Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/2W9TLM1kbpgij2PSWFAxZvGXICM.roa
File: 2W9TLM1kbpgij2PSWFAxZvGXICM.roa (raw, json)
Hash identifier: G7ROGP8tEKVG3y7G9Cvs4fqBltZrvJICJUnrV+LzJeQ=
Subject key identifier: D9:6F:53:2C:CD:64:6E:98:22:8F:63:D2:58:50:31:66:F1:97:20:23
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 7F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/2W9TLM1kbpgij2PSWFAxZvGXICM.roa
Signing time: Mon 01 Nov 2021 01:28:42 +0000
ROA not before: Mon 01 Nov 2021 01:28:42 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 220.210.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:42 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=D96F532CCD646E98228F63D258503166F1972023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:48:c9:7b:2b:1e:89:1a:6e:33:09:d5:c4:
de:d3:d7:51:b7:b3:17:76:ba:37:25:1b:65:bd:0b:
92:e9:29:25:68:be:95:43:d8:6a:57:2f:86:d7:52:
7f:b7:4e:eb:9d:19:86:e4:b9:66:e7:fc:c9:a5:69:
11:37:84:57:df:c4:1e:1c:23:1f:bb:d0:a9:77:45:
3f:f8:52:62:53:0a:57:92:99:e8:0e:00:37:47:df:
c2:f4:35:60:e4:4e:34:28:25:b9:03:9c:74:92:67:
21:7e:43:91:14:3c:5e:04:fc:48:d8:02:75:48:0b:
0f:32:b3:ce:8b:90:80:f9:be:60:48:e4:f2:c6:67:
e9:aa:a6:fb:01:c4:cb:e9:75:bd:75:08:4a:8d:82:
ae:5a:d0:20:8f:6a:a7:aa:04:fa:4d:d9:b6:23:ff:
b4:79:70:ca:9c:20:3e:fc:59:79:06:1e:fa:64:88:
b3:e4:60:2a:aa:b7:39:5c:f8:23:67:97:ed:66:ca:
a1:20:e7:ce:02:f1:da:8b:e0:4b:62:64:e4:79:7a:
88:8c:2a:09:8c:bf:5a:d3:de:34:b7:ac:e8:a0:80:
5d:c2:d3:96:29:51:37:0c:53:94:6b:a4:14:b6:12:
e5:d4:a0:be:4e:51:ac:1b:f6:1a:f9:75:65:fe:b3:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:53:2C:CD:64:6E:98:22:8F:63:D2:58:50:31:66:F1:97:20:23
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/2W9TLM1kbpgij2PSWFAxZvGXICM.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
12:98:d9:45:9a:1e:0a:30:a1:a1:48:f3:62:83:51:15:4f:ef:
e8:83:6b:af:7d:32:bc:93:b2:7b:14:ba:4e:1c:87:aa:60:9d:
27:3d:c7:f7:2a:b9:cd:56:d2:21:91:a8:d8:a1:3a:95:07:b7:
02:44:0f:1b:70:48:9d:71:54:e6:b7:fe:b6:12:74:d5:ed:e5:
1d:40:42:3a:92:0f:cc:d7:21:cd:49:97:ce:a2:67:7d:e0:53:
53:8a:a6:16:cf:d1:92:b9:67:6e:2a:26:f3:1d:0f:7f:a9:33:
48:a1:6d:da:30:ba:14:d8:c7:bc:c0:f8:e8:8f:1e:80:50:7e:
c0:87:87:24:6d:5c:ed:e9:86:eb:46:d4:61:3e:b9:8c:8b:47:
d7:62:91:ff:05:30:50:17:0b:ef:81:2c:af:fb:85:7f:8c:15:
fa:65:fe:51:5a:39:1f:9f:e2:27:94:06:06:54:be:4e:b2:5a:
33:a2:fc:48:a0:08:2e:2b:8c:75:83:7d:1f:20:81:1c:3a:9c:
71:7c:68:0a:81:ca:61:6c:6f:a1:24:84:c4:78:ff:16:4c:82:
58:46:36:f7:e8:e1:fb:41:9e:1c:bf:98:5b:dc:58:4a:d4:f4:
10:84:25:3f:58:14:fe:59:a3:04:bd:fe:6a:3f:5d:88:7d:27:
0b:35:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org