Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/2g7wIa8u1Sgi7sBqrvtRstWlni0.roa
File: 2g7wIa8u1Sgi7sBqrvtRstWlni0.roa (raw, json)
Hash identifier: 3LAJq8E+ZrzBnWGZPKgomDHwYR0dzEW1M8UtExsD5p4=
Subject key identifier: DA:0E:F0:21:AF:2E:D5:28:22:EE:C0:6A:AE:FB:51:B2:D5:A5:9E:2D
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 56
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/2g7wIa8u1Sgi7sBqrvtRstWlni0.roa
Signing time: Mon 01 Nov 2021 01:28:29 +0000
ROA not before: Mon 01 Nov 2021 01:28:29 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 202.48.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:29 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=DA0EF021AF2ED52822EEC06AAEFB51B2D5A59E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:44:36:c3:66:b3:5e:4d:f9:1c:c6:9b:8b:
4a:a3:38:45:d1:33:a3:bc:e0:0c:39:bd:c6:de:fa:
c9:4e:1e:34:43:e2:3e:88:f6:51:f2:56:86:3a:24:
1b:7b:76:b2:d9:70:3e:27:d1:89:6b:5c:ed:cd:dc:
8d:0e:ad:14:14:e4:5b:a4:28:11:71:f2:50:14:be:
dc:e8:72:57:74:b1:7c:69:db:71:24:5c:2c:d5:69:
3f:8f:85:ed:22:66:96:67:01:7d:01:ae:db:97:84:
58:94:60:ca:51:cf:0a:90:a0:9d:4f:f3:c1:67:c2:
94:e5:05:20:3b:c8:3c:55:39:d7:de:f0:0b:aa:ee:
01:a2:6a:9b:94:3e:6e:be:b7:75:0a:ed:d6:61:20:
c1:1f:db:ba:71:c0:ce:a8:fe:98:93:0f:cd:7e:5a:
b4:65:06:26:5a:40:ac:4c:67:06:a2:9d:4f:14:bf:
df:18:2f:73:37:2c:70:e3:0e:92:0d:ae:65:9e:4e:
7b:91:22:49:76:a9:00:61:dd:33:9f:ea:db:3f:d4:
58:97:31:ee:09:96:ac:ba:5f:fa:e6:47:13:16:93:
fb:8b:41:46:a0:92:ae:d4:ed:a5:d9:0b:fd:1b:c5:
81:ed:a9:c0:0a:e2:a2:9d:c5:27:59:ef:0d:0d:f6:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0E:F0:21:AF:2E:D5:28:22:EE:C0:6A:AE:FB:51:B2:D5:A5:9E:2D
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/2g7wIa8u1Sgi7sBqrvtRstWlni0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.48.108.0/23
Signature Algorithm: sha256WithRSAEncryption
24:f4:d9:49:77:72:eb:42:a5:49:1f:7e:31:73:03:9a:0a:44:
a5:82:29:40:2b:ad:5d:15:05:7f:96:db:92:3b:d2:3c:87:35:
5c:67:fb:62:c5:ae:62:ed:1d:53:c8:94:81:17:42:35:8b:79:
7d:cb:a6:4e:57:45:e7:32:cd:b1:de:b6:45:85:8c:56:12:52:
21:04:1f:24:b7:b1:4e:70:48:1f:4b:28:f4:d4:ac:ae:3e:42:
f5:05:60:4a:c0:40:cb:62:5c:92:e8:d9:9a:21:61:11:95:67:
21:b0:61:2c:e1:0a:d3:d5:cf:c2:a4:0e:7b:55:06:33:32:64:
c1:be:4b:06:1d:df:bc:b6:4f:5c:30:18:fa:e0:70:af:41:f7:
2d:dd:af:ac:0b:68:ac:c4:b7:0e:d1:c5:25:87:d6:1a:c8:24:
2f:1b:41:50:e4:fe:4a:c0:72:38:57:6c:70:0b:2d:b8:25:ec:
bf:6c:c5:68:1a:f5:5d:05:da:13:2f:66:ea:76:9b:c9:62:d9:
aa:b6:77:c4:9c:8f:7e:53:fa:74:8f:5b:a5:34:06:ed:ab:44:
c9:fa:ce:d7:be:1f:37:03:a6:e3:b6:83:90:b3:49:3d:db:7f:
df:1b:21:cb:e8:3d:5b:5d:66:a7:69:31:41:47:94:bb:ce:1b:
d1:7a:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org