Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ED3SVYCMZ6t1rwSFs-gNjw8GzPk.roa
File: ED3SVYCMZ6t1rwSFs-gNjw8GzPk.roa (raw, json)
Hash identifier: 7UdBgUGN36hfxH+02zxftM7mstq5rd3u3+YsopFZ3ms=
Subject key identifier: 10:3D:D2:55:80:8C:67:AB:75:AF:04:85:B3:E8:0D:8F:0F:06:CC:F9
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 32
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ED3SVYCMZ6t1rwSFs-gNjw8GzPk.roa
Signing time: Mon 01 Nov 2021 01:28:29 +0000
ROA not before: Mon 01 Nov 2021 01:28:29 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 172.122.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Nov 1 01:28:29 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=103DD255808C67AB75AF0485B3E80D8F0F06CCF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:87:08:5b:b5:74:33:b3:1c:f7:d5:df:a3:
f6:3b:e4:a0:ca:5e:aa:54:03:7c:8e:10:65:e7:6d:
ef:1e:5f:1f:e6:ae:6f:13:1c:c9:82:8c:fe:c6:cf:
de:e3:9f:68:76:f3:21:6e:5b:ad:e8:70:f1:53:72:
10:94:15:b7:9e:c6:8e:84:e0:d2:41:6d:d2:06:40:
35:70:44:bf:a5:1a:01:05:38:6f:3a:f4:e1:27:59:
c7:8b:cb:5b:d5:6a:a6:94:58:67:19:a7:61:f6:94:
d0:a3:a8:3c:95:3a:f3:a1:42:0a:d5:4b:54:c6:88:
ab:c6:4a:23:f1:7a:ea:6b:9e:db:d3:ac:74:cf:3d:
72:8c:3a:80:eb:2b:71:da:df:21:81:10:c5:04:ad:
33:e9:73:57:9a:ab:0a:65:b6:d7:d7:d2:c5:ea:16:
1c:c6:52:1f:bf:99:af:2d:df:78:52:db:59:27:58:
a5:45:e0:48:3d:53:9b:a7:38:18:c6:4a:78:1e:38:
cf:d0:10:81:9f:4f:8f:a9:80:04:9c:d7:bc:c1:c2:
20:84:75:61:5b:7b:6a:aa:70:ba:15:40:69:f4:63:
43:a2:e6:77:2b:dc:5c:e0:dc:94:ea:e6:c5:c6:4f:
0e:1e:ba:dc:40:61:57:d8:21:4e:d7:10:df:a2:72:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:D2:55:80:8C:67:AB:75:AF:04:85:B3:E8:0D:8F:0F:06:CC:F9
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ED3SVYCMZ6t1rwSFs-gNjw8GzPk.roa
sbgp-ipAddrBlock: critical
IPv4:
172.122.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1f:0d:29:a2:ae:fb:4e:c5:3a:19:7a:7d:1f:91:91:82:bf:e3:
40:25:85:b4:47:bb:7e:fb:39:a4:82:b3:53:8e:22:7f:b1:9c:
23:ab:a3:04:cd:80:be:c3:89:c4:b4:d9:e6:f6:52:52:c4:31:
b6:bf:ca:48:4c:1b:c9:93:37:db:9f:ef:69:fd:a0:93:20:30:
37:7f:dd:18:e9:5d:b5:48:bf:dd:65:ac:2f:5b:7d:ea:a5:6e:
c7:00:60:00:79:1e:cb:65:fe:91:86:80:1d:10:d0:20:b3:e9:
43:1e:15:dd:fb:e5:df:34:13:4b:be:3f:81:0b:b3:bd:38:f5:
36:36:e9:ae:e1:65:bd:bc:43:04:00:d3:b0:83:fe:1f:27:01:
ae:88:21:94:16:a3:11:e2:37:71:c6:ea:81:61:63:4d:1a:36:
13:38:8d:ed:de:7d:ce:ff:2a:c1:9d:80:c9:42:54:e1:9a:47:
ea:6b:83:f4:0b:00:08:c3:65:40:b0:82:5f:e5:db:e8:3a:51:
f1:ad:31:70:a4:fe:fc:1f:a5:d7:e7:4c:28:fb:47:cc:cc:9a:
04:96:58:11:fd:df:c6:b4:31:35:95:57:a4:72:d6:8a:fe:44:
0d:e6:a5:1e:69:7d:61:38:22:8c:1a:e7:5e:ed:30:03:fb:04:
3f:38:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org