Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa
File: KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa (raw, json)
Hash identifier: yHs7jUljOyOp6S2T5VZSxFGTmQdMhkiadTqDjJ2e68s=
Subject key identifier: 2A:35:68:2C:AF:05:05:6B:1B:16:E7:3F:BF:F2:66:ED:E3:76:FF:F8
Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial: 4C
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa
Signing time: Thu 13 Apr 2023 09:54:17 +0000
ROA not before: Thu 13 Apr 2023 09:54:17 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 37892
IP address blocks: 124.247.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Validity
Not Before: Apr 13 09:54:17 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=2A35682CAF05056B1B16E73FBFF266EDE376FFF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:e8:cd:03:a3:26:9c:4d:d5:20:86:10:80:
67:78:0d:de:05:b3:fc:4f:d4:fd:51:fd:b1:10:1c:
85:b9:ca:c2:f2:b1:57:1d:14:f0:49:7b:cc:23:45:
ca:74:0b:c7:11:ca:b5:bc:ed:d2:bd:90:7b:66:f3:
5b:3b:a1:7f:61:20:32:9d:33:f6:2d:26:ae:3d:5d:
68:fc:09:e9:ad:0e:7a:9e:32:bd:14:66:0d:81:45:
9b:69:88:3f:8c:f6:23:85:4d:ed:dd:a2:37:35:3c:
64:47:08:5e:be:9c:5a:12:6f:49:a5:6d:24:41:82:
cc:1a:e4:81:de:55:cf:99:ac:6b:39:97:1d:f3:e5:
5f:85:d9:eb:ae:2a:98:15:3c:59:94:3d:4b:56:47:
80:88:18:45:f8:45:a2:ef:34:bf:ff:d8:22:9a:57:
ea:88:15:dc:00:b6:43:1c:f1:8b:43:93:b0:4d:f4:
d3:b0:7d:6f:ca:20:73:18:b1:b7:18:1f:be:32:d8:
03:e2:8d:0f:01:26:15:3f:1d:d4:d8:31:42:3d:98:
bc:6a:8c:d2:76:ef:5f:6a:d4:0b:63:40:9d:1c:11:
a0:70:8c:a1:ab:7b:17:5e:75:fb:f2:64:d3:6b:63:
43:cb:20:92:11:65:ed:95:82:66:c1:d6:14:3d:1e:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:68:2C:AF:05:05:6B:1B:16:E7:3F:BF:F2:66:ED:E3:76:FF:F8
X509v3 Authority Key Identifier:
keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.247.0.0/17
Signature Algorithm: sha256WithRSAEncryption
91:24:08:9c:73:e2:78:f1:e1:0e:2c:c7:11:71:bb:b7:86:9d:
48:e4:73:26:51:96:ae:01:74:38:0d:c0:33:57:3f:83:15:bd:
e3:48:82:eb:f8:8f:6c:cd:09:8f:1a:e2:b8:e6:39:87:c8:09:
12:b9:78:7d:01:02:c9:71:f7:e6:c9:b4:cc:23:be:b6:04:f4:
d4:60:26:a5:5f:f9:f6:41:be:85:f4:08:af:be:4f:e0:84:28:
e3:a2:50:fe:2d:bc:d6:25:f0:1f:5c:e0:dd:aa:f3:ea:7b:5b:
cf:5a:93:24:be:b7:98:e1:5c:f5:4e:32:dc:39:50:46:5e:4c:
7b:d1:40:c8:38:89:bb:08:e9:f7:8b:f3:39:b5:7a:14:c9:7d:
c6:21:0d:27:5f:38:50:da:d1:44:29:27:aa:04:45:bb:d8:f8:
3f:85:7a:56:76:7c:47:28:da:49:26:42:bc:40:91:1f:da:64:
a4:16:f6:1c:07:0b:d7:61:46:5b:cd:b7:3b:50:0c:e0:57:70:
73:48:de:a8:c0:a8:da:70:11:e3:65:fa:ce:ca:6f:0a:46:30:
0c:62:b9:8c:99:b2:d3:11:34:47:09:e1:74:95:bf:41:3b:11:
5d:5e:da:19:86:2f:05:0f:db:14:d7:11:f9:9f:ed:5e:99:ad:
43:2d:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org