Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/hUG8Wxd2ky2AtrnSx1qMMF9ViAA.roa
File: hUG8Wxd2ky2AtrnSx1qMMF9ViAA.roa (raw, json)
Hash identifier: /bPUKUqoZkjPey2vOEKGFBvm8+dwXSENXeZah2bxbWU=
Subject key identifier: 85:41:BC:5B:17:76:93:2D:80:B6:B9:D2:C7:5A:8C:30:5F:55:88:00
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: A4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/hUG8Wxd2ky2AtrnSx1qMMF9ViAA.roa
Signing time: Sat 05 Jun 2021 03:47:34 +0000
ROA not before: Sat 05 Jun 2021 03:47:34 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 210.225.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:34 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=8541BC5B1776932D80B6B9D2C75A8C305F558800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:b8:ec:91:b7:da:80:72:da:a6:5c:ac:d3:
8c:33:82:2b:ab:ed:d5:56:f1:29:ab:6d:9c:5a:39:
56:bb:7a:02:fa:62:51:d6:24:de:22:63:9f:45:4b:
e9:02:8d:e1:6d:17:d8:ec:be:5d:42:5a:7f:a6:22:
bb:76:95:f8:13:6b:39:49:8a:d4:c6:f9:2a:de:c3:
9d:6e:8f:e0:17:6e:6c:29:2e:aa:15:11:b2:60:83:
83:f7:8d:a0:65:bf:7c:3c:f7:a8:97:f3:22:e5:da:
ce:51:9b:a0:04:70:d7:58:0c:87:02:10:34:9c:27:
a7:bd:22:5b:e0:5b:1c:ac:40:98:6a:7b:2d:56:89:
d4:95:b1:9e:90:6f:a9:c9:87:aa:19:81:a6:db:33:
40:00:06:15:c5:e8:80:48:32:73:d5:a1:ba:ae:cb:
ef:90:1f:6b:8c:69:e2:b9:24:88:ba:dc:48:61:7a:
ae:93:d8:51:71:70:d8:41:ee:30:08:74:dd:c1:79:
27:8f:03:21:00:45:26:91:31:12:5a:0d:c2:32:99:
de:ac:7e:e5:3d:5a:f4:17:0b:e0:00:8a:4c:2b:19:
52:fa:fa:3c:ae:c1:7d:b0:d0:46:49:85:8d:77:4c:
77:26:31:df:4d:71:45:6f:f2:e7:ba:13:37:7d:bd:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:BC:5B:17:76:93:2D:80:B6:B9:D2:C7:5A:8C:30:5F:55:88:00
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/hUG8Wxd2ky2AtrnSx1qMMF9ViAA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:1e:3f:e9:33:49:f7:99:f5:42:b5:ac:bf:03:6e:c7:06:85:
22:38:b8:06:a8:52:dd:7f:ab:d3:22:19:5d:fa:41:70:ab:09:
1c:06:7d:a8:91:0c:58:8c:d0:05:2c:62:89:f2:cd:d4:de:ca:
39:88:13:70:9f:56:47:33:4f:e2:31:bf:43:26:db:84:0a:00:
d0:b6:a6:64:cb:c3:1b:40:8a:55:08:61:fa:aa:09:81:3f:52:
79:54:06:f4:a4:87:9c:5c:95:63:0e:18:a0:50:04:a7:75:7d:
8c:3e:4b:87:da:32:b6:73:17:3c:dd:68:1f:ee:95:8f:4f:b8:
d4:cc:1b:51:fd:04:dc:9a:01:44:b8:eb:bb:b1:b3:48:97:4a:
65:57:a1:04:4b:e7:bc:d6:7a:e2:48:05:d9:e8:97:5a:51:10:
74:08:7f:51:22:ba:8e:00:b9:4e:b3:dd:8b:77:f7:55:64:39:
b1:fe:96:65:a8:75:ad:8b:f1:dc:75:4a:3a:be:bc:a6:6a:d1:
f7:d4:c7:52:25:cf:3b:d0:02:60:d9:c5:73:27:99:83:0d:56:
45:b5:ff:32:4d:00:df:c4:91:06:c0:63:fc:63:76:1e:1a:3a:
2b:7e:ab:ec:73:ea:c7:16:1a:bf:fb:fd:90:64:71:42:c5:ab:
f6:3e:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org