Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/QWhchxxfxJEmYoF2ab7m46OZo7A.roa
File: QWhchxxfxJEmYoF2ab7m46OZo7A.roa (raw, json)
Hash identifier: ap5tEEPfz8K0aCqjqnGcxZTl/K4MXtpyFt4/y17NHTg=
Subject key identifier: 41:68:5C:87:1C:5F:C4:91:26:62:81:76:69:BE:E6:E3:A3:99:A3:B0
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 9C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QWhchxxfxJEmYoF2ab7m46OZo7A.roa
Signing time: Sat 05 Jun 2021 03:47:31 +0000
ROA not before: Sat 05 Jun 2021 03:47:31 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 58.88.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:31 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=41685C871C5FC4912662817669BEE6E3A399A3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:03:cf:f6:0d:05:26:26:93:0f:45:87:2a:
8d:7d:72:ee:c3:fc:26:7a:3d:0f:78:31:20:ff:b2:
6f:bc:a7:8a:78:5a:7e:b2:a2:f1:d8:23:e5:2b:fd:
21:ce:78:29:8b:9f:62:ef:4e:f3:01:e5:25:e9:65:
94:b4:15:43:f2:29:39:6d:c2:4d:10:7a:7f:fc:27:
bf:d5:6a:12:2f:5e:a9:3b:91:67:21:c4:a8:07:e1:
8e:de:c8:8e:c6:79:9e:84:ed:eb:d3:10:d0:f4:74:
a0:1f:92:fa:e0:6e:eb:ac:0d:2a:de:30:8b:00:e8:
85:b5:fc:47:d7:cc:92:68:63:76:d8:50:56:99:dd:
4c:c5:fe:ed:44:01:aa:0f:d5:dd:18:70:c4:b7:c3:
fa:2d:b8:02:59:a9:ff:0f:11:a4:c9:d8:43:55:c9:
1f:44:d7:e4:74:2f:de:eb:9a:40:91:e4:00:6b:7c:
43:6e:fe:54:63:76:89:27:84:b8:1b:44:de:aa:d2:
90:21:75:a0:1f:3a:e8:32:57:e3:ca:9f:9a:e8:69:
d3:67:f4:f5:4b:46:ed:bb:e3:18:5d:c5:a5:e5:07:
0e:60:30:4f:d1:cc:a0:fd:24:07:ff:73:7a:b4:9f:
35:9d:70:41:3f:01:0f:db:ce:97:b6:b4:0c:da:ff:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:68:5C:87:1C:5F:C4:91:26:62:81:76:69:BE:E6:E3:A3:99:A3:B0
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QWhchxxfxJEmYoF2ab7m46OZo7A.roa
sbgp-ipAddrBlock: critical
IPv4:
58.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
06:c6:3b:82:0d:21:7a:db:ec:2a:49:33:68:64:9d:55:ab:78:
d8:be:67:d8:03:5a:af:b0:77:c7:41:ed:5a:62:59:23:c5:1b:
d0:ba:3b:37:19:f7:32:20:67:12:70:3f:42:e4:c8:89:c2:48:
38:74:4e:ea:f9:d2:bd:b6:49:e4:81:e2:77:9f:f7:ec:0b:c9:
85:20:2b:67:a9:83:a2:11:fa:a0:48:d2:e4:ab:65:16:d5:c7:
f2:f1:b1:4c:e4:17:1f:9f:91:d3:a4:9d:cf:94:12:98:b3:b6:
7f:14:91:59:7d:3b:8e:df:43:fd:49:44:1a:a3:92:fd:b3:3e:
66:73:75:c2:ef:7e:03:3d:f7:6b:ef:9b:c3:a3:7c:e3:70:53:
03:29:02:78:73:28:1f:e1:99:18:00:78:46:e9:f1:09:98:08:
da:2d:dd:a1:d6:6c:7e:40:5f:21:ff:fa:ad:9b:e9:e0:fd:2e:
2f:7b:81:dc:cf:e1:03:77:c4:ed:4e:6c:e0:fb:4c:dc:bb:e1:
4a:2a:7f:47:1c:8f:54:d4:05:56:af:53:8b:77:de:fe:01:b7:
8c:25:dc:d7:a3:d4:74:00:5f:25:5c:61:ac:28:a5:58:7d:af:
1d:6a:eb:dd:3c:e0:78:ed:a6:66:71:7e:dc:1e:52:da:75:d9:
89:c9:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org