Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/GXiwaoyvKxRVlzxtVtcetz2LyOg.roa
File: GXiwaoyvKxRVlzxtVtcetz2LyOg.roa (raw, json)
Hash identifier: 0nBJIBwp0RDH++77lBYnXO4rGNd1c2DJQGyGpTuN2ck=
Subject key identifier: 19:78:B0:6A:8C:AF:2B:14:55:97:3C:6D:56:D7:1E:B7:3D:8B:C8:E8
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 24
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/GXiwaoyvKxRVlzxtVtcetz2LyOg.roa
Signing time: Tue 25 May 2021 02:47:08 +0000
ROA not before: Tue 25 May 2021 02:47:08 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 37892
IP address blocks: 202.145.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: May 25 02:47:08 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=1978B06A8CAF2B1455973C6D56D71EB73D8BC8E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:6d:38:95:24:69:6e:2c:63:96:24:0b:32:
92:4e:a5:2a:f1:8d:3a:ee:5a:4b:17:4b:62:fc:00:
d5:ff:c8:72:0f:d2:b0:13:e6:3e:3b:8e:b6:cf:e9:
e1:69:61:84:c8:29:3e:19:4c:36:92:a2:0c:c2:22:
be:f8:af:21:13:5b:ad:7a:df:31:81:9f:35:b2:6a:
ee:98:af:f0:b1:d1:bb:d2:08:7e:57:6b:75:34:9b:
85:7c:37:49:e6:42:aa:cc:04:c5:22:fa:12:9e:39:
f0:3f:41:44:f5:f9:d3:bd:f7:7b:25:b0:82:ec:d6:
a6:0c:18:1a:57:4f:c6:b6:e4:46:49:ee:19:c0:3f:
90:f7:82:30:dc:f0:b1:9f:79:82:45:ca:62:84:24:
c5:5d:26:3a:6e:08:e4:10:9d:cf:c4:cb:04:da:ba:
47:ea:74:15:5d:c2:7e:20:36:e8:ea:bc:9e:ed:5e:
4b:1e:a5:dd:d4:61:f9:d0:0c:e8:cf:7a:d6:92:fc:
38:73:34:ce:e5:1d:a8:3c:e0:b4:ed:5a:9c:92:62:
14:76:ba:52:6b:52:7b:37:69:33:c4:d9:05:d4:81:
05:00:38:cd:61:99:19:00:20:8b:58:6f:c6:e4:ab:
ed:de:f2:e6:b6:45:99:4c:12:3f:70:a1:11:71:d4:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:B0:6A:8C:AF:2B:14:55:97:3C:6D:56:D7:1E:B7:3D:8B:C8:E8
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/GXiwaoyvKxRVlzxtVtcetz2LyOg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.145.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:9c:19:b2:ed:64:a9:3f:93:cb:1d:85:e5:4e:f0:04:d1:8e:
5e:ad:01:0b:e1:68:bd:21:7d:d4:ab:00:19:3c:4e:b2:fb:60:
22:00:5f:eb:7b:9a:e2:1c:30:0a:3c:b7:cf:45:fa:c4:ac:26:
1f:75:d6:5c:f3:ad:8e:a1:da:a6:5f:8b:82:55:94:7a:27:a6:
e0:c0:37:05:98:c3:4f:8d:a8:e3:3e:49:c8:c8:d9:0b:c3:82:
52:4a:78:51:da:e4:ee:ac:b4:9f:d7:41:88:cd:49:ca:77:1f:
93:0d:6e:bf:3f:c3:18:60:49:62:3f:b9:1e:3a:97:2d:05:7f:
b3:0c:a0:36:60:da:55:34:52:e9:b6:3b:f6:bf:40:9c:e9:fe:
85:5b:68:0a:9d:7e:2e:78:e5:20:1f:56:ad:04:25:f9:9f:32:
68:de:08:fc:7d:d9:9a:2b:2e:5b:9f:a3:9a:20:04:f1:d6:a5:
22:8a:9b:76:b7:b1:d9:ad:42:1b:17:a9:03:a1:ae:f8:85:91:
5f:bc:eb:2f:18:27:d0:7e:46:bb:83:c0:b0:ba:41:bf:80:f1:
d7:5b:f1:d7:50:3c:e3:61:fe:a6:43:7a:52:d8:a2:7f:ca:f8:
7a:fa:7b:9f:a5:12:dc:fa:5e:c3:c7:b4:07:17:98:90:62:2b:
53:f5:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org