Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/vM2-nERjt8qUSccAjlkDpWGH3hU.roa
File: vM2-nERjt8qUSccAjlkDpWGH3hU.roa (raw, json)
Hash identifier: TKJBJiSk0Ajrg+0SPiO9XY0fXJIIXDZnUoqmF2/vIF4=
Subject key identifier: BC:CD:BE:9C:44:63:B7:CA:94:49:C7:00:8E:59:03:A5:61:87:DE:15
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 61
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vM2-nERjt8qUSccAjlkDpWGH3hU.roa
Signing time: Sat 08 May 2021 04:05:36 +0000
ROA not before: Sat 08 May 2021 04:05:36 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 210.160.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:36 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=BCCDBE9C4463B7CA9449C7008E5903A56187DE15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:93:dd:97:ef:57:b5:4b:78:b7:1d:99:ed:
3e:30:aa:b3:67:c9:e7:ec:d5:8a:2d:fe:58:2f:4e:
9c:6a:ed:5a:b1:6c:0a:91:4a:d4:3f:de:b8:42:26:
4b:40:73:e3:17:80:37:61:f3:bb:a3:23:70:76:2e:
b6:c3:44:aa:19:94:3f:58:99:18:39:5c:c9:0e:17:
14:7e:7f:8d:ab:42:bf:dc:db:c8:a3:63:74:e5:d0:
e4:64:70:83:83:98:9d:d3:01:0a:4d:15:7c:a4:1c:
ca:87:c0:99:0b:af:ab:73:ae:81:d2:43:63:87:e0:
d2:8a:06:4e:f2:e9:e7:0e:11:ce:ea:0b:79:ac:8d:
3d:30:e5:26:52:37:80:95:bd:55:22:b6:b5:9c:b4:
fc:ac:c4:cf:0c:ba:83:7b:7d:96:8f:41:51:01:cd:
53:16:d6:ee:cb:53:87:73:46:bc:2d:f0:3f:8a:39:
d9:09:36:0a:9a:2c:8d:2e:71:13:7b:ab:1e:4f:4b:
ea:ce:45:87:9a:88:bf:38:f1:56:4b:8e:01:5c:6e:
45:59:33:e9:35:5d:5f:20:cf:08:5f:ed:00:37:13:
f5:cd:40:d3:52:34:72:ec:fe:70:21:6f:44:0f:b7:
00:e0:c8:bf:f9:89:d7:8b:ce:05:78:28:90:ad:1c:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:BE:9C:44:63:B7:CA:94:49:C7:00:8E:59:03:A5:61:87:DE:15
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vM2-nERjt8qUSccAjlkDpWGH3hU.roa
sbgp-ipAddrBlock: critical
IPv4:
210.160.0.0/14
Signature Algorithm: sha256WithRSAEncryption
ab:e9:43:cd:e8:cb:ad:b3:86:d4:26:0f:56:24:13:ee:87:64:
19:16:2e:62:6d:38:6c:d7:09:b7:96:88:fd:5d:b2:aa:3d:a1:
34:d2:5a:ba:86:1e:b4:46:b5:bb:da:0d:c8:db:7a:21:13:3b:
5f:f1:e3:15:45:fd:13:d9:e3:d6:eb:8d:7e:73:58:f3:fa:28:
6a:31:93:e3:ef:15:7f:28:17:1c:a3:ae:31:9c:85:e3:24:fb:
97:30:eb:61:14:03:85:83:c8:04:00:9a:f0:8d:ae:4c:85:36:
85:34:60:b4:9c:b1:f5:76:e3:ab:fb:1e:a6:db:ec:92:ba:1e:
38:3b:b3:35:55:9a:8a:77:ff:f0:0a:6e:5f:f0:e2:37:f2:fe:
81:64:b6:63:33:9c:87:66:65:22:d0:20:b5:2e:ab:3e:68:aa:
4c:38:ee:eb:c1:ac:0b:0e:08:4c:03:be:1f:c1:6f:55:6e:5a:
0f:90:ce:c7:5b:13:1d:75:aa:d0:37:48:f2:f6:bf:e2:0e:9b:
03:48:43:53:3b:69:1c:8d:7d:cc:fb:33:8e:24:96:26:c3:5b:
0f:f0:bd:e1:03:8a:1e:6c:7d:8f:5b:dc:9b:22:9f:7b:85:06:
3d:cc:3c:31:f0:18:f8:36:2f:0d:66:1a:93:82:2a:1d:7d:18:
f1:d4:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org