Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/24Y4kY8RcM5apxF9ZIERG7wyrcU.roa
File: 24Y4kY8RcM5apxF9ZIERG7wyrcU.roa (raw, json)
Hash identifier: i/ISsQ6frr/qXVbOuWQqOi5lHiwZPM43uJvDYOwSRLo=
Subject key identifier: DB:86:38:91:8F:11:70:CE:5A:A7:11:7D:64:81:11:1B:BC:32:AD:C5
Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial: 16
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/24Y4kY8RcM5apxF9ZIERG7wyrcU.roa
Signing time: Thu 04 Nov 2021 03:12:20 +0000
ROA not before: Thu 04 Nov 2021 03:12:20 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 17707
IP address blocks: 202.5.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
Validity
Not Before: Nov 4 03:12:20 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=DB8638918F1170CE5AA7117D6481111BBC32ADC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:5b:f4:f5:3b:41:4a:d6:47:04:c0:1f:4e:
b5:44:36:e5:07:72:fc:d2:83:a6:bd:61:66:96:66:
f7:47:56:a3:be:c3:b6:75:27:63:99:54:bf:1b:e4:
5d:cb:75:21:45:e8:48:a0:5e:3c:01:ef:9c:07:de:
1d:c9:ae:5a:9c:ea:2c:b4:2a:83:4f:12:fb:39:ef:
94:a0:93:c6:d3:7a:5b:68:99:66:20:e4:de:ed:9e:
ab:a1:e8:76:f4:7c:76:ee:24:88:80:f9:18:b2:f9:
66:98:11:53:ce:8d:f2:bd:ca:cb:26:f7:5e:ae:29:
71:e5:2c:c9:a4:1e:e7:27:ae:57:1c:f7:04:b3:d1:
65:e9:5b:01:06:50:af:2f:cf:63:24:d2:2e:17:07:
8c:68:50:78:20:d2:05:4d:40:e3:ef:31:8d:1c:bb:
b5:f3:9f:7a:32:b8:1c:37:45:7f:39:cd:4a:f2:31:
68:96:9c:cd:2d:bd:a0:8d:f4:bb:ff:9b:ac:59:0b:
45:7d:f9:ff:77:91:40:8b:b3:ac:d0:b4:58:13:4d:
73:ab:24:84:21:e5:c5:8b:ff:76:a3:0f:db:de:48:
61:04:a7:32:9f:30:0f:87:6b:c9:4f:99:95:98:8f:
b0:ec:31:96:f1:79:4e:8d:66:d1:52:eb:c8:37:c8:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:38:91:8F:11:70:CE:5A:A7:11:7D:64:81:11:1B:BC:32:AD:C5
X509v3 Authority Key Identifier:
keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/24Y4kY8RcM5apxF9ZIERG7wyrcU.roa
sbgp-ipAddrBlock: critical
IPv4:
202.5.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:b0:12:c6:b4:24:78:75:83:51:22:4f:8e:8f:36:ba:76:1a:
ac:a2:a3:b2:be:ad:16:d5:49:20:4c:31:9c:34:27:29:4b:e8:
c1:35:69:f6:03:14:87:93:07:03:ad:98:41:e2:22:a1:81:c9:
57:27:bc:aa:6d:64:e6:8b:f3:c7:33:24:c9:e0:f9:35:65:34:
da:5e:be:63:42:87:6c:ce:37:5f:73:f1:f2:7a:6f:b5:56:4f:
2c:af:c6:b0:37:d0:2f:f8:5f:1f:72:1c:62:2b:66:17:a6:06:
04:fc:57:b1:67:f6:e7:d5:b2:51:21:5c:b1:c7:ff:31:96:f2:
23:7d:9b:e2:a0:79:ff:7b:fd:71:47:41:dd:a2:fb:b8:96:2a:
4e:f6:5f:3d:0e:a4:4b:ff:bf:6e:af:49:a0:54:54:f1:72:e2:
16:32:5d:1a:a1:11:d9:bf:e7:b5:c6:be:a8:2c:40:45:cb:9d:
b5:f8:e5:be:49:73:dc:d6:9f:8c:32:e9:1b:b8:6e:ba:4c:95:
7f:ac:f3:e8:a0:d9:eb:e3:8c:27:4b:9a:9c:a2:73:f2:f5:fc:
e0:5e:db:de:c2:a6:db:27:d2:b1:d4:8a:cc:e1:bf:db:09:e5:
5a:b4:53:46:ce:d4:5b:ed:09:79:4f:16:7c:e2:17:75:02:8d:
d7:08:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org