Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/gSCDjqt5wdCRAj5Gs3e0DNYoSwI.roa
File: gSCDjqt5wdCRAj5Gs3e0DNYoSwI.roa (raw, json)
Hash identifier: QR76wHbpamiqq5Z+iOGfev+5/Mf+znlP11vtjczxjww=
Subject key identifier: 81:20:83:8E:AB:79:C1:D0:91:02:3E:46:B3:77:B4:0C:D6:28:4B:02
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: CD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/gSCDjqt5wdCRAj5Gs3e0DNYoSwI.roa
Signing time: Fri 01 Apr 2022 01:28:17 +0000
ROA not before: Fri 01 Apr 2022 01:28:17 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 211.0.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:17 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=8120838EAB79C1D091023E46B377B40CD6284B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:46:ad:64:b8:4a:89:e5:15:b1:00:cc:5a:
4c:1a:ff:7a:2c:75:6b:31:d6:7c:cd:17:b0:7b:f5:
0e:ba:76:59:c2:9c:c9:3c:4a:47:d5:da:55:17:d9:
ef:65:2a:b8:4a:42:2a:c6:c2:a5:9f:49:23:38:9b:
30:73:b4:ba:96:ca:9f:da:8d:10:1a:a2:68:82:71:
24:5d:b1:15:d2:6f:12:9b:5a:e9:f4:3b:ce:c0:a2:
b5:f8:7a:0e:53:30:66:17:24:8b:2e:3f:f5:80:84:
57:e6:3c:94:be:4d:85:6c:5c:d6:c0:89:0d:72:65:
e1:3a:29:e2:5e:69:61:ff:7c:7b:5d:e5:8b:66:7a:
11:0d:26:38:5d:74:fc:ec:0c:6e:72:4f:bc:ba:51:
89:2c:fc:94:f5:63:59:99:c6:f6:87:39:29:49:73:
c3:fb:c3:cf:ba:83:c7:04:05:33:72:24:16:e9:3a:
e9:9b:64:38:6c:71:8d:5b:85:b1:71:87:b5:71:80:
15:32:19:06:ca:ee:eb:be:2b:af:74:67:3f:b6:29:
47:b3:d8:c5:90:dc:2c:87:23:12:0c:50:7c:26:31:
63:6a:d4:8e:60:99:43:82:b1:c2:bf:10:20:31:f7:
57:09:d5:28:0a:a9:04:ef:7a:87:d0:94:0f:77:64:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:83:8E:AB:79:C1:D0:91:02:3E:46:B3:77:B4:0C:D6:28:4B:02
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/gSCDjqt5wdCRAj5Gs3e0DNYoSwI.roa
sbgp-ipAddrBlock: critical
IPv4:
211.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:65:b1:a1:fc:80:03:13:af:4d:0b:7c:06:a4:ac:1d:e8:76:
46:fe:3a:5d:cc:9d:c3:5f:b5:bf:dc:55:31:ad:e3:ce:b2:40:
50:17:5f:e1:70:10:59:67:7b:a1:7a:d2:92:e8:c7:a9:aa:b5:
f9:ea:8f:af:45:99:a7:ff:9e:51:83:d4:96:5c:8c:27:15:2a:
cd:d8:bf:16:0c:ce:9d:fe:18:1e:b0:2a:91:f2:aa:01:c3:7e:
a7:d7:3a:cb:1d:ea:6b:01:16:48:dc:45:9d:b1:c9:ae:13:8e:
07:1b:3d:3e:c1:ac:d5:f1:96:df:07:3e:29:3d:4e:60:45:a6:
22:e6:2e:43:e9:89:ac:e0:65:a4:4f:c3:4a:c0:10:fe:11:a4:
91:59:9b:71:fc:9f:d6:44:7d:a1:59:8f:9e:ef:7c:bd:d8:e0:
0a:05:5c:77:cb:d6:02:a6:23:f2:1e:30:1e:a5:43:10:4b:a5:
82:2c:a6:a7:dd:bd:ef:8f:7b:69:a2:cd:c2:b9:35:a8:48:9e:
30:27:df:83:7e:53:bd:21:8f:b9:53:0c:f6:58:a7:3b:1a:76:
2a:3a:8d:8a:ae:73:12:c5:14:27:72:83:26:7e:14:ea:c7:43:
f8:c0:99:20:ab:8b:bc:59:b5:48:9b:3b:f2:c0:4e:ca:92:10:
75:49:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org