Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/pIzCRhT4FNbytbp_VWZYmAQ1BY0.roa
File: pIzCRhT4FNbytbp_VWZYmAQ1BY0.roa (raw, json)
Hash identifier: kI/rq+Wfzl8ThMLDLmSM20DSxh5bMieEgOSPPZQayo4=
Subject key identifier: A4:8C:C2:46:14:F8:14:D6:F2:B5:BA:7F:55:66:58:98:04:35:05:8D
Certificate issuer: /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial: 02
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/pIzCRhT4FNbytbp_VWZYmAQ1BY0.roa
Signing time: Tue 29 Mar 2022 04:30:55 +0000
ROA not before: Tue 29 Mar 2022 04:30:55 +0000
ROA not after: Wed 29 Mar 2023 04:13:32 +0000
asID: 55385
IP address blocks: 119.47.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Validity
Not Before: Mar 29 04:30:55 2022 GMT
Not After : Mar 29 04:13:32 2023 GMT
Subject: CN=A48CC24614F814D6F2B5BA7F556658980435058D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:5d:95:81:6f:8d:04:cc:8c:49:b9:8f:89:
5d:3b:cf:b5:64:d6:9b:4f:e1:2b:5d:e7:15:45:be:
93:1f:26:12:3f:e6:73:ec:3d:cb:01:6a:05:7f:48:
88:14:24:1d:e1:31:ab:11:e0:62:93:7b:a7:f0:98:
ad:d4:ce:55:c0:60:12:b5:85:a0:32:f9:2e:03:73:
d4:46:80:30:b0:1c:f8:24:b9:3b:a0:1a:3b:eb:68:
f3:a8:c8:de:b7:d3:10:d3:aa:64:00:c3:fa:34:38:
e3:33:56:d2:f2:19:7c:72:e3:35:9d:04:0d:87:42:
70:24:4a:53:da:e4:eb:11:ee:21:bd:c0:dc:88:84:
88:e0:89:dc:7b:e9:e1:50:5c:d3:39:07:6d:72:cc:
d7:e7:91:56:c0:8d:c9:a5:90:b8:a1:d6:53:04:8d:
d9:a9:ac:d0:40:03:50:aa:d9:ba:e2:e3:2b:5c:aa:
2f:00:11:ea:2c:7a:1a:2e:29:8e:27:ec:ce:eb:83:
5d:05:74:88:40:93:91:fe:07:25:b0:b6:2b:26:3c:
05:11:71:35:1d:6c:93:de:4d:a3:e4:8d:bf:a6:ce:
38:ed:43:58:15:6d:ff:03:64:08:c8:0e:91:f9:c2:
b6:78:7a:11:b1:cd:8a:60:c5:20:ba:fd:c0:dc:3c:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:C2:46:14:F8:14:D6:F2:B5:BA:7F:55:66:58:98:04:35:05:8D
X509v3 Authority Key Identifier:
keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/pIzCRhT4FNbytbp_VWZYmAQ1BY0.roa
sbgp-ipAddrBlock: critical
IPv4:
119.47.0.0/20
Signature Algorithm: sha256WithRSAEncryption
45:e2:c1:c5:9f:34:86:34:24:77:f6:52:2f:63:8e:de:db:80:
db:db:20:ff:52:75:3a:21:dc:2e:7c:8e:7a:ff:6c:1d:6f:ec:
49:30:a9:46:10:3a:9b:cb:0c:93:e3:86:7e:e3:06:ec:ed:6e:
8b:88:aa:0d:f0:70:46:76:56:19:d1:d6:c8:0d:a6:37:5d:2d:
d3:be:85:ef:42:92:e6:ae:a1:2f:b4:c1:fd:d5:6b:5d:ac:f2:
06:09:af:63:99:62:9c:c2:d5:59:64:77:0b:4c:93:32:fc:13:
31:23:7d:b9:96:6e:8b:65:d2:16:d2:8a:e5:19:b1:e4:09:c0:
a2:b6:dc:8b:bb:92:89:dc:14:29:ea:b1:a3:de:91:99:14:4f:
08:c9:38:8e:84:dd:53:4a:5d:ba:8c:db:cc:75:79:42:ab:5d:
b8:ca:42:5f:dd:66:7c:d6:ea:cd:97:31:a1:6b:71:11:83:99:
f2:67:63:27:72:3e:34:2b:10:6a:28:05:e4:bf:05:f5:61:61:
3d:14:8e:36:28:bd:43:62:54:c1:03:fe:c2:81:d0:13:bd:11:
0e:12:8a:58:ee:87:8f:cf:7b:d3:ff:33:ad:d1:bf:18:c1:5e:
41:5c:a2:57:bb:29:c2:19:f9:de:f3:3c:aa:24:30:67:1e:c1:
29:0c:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org