Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/3fLyxI6Gfcwma-0eIAihwKr0KNU.roa
File: 3fLyxI6Gfcwma-0eIAihwKr0KNU.roa (raw, json)
Hash identifier: AtntiZVmAI6bJALwnmz7IoDsf4EaTHWk14Q5hLBm6xY=
Subject key identifier: DD:F2:F2:C4:8E:86:7D:CC:26:6B:ED:1E:20:08:A1:C0:AA:F4:28:D5
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 95
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3fLyxI6Gfcwma-0eIAihwKr0KNU.roa
Signing time: Sat 05 Jun 2021 03:47:30 +0000
ROA not before: Sat 05 Jun 2021 03:47:30 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 153.128.0.0/10 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:30 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=DDF2F2C48E867DCC266BED1E2008A1C0AAF428D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:ec:61:40:0a:00:3a:f3:83:62:75:87:59:
d8:d4:48:eb:82:67:3e:a2:13:f5:00:0c:12:6c:68:
9b:41:6b:f4:96:ae:8b:31:83:37:de:15:3f:f7:a0:
d2:1c:2d:7d:60:00:41:d1:c5:f0:3a:6c:1d:e6:47:
ea:80:90:51:d2:aa:fa:43:2b:9c:42:c1:54:97:ab:
c5:4c:06:b5:1e:4d:e7:23:f1:17:99:ab:b2:d0:b4:
9f:5c:42:5e:07:26:4e:f4:98:61:5b:59:18:e7:e4:
27:2b:06:1e:00:ad:d6:c1:f3:7b:2f:3a:d5:61:43:
2b:e1:06:85:d0:92:a7:0b:e9:67:1a:56:97:8a:7d:
83:f9:5d:b3:fb:91:94:3a:27:bf:55:a0:57:19:b1:
b3:8e:bb:38:83:64:bd:25:24:43:e5:ea:14:32:0d:
4a:32:39:ab:78:18:26:a3:64:c7:6e:5c:f8:33:80:
b6:6d:54:4d:ba:fd:4b:7b:20:d4:8e:7b:d4:a2:5b:
18:09:3c:41:cc:dd:83:11:54:d2:5a:ae:27:ff:15:
09:07:e7:fd:6f:39:4d:19:b8:cc:31:24:c2:14:92:
f3:ed:c5:4e:1e:d9:06:2d:13:12:31:ef:f9:9d:8f:
bf:73:d5:46:e2:25:ad:5f:76:da:e8:01:2d:8c:ac:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:F2:C4:8E:86:7D:CC:26:6B:ED:1E:20:08:A1:C0:AA:F4:28:D5
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/3fLyxI6Gfcwma-0eIAihwKr0KNU.roa
sbgp-ipAddrBlock: critical
IPv4:
153.128.0.0/10
Signature Algorithm: sha256WithRSAEncryption
b1:ab:b3:da:d5:5f:42:1f:aa:2b:84:cf:ff:93:15:38:cc:dc:
3c:b6:ac:91:70:b7:8c:4e:8b:38:1e:27:87:27:d2:fb:52:75:
43:4a:7f:91:a3:22:ac:f2:d2:32:ba:a3:1d:14:c9:d4:b2:2e:
45:29:57:1c:35:c3:d9:f9:73:2c:a4:a3:ce:c6:57:28:df:27:
52:8b:76:14:08:70:f3:38:6d:ca:07:a9:c2:cf:c4:a9:05:7b:
b3:b6:08:51:20:15:19:5c:70:41:bc:a4:4d:50:4b:70:b6:0d:
46:f0:3f:cc:b8:86:3f:c3:f7:5c:4f:ee:d4:d6:40:a5:5e:29:
ef:e0:80:24:7d:10:c6:e2:1e:01:fb:47:77:9f:53:01:38:ee:
2f:43:9f:9b:da:86:9a:cf:bb:2a:db:0e:75:5c:48:56:06:64:
7a:65:73:ff:b5:3a:31:c6:14:aa:9a:a7:5d:58:a5:aa:1c:92:
ed:75:89:ea:fc:94:00:b6:4b:91:ad:82:b8:f2:06:cc:fc:1f:
0d:80:77:8b:e7:15:97:c1:b0:33:0c:c6:9c:bf:69:e1:63:63:
b2:e4:de:35:b7:f4:7e:bf:97:9e:02:dd:bf:6f:f3:9f:16:0e:
53:eb:85:77:ca:06:e6:18:b4:ec:04:a4:5a:4b:db:15:c1:21:
8c:32:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org