:a3:d0:f1:b6:81:88:36:e3:a7:2b:a0:49:b6:37:41:
c9:23:c1:5d:4d:59:a2:3a:ec:e2:e9:56:8d:39:6d:88:9e:f7:
25:3f:86:d1:50:b6:87:5c:b7:bf:f3:71:82:ac:fc:59:36:98:
49:98:7e:56:85:db:62:c3:e4:19:51:b4:99:d3:d4:b2:23:c4:
ba:fd:29:28:3e:10:95:8b:a1:4e:d5:1d:e8:18:df:31:2b:46:
af:e4:64:77:f8:2e:e0:fa:d4:38:00:2d:97:b9:0f:3f:8d:2e:
47:15:f5:3e:ee:43:82:7e:39:ee:80:3a:92:1f:16:3c:8e:12:
8d:dc:db:ee:5a:ff:4b:c0:24:a1:6f:dd:50:8e:92:06:2d:c1:
03:28:ef:a2:25:d8:48:10:e2:7c:27:9f:25:d0:d0:77:f9:29:
85:ad:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org