Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Kq55UekJ3f3x2rDZ9GmoCrynIhM.roa
File: Kq55UekJ3f3x2rDZ9GmoCrynIhM.roa (raw, json)
Hash identifier: cK8wSik0/YSAQVaOXoGkdbPwc0shAZHr8ij1OZUlcpc=
Subject key identifier: 2A:AE:79:51:E9:09:DD:FD:F1:DA:B0:D9:F4:69:A8:0A:BC:A7:22:13
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: C5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Kq55UekJ3f3x2rDZ9GmoCrynIhM.roa
Signing time: Fri 01 Apr 2022 01:28:15 +0000
ROA not before: Fri 01 Apr 2022 01:28:15 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 124.84.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:15 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=2AAE7951E909DDFDF1DAB0D9F469A80ABCA72213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:39:57:b8:55:37:fc:61:5e:e6:14:55:df:
1d:ea:99:7c:4c:61:56:36:78:4f:bb:d5:1f:3f:ff:
44:07:32:63:64:59:40:b2:61:2e:c3:b3:f6:d2:67:
f4:51:9f:e5:4a:30:d9:5c:f2:58:fc:a7:ce:ca:9d:
55:83:12:9e:c6:75:62:d3:e9:2b:24:d6:d3:9e:a3:
b7:66:c7:3a:0a:e9:54:56:46:5e:8c:36:7e:69:78:
3b:6f:5e:bb:74:32:0e:85:69:5f:f3:1b:e4:11:49:
4c:6a:6a:26:e8:38:29:75:79:d8:47:c3:c4:67:3c:
4d:26:ec:47:36:da:09:1d:76:cd:13:c8:3f:35:86:
0c:39:1e:85:49:75:0a:bc:1b:a1:cc:88:7e:24:a7:
be:aa:0d:c0:f4:a3:3b:20:21:13:56:16:4f:c0:68:
3a:1d:99:d1:30:11:70:14:e5:e9:15:c1:05:cf:75:
7f:4d:d3:4a:b4:d2:b5:75:87:48:4e:3f:ba:43:d2:
b2:a8:20:d1:ed:80:c0:56:3c:3c:41:9f:e8:35:41:
5a:70:6c:21:b3:b9:7f:16:77:42:31:2d:01:d4:99:
96:32:1e:2b:39:97:3b:b0:9b:b2:d4:56:e5:98:d5:
dd:d2:3b:9f:57:fe:52:c5:a8:31:a0:48:7d:93:50:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:79:51:E9:09:DD:FD:F1:DA:B0:D9:F4:69:A8:0A:BC:A7:22:13
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Kq55UekJ3f3x2rDZ9GmoCrynIhM.roa
sbgp-ipAddrBlock: critical
IPv4:
124.84.0.0/14
Signature Algorithm: sha256WithRSAEncryption
38:ae:e1:91:66:37:c4:af:4a:87:a7:96:5b:cb:c3:bf:c2:70:
a9:95:a7:c6:a9:b8:0a:f5:bf:33:f8:94:71:53:4e:88:15:df:
b7:37:bd:0a:73:35:b7:c6:e6:72:2a:2a:56:e1:ba:6d:24:ae:
f9:97:e2:99:30:32:c1:01:75:28:3c:6c:32:1c:13:64:20:19:
64:d9:5f:f3:29:25:0f:80:bb:de:6d:3a:af:7b:01:68:f9:f4:
64:b3:8d:f2:7d:5f:00:c9:5f:8b:92:b9:2b:f6:08:4a:f2:ff:
2f:fc:6d:b0:bf:ea:28:ee:dc:22:b6:3e:3f:36:b4:97:62:78:
7c:2a:d4:45:66:4a:0b:c5:c6:00:5d:44:cd:f6:44:28:17:8a:
bc:eb:50:07:27:0e:23:46:74:6e:5e:2b:1b:c7:45:01:ac:33:
b4:e1:96:46:44:c8:98:53:1e:ad:4a:ce:6a:21:47:15:55:c0:
a7:75:9c:3c:48:81:fe:d0:27:7f:91:20:70:c0:d2:76:88:8f:
69:1c:65:7f:31:e7:ac:3b:94:0c:d8:ff:db:9a:7e:8b:ce:a4:
f2:50:fa:e7:37:a6:b1:21:72:28:29:8e:c9:49:c4:5b:54:6d:
bc:7d:9b:e2:66:aa:03:1c:9d:4a:22:f7:2e:73:17:39:ed:d9:
d8:86:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org