Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/YJhXzzMDoyA4dxgTafKlVXsgZLo.roa
File: YJhXzzMDoyA4dxgTafKlVXsgZLo.roa (raw, json)
Hash identifier: 2q0srVbX4/Nus4WgXrKyxFN6HcbIL1/prwCZRnU9/hw=
Subject key identifier: 60:98:57:CF:33:03:A3:20:38:77:18:13:69:F2:A5:55:7B:20:64:BA
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: C3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/YJhXzzMDoyA4dxgTafKlVXsgZLo.roa
Signing time: Fri 01 Apr 2022 01:28:14 +0000
ROA not before: Fri 01 Apr 2022 01:28:14 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 118.0.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:14 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=609857CF3303A3203877181369F2A5557B2064BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:78:73:5c:a6:3a:27:e7:59:32:aa:51:80:
3d:99:96:9d:5f:4c:90:6f:41:14:32:ae:bd:66:ca:
25:d3:15:91:85:32:ad:f7:e8:c4:4f:69:9d:18:05:
bf:04:56:ba:18:99:5e:5d:28:01:cd:97:f9:1f:c2:
2c:c1:b2:8a:73:e9:74:f1:de:95:e2:b0:ef:f3:c3:
59:72:4b:dd:00:50:78:56:46:a1:34:c0:27:e2:56:
de:c0:9d:ba:17:7a:68:72:52:cc:d4:4d:9e:0a:df:
3f:1c:28:49:f3:3d:23:49:3f:67:81:21:4d:f6:fc:
f0:43:c4:b2:a5:17:67:2f:d6:a0:f9:7c:c6:41:51:
49:72:0b:95:db:54:7a:aa:b0:20:03:b5:cd:21:72:
25:b3:8e:81:6f:38:09:7c:e2:98:4e:b8:02:51:9d:
18:dc:84:a0:82:73:73:c2:16:dc:52:d3:de:d8:0b:
51:96:bf:42:77:3d:c7:1b:3f:5e:a9:55:dd:4f:59:
17:7c:3d:1c:e8:aa:35:9c:4e:7e:ec:35:37:0c:48:
a6:04:d4:6f:fd:41:3c:35:0b:15:d9:d5:f0:56:9f:
5e:2b:56:03:26:a9:69:6f:01:e0:fc:dd:fe:2f:f0:
e0:25:f4:89:69:c5:67:8b:c4:a3:35:d0:33:ab:b6:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:57:CF:33:03:A3:20:38:77:18:13:69:F2:A5:55:7B:20:64:BA
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/YJhXzzMDoyA4dxgTafKlVXsgZLo.roa
sbgp-ipAddrBlock: critical
IPv4:
118.0.0.0/12
Signature Algorithm: sha256WithRSAEncryption
20:bb:4a:30:6d:87:b3:fd:cc:32:71:fb:fb:54:01:44:05:cd:
e5:f7:da:48:f0:53:25:94:c4:79:94:ad:d2:71:b9:fd:b3:89:
62:64:2f:4a:6a:3a:8c:ed:b6:67:42:45:d8:a2:a8:93:ae:41:
a0:1f:d0:31:c3:28:00:22:e4:53:75:d8:ee:e1:fe:39:19:e5:
08:9f:e0:54:a3:63:a5:cd:95:b8:e2:a8:a3:a8:8e:78:56:f5:
64:34:38:ad:ac:fb:15:e2:03:3e:09:52:95:f2:35:cc:55:e3:
f9:2e:7f:19:32:15:09:ab:4f:1f:b3:01:ee:5e:7a:6e:93:a2:
fc:de:5e:b9:3e:e3:f1:80:84:ab:f9:a8:87:90:74:25:d2:7f:
ec:30:f1:f4:62:ca:09:a6:59:86:64:1f:b3:cb:d1:e9:d8:d7:
a7:e0:10:08:95:ad:20:cb:67:06:47:88:46:06:5e:e1:d6:b7:
70:b5:a4:a7:e1:fc:28:cf:2a:2d:5a:37:97:90:69:9f:8e:24:
71:18:24:1c:13:62:59:f3:c1:bc:5e:32:22:9f:a0:9b:58:54:
6e:c0:3b:1f:73:eb:ca:2e:a1:ed:c2:58:55:86:fe:a2:e7:1f:
cd:19:6c:0f:f8:d0:d5:bc:78:1e:03:43:5d:0b:cf:ba:c1:ef:
99:c2:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org