Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/PecapDUHqCiNooLkNuvCGgNTRkE.roa
File: PecapDUHqCiNooLkNuvCGgNTRkE.roa (raw, json)
Hash identifier: FVLmylaxpez2vN9VCbHw44+WLuPcJsgVojKXlqhNirk=
Subject key identifier: 3D:E7:1A:A4:35:07:A8:28:8D:A2:82:E4:36:EB:C2:1A:03:53:46:41
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: DE
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PecapDUHqCiNooLkNuvCGgNTRkE.roa
Signing time: Fri 01 Apr 2022 01:28:21 +0000
ROA not before: Fri 01 Apr 2022 01:28:21 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 210.232.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:21 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=3DE71AA43507A8288DA282E436EBC21A03534641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:73:72:c6:17:17:98:f1:2f:67:ca:d0:fc:
4c:8a:17:24:b6:00:f0:f4:cc:b1:84:b4:76:a1:6b:
c0:a5:70:fe:d2:42:3e:94:89:c6:9d:9f:6a:af:90:
61:76:57:ea:da:4b:b8:25:62:5d:5a:1b:f7:60:6f:
3e:62:76:13:9d:60:14:97:e1:9e:1d:33:8e:1c:28:
c9:92:86:9d:5a:ca:02:48:85:e6:f3:05:94:d2:25:
a6:a2:d7:14:ac:2f:c5:f1:eb:8b:d5:ad:59:f2:22:
75:c7:a0:e3:66:4a:4f:b7:e1:ea:80:a3:6c:c8:91:
67:e4:29:dc:f0:8e:fc:c3:4c:f5:9f:fa:a6:55:2d:
6b:56:67:01:b1:6a:60:eb:e0:37:dd:a4:45:de:75:
82:4e:21:72:92:7a:80:8b:50:19:2b:06:85:e2:d0:
9e:bb:62:41:c1:ee:ff:9d:0c:93:c6:34:81:38:c5:
6e:fd:95:a6:27:d7:90:bd:06:d8:a0:8b:90:3c:77:
82:25:e2:6c:d5:a6:1e:be:e6:d3:e5:79:05:12:2c:
c7:e5:42:60:e1:6d:73:0a:be:ef:2f:5a:2a:a4:77:
8d:cf:19:e3:7f:50:1f:a9:1d:86:08:7b:d3:5e:31:
6c:17:de:4e:f4:79:5b:98:6f:30:05:a9:e1:7a:38:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:1A:A4:35:07:A8:28:8D:A2:82:E4:36:EB:C2:1A:03:53:46:41
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PecapDUHqCiNooLkNuvCGgNTRkE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:6a:f1:49:48:30:cf:a7:65:75:29:ee:8c:78:16:41:d9:38:
b6:28:51:8e:b7:c7:75:4b:ba:f3:18:e6:d8:27:70:2d:a4:08:
2f:0a:d6:27:7f:2b:ab:24:cc:91:9d:12:31:2d:58:f6:14:3e:
ef:2b:83:3a:e8:fe:d1:ea:ec:ce:3f:ef:9b:9b:c8:0b:61:71:
98:52:64:04:0d:7b:92:73:0f:3c:d8:dc:4a:78:45:f9:5d:69:
bc:b2:16:c7:28:9f:8f:f1:3d:7b:25:e4:eb:62:2b:89:9b:d5:
33:fb:f5:71:be:31:a3:ec:de:ba:74:52:2f:86:fe:61:6e:ed:
83:ac:11:6d:a4:4e:02:19:fc:8f:bc:38:96:f5:af:b3:70:80:
b6:e7:1d:46:0a:55:39:73:c3:ab:d3:e7:67:8b:a3:f5:1e:fa:
bf:a7:74:7d:39:08:e5:98:a3:9a:eb:e8:41:d4:8a:04:1e:45:
ac:91:80:68:c7:91:0f:2e:91:7b:b7:a2:4a:d6:01:b7:bb:ad:
f3:f0:b8:7a:f0:9a:14:5d:5d:7c:6b:b7:57:41:3a:ef:fc:84:
3d:01:4a:97:8c:3b:12:8e:00:8f:fd:91:a4:43:da:f2:f7:28:
64:79:0f:7e:8c:a5:95:d8:01:9e:90:53:db:8e:d5:bf:d1:dd:
b8:d1:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org