Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Y8xtg1Tcl17QBYdbEM2qCeNOQeg.roa
File: Y8xtg1Tcl17QBYdbEM2qCeNOQeg.roa (raw, json)
Hash identifier: /3uQxBvx7TYAQopAbSZkwsdx+UxQX6TSg0/97xvbh9M=
Subject key identifier: 63:CC:6D:83:54:DC:97:5E:D0:05:87:5B:10:CD:AA:09:E3:4E:41:E8
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 9A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Y8xtg1Tcl17QBYdbEM2qCeNOQeg.roa
Signing time: Sat 05 Jun 2021 03:47:31 +0000
ROA not before: Sat 05 Jun 2021 03:47:31 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 220.220.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:31 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=63CC6D8354DC975ED005875B10CDAA09E34E41E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:1e:0f:53:99:4d:6f:82:1a:25:29:13:20:
fe:c5:a6:27:d8:83:d2:5f:58:4c:b8:d9:74:fb:a6:
c1:35:99:c4:39:e7:66:4f:a1:d8:8f:3b:83:31:62:
27:b6:e1:54:1d:6a:56:7f:76:2a:c1:64:3c:d1:b7:
41:72:85:77:63:f5:4e:85:52:c0:4e:f1:82:de:a9:
ac:37:03:bf:34:e4:b2:87:f9:5a:fb:be:af:1a:31:
28:44:5f:7f:0a:8e:a5:86:ab:13:f2:6c:f7:c7:60:
77:11:70:99:1a:1f:0d:2f:60:b3:f9:eb:47:09:3b:
a7:83:79:c9:29:9f:c8:67:b1:e2:5e:86:9b:3b:a6:
2e:67:ef:84:18:a5:68:c0:35:ee:fa:84:4f:35:60:
e0:54:58:39:6a:80:9e:6e:97:11:07:88:25:9b:27:
b1:d1:31:cb:28:6b:77:13:b8:22:c2:61:89:c9:0e:
e2:8b:69:58:ee:06:81:d7:d3:c2:31:4f:e2:d8:52:
d0:27:65:a6:f1:5f:1b:77:97:d3:68:09:53:cb:69:
5f:42:2f:6f:15:db:18:4e:8b:ef:a0:56:8c:09:6e:
63:e2:69:3f:b7:7d:36:3b:26:9d:0c:6a:85:d6:d4:
90:0b:d9:a2:44:6c:d3:eb:05:97:59:36:8b:0d:10:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:6D:83:54:DC:97:5E:D0:05:87:5B:10:CD:AA:09:E3:4E:41:E8
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Y8xtg1Tcl17QBYdbEM2qCeNOQeg.roa
sbgp-ipAddrBlock: critical
IPv4:
220.220.0.0/15
Signature Algorithm: sha256WithRSAEncryption
62:f5:a5:8b:79:d4:aa:f6:2a:61:08:c6:54:93:1b:f5:5e:1e:
f2:77:95:e1:e8:78:81:2a:78:8c:79:95:5c:49:a6:12:d7:04:
14:25:16:99:13:32:dd:b9:55:bd:74:5d:f7:f4:4d:88:03:aa:
d3:a7:e8:11:1c:b2:bc:fd:d7:9b:a1:2a:0d:e5:10:97:b5:e2:
ef:bd:2b:bb:a2:79:86:6c:4e:84:79:cb:92:18:38:81:4a:77:
87:3b:c1:30:0f:cb:ab:3f:68:c9:88:6c:e3:66:22:83:f0:5d:
4b:46:f9:c6:13:22:e7:f1:bd:7b:fa:47:db:67:52:ff:2e:4e:
f9:dd:42:63:6d:3f:21:79:40:07:cf:4b:4b:de:67:6b:d6:85:
29:bf:06:89:c9:0b:50:56:bb:1f:28:ec:dd:4b:74:ec:f6:92:
f5:d9:ac:fd:d1:1d:84:b8:01:a5:21:13:79:5e:86:ba:45:ca:
21:c7:bb:28:3a:6b:04:80:5c:ac:b0:61:c6:ee:a2:4c:06:f8:
f5:fc:62:20:a5:3b:09:63:ca:9b:3d:47:af:10:04:dc:86:32:
c7:f7:3a:4d:00:1e:dc:a6:ef:7e:65:bd:63:b2:7f:20:d4:ae:
53:c8:ca:07:5e:43:59:8c:c4:63:ef:d8:c1:29:cb:34:67:63:
3f:b9:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org