Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/1I8WRsPzblgGV4dH-SP1fRGiSnc.roa
File: 1I8WRsPzblgGV4dH-SP1fRGiSnc.roa (raw, json)
Hash identifier: mwuvTkGMOiSGEw9BsMgu99job1vyKcgPITP5l7dlNko=
Subject key identifier: D4:8F:16:46:C3:F3:6E:58:06:57:87:47:F9:23:F5:7D:11:A2:4A:77
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 7A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/1I8WRsPzblgGV4dH-SP1fRGiSnc.roa
Signing time: Mon 01 Nov 2021 01:28:41 +0000
ROA not before: Mon 01 Nov 2021 01:28:41 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 219.111.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:41 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=D48F1646C3F36E5806578747F923F57D11A24A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:1f:66:6f:52:e1:6a:ea:0b:cf:2b:d6:74:
ff:70:78:56:3b:fb:3e:b9:2a:4d:bb:6b:74:67:d7:
02:07:b4:c7:8f:51:af:bf:1c:c8:64:7d:95:a0:d6:
b9:e3:36:4b:61:ec:87:4a:9d:10:5d:10:00:6f:da:
a8:2c:88:49:27:c1:04:6c:87:cb:0f:1b:98:2d:97:
1d:aa:b1:7e:3a:d6:89:e0:9e:1f:87:53:d8:ed:7c:
09:99:1f:35:44:88:aa:1d:c7:30:28:f7:fb:56:65:
33:54:f3:96:47:1f:5c:53:09:d0:ec:e3:7e:b7:ed:
84:65:fc:5e:70:b2:51:08:15:42:77:03:08:f2:0e:
3e:b4:91:fd:d6:c0:7e:25:bb:db:47:2e:6b:cc:37:
02:cb:12:d6:4f:7f:ee:25:fe:74:df:23:6c:0e:9c:
cf:08:66:77:a2:8a:71:aa:39:27:0d:13:a3:c2:11:
d5:09:5a:ab:58:ed:84:9c:6e:a6:df:24:03:d1:db:
d1:da:9a:c3:3c:04:c5:f5:a5:a8:ef:58:cf:99:e1:
a1:01:6d:e1:18:b3:7d:99:8e:1e:95:ec:fb:ac:73:
7b:fd:63:7e:fc:81:df:8a:d8:c8:c4:81:f9:c9:5e:
6b:f4:fc:7f:22:57:5d:16:dd:a7:40:87:28:4e:db:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8F:16:46:C3:F3:6E:58:06:57:87:47:F9:23:F5:7D:11:A2:4A:77
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/1I8WRsPzblgGV4dH-SP1fRGiSnc.roa
sbgp-ipAddrBlock: critical
IPv4:
219.111.0.0/17
Signature Algorithm: sha256WithRSAEncryption
12:c8:55:9e:49:ac:3c:48:b8:de:16:5e:ff:e6:b5:50:e2:76:
cd:e4:b7:75:ac:c8:1e:3d:67:0c:5b:9a:ce:00:1e:c3:88:46:
da:a2:ad:b8:04:dc:ef:83:60:6c:f4:a1:30:b5:67:7e:23:df:
e4:b0:33:a7:b2:31:29:a6:0e:e9:76:5d:8c:d5:e6:d4:1c:cc:
77:36:4d:e0:4e:d4:b3:61:32:14:fa:54:10:58:17:45:5e:82:
8b:eb:c2:23:6d:85:b1:75:4a:2d:91:48:75:ed:6b:63:29:ef:
31:08:90:ac:f2:5b:14:fb:fc:6d:9d:6d:86:33:7e:82:56:e7:
1a:f7:82:08:d4:44:a0:1b:60:ea:5c:42:96:fa:9d:30:af:a0:
42:60:20:4d:bf:ab:05:d2:16:15:10:12:74:5e:98:68:ae:c5:
9d:92:43:d7:7a:ae:35:be:e7:cd:e7:b8:00:bc:61:bf:d2:27:
8d:3e:58:b1:1e:86:f9:11:70:31:d7:f7:26:56:02:9f:ab:f5:
2d:8b:99:1b:7d:83:7a:bb:d7:a3:bb:04:32:d1:79:87:c0:a5:
43:be:f6:f5:fc:e7:31:9b:03:3b:0f:e4:cc:f4:07:5a:6b:00:
48:45:ff:51:84:b4:07:5c:2e:ec:60:90:8b:12:b9:02:8f:b9:
c5:16:b6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org