Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/CKpYxl3bKwGH1lY1dhr3eNZCST0.roa
File: CKpYxl3bKwGH1lY1dhr3eNZCST0.roa (raw, json)
Hash identifier: KtvNmccs/fRi/+id6MFoavds768MbDRQArSjQCmNQ8c=
Subject key identifier: 08:AA:58:C6:5D:DB:2B:01:87:D6:56:35:76:1A:F7:78:D6:42:49:3D
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 96
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CKpYxl3bKwGH1lY1dhr3eNZCST0.roa
Signing time: Sat 05 Jun 2021 03:47:30 +0000
ROA not before: Sat 05 Jun 2021 03:47:30 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 60.32.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:30 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=08AA58C65DDB2B0187D65635761AF778D642493D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:77:06:a6:1a:33:f8:ab:56:92:79:b1:b3:
c8:43:85:78:4c:0e:ec:94:e7:62:f3:7a:95:13:42:
f2:9b:45:50:d4:0c:3c:e4:7f:75:fd:01:dd:c6:6d:
ba:dd:a0:87:df:26:68:dd:5a:ee:d4:d9:6e:56:34:
70:36:09:14:08:a3:ba:4c:15:0b:df:fa:fa:c4:e0:
8b:ae:78:ca:61:9d:90:8e:6e:c4:c7:61:ed:ab:ce:
8f:4d:95:7c:b6:23:f4:f9:f8:46:46:2a:19:6d:cb:
ca:24:a4:fe:4e:dd:eb:47:a6:0b:9a:b4:84:f9:ae:
d8:08:4a:2f:d3:39:f3:1f:31:4d:0f:76:b3:8b:85:
21:fa:b0:24:ed:ef:ae:7a:cb:41:51:00:32:ea:85:
fa:c9:8c:c9:8a:34:ce:c2:89:b5:99:24:d9:8f:3c:
29:33:10:9e:65:29:6b:d6:b6:a9:30:f7:7b:f8:e7:
97:79:92:ca:3c:ce:50:c8:92:5b:cc:71:ef:6f:35:
83:df:e7:ed:67:ca:df:94:fe:46:68:5f:6a:4f:ae:
a9:e4:76:b8:11:a7:93:f5:2b:1f:35:4e:8c:0b:47:
0e:74:07:25:04:3d:3e:7e:d9:93:2e:93:a4:06:a8:
59:c6:84:47:73:1c:cb:89:20:ea:ac:d9:dc:cf:02:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AA:58:C6:5D:DB:2B:01:87:D6:56:35:76:1A:F7:78:D6:42:49:3D
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CKpYxl3bKwGH1lY1dhr3eNZCST0.roa
sbgp-ipAddrBlock: critical
IPv4:
60.32.0.0/12
Signature Algorithm: sha256WithRSAEncryption
59:68:35:36:32:e3:06:71:f4:e0:ab:da:a5:13:01:f3:85:fc:
28:58:f6:67:4b:c9:12:9a:20:65:f8:2b:95:fd:b1:2f:47:1d:
fd:ae:59:d8:92:c1:94:9f:48:55:05:38:29:ab:48:42:6e:cc:
2c:a5:dd:a9:a1:9a:cc:81:2d:c7:c2:9a:0b:04:7a:1f:52:9e:
a4:46:99:23:0c:ec:bd:10:bf:40:c0:eb:87:cf:1f:34:ac:8b:
dd:07:91:c9:c8:c9:1f:4b:0e:fd:01:bb:ff:04:53:c8:5b:66:
fb:03:a7:16:ac:f5:85:eb:d3:f6:f1:d2:73:28:33:f0:b6:09:
bb:33:05:21:84:65:27:d2:cd:51:67:48:b0:4e:0c:c3:79:57:
bc:a8:37:6e:6d:01:bd:6f:a2:61:25:75:39:bd:63:fe:4c:d0:
3c:41:51:58:85:15:64:d6:51:74:2b:d9:32:0f:29:2d:0a:69:
af:dd:54:58:e7:4b:d3:85:43:20:f3:1c:0c:90:0a:f3:0c:1d:
b4:22:b5:f1:ef:db:86:88:f5:fd:29:ab:3c:80:40:fe:3e:d5:
03:c4:98:a8:3f:fe:c8:e8:7a:b3:c2:f2:34:4c:6c:e1:6c:b0:
2c:8a:b3:74:12:db:96:f5:e5:b1:23:42:0e:05:4d:54:1a:d0:
1d:0e:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org