Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/K7Ejlz8lHM59UsBE6M_52Os-cuk.roa
File: K7Ejlz8lHM59UsBE6M_52Os-cuk.roa (raw, json)
Hash identifier: 70BIxRGf06PFHO7lx2vnm2XerEOVvjPMJ0AIhtx5Kao=
Subject key identifier: 2B:B1:23:97:3F:25:1C:CE:7D:52:C0:44:E8:CF:F9:D8:EB:3E:72:E9
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 54
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/K7Ejlz8lHM59UsBE6M_52Os-cuk.roa
Signing time: Mon 01 Nov 2021 01:28:27 +0000
ROA not before: Mon 01 Nov 2021 01:28:27 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 103.2.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:27 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=2BB123973F251CCE7D52C044E8CFF9D8EB3E72E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:1e:f2:cf:d7:d9:20:e3:91:cc:76:54:be:
85:72:4c:22:f4:7a:e5:a5:62:28:fe:83:dc:0a:d8:
96:5a:ce:18:9a:ae:cd:d8:21:70:5d:a8:73:dc:49:
df:19:cb:0b:39:6d:02:9e:5c:0f:75:18:1f:8f:bd:
f0:e9:14:42:49:6b:04:f5:3c:dc:fb:9e:f7:c4:93:
49:57:38:7d:65:7b:ea:05:97:7e:8b:bc:de:50:d1:
2e:86:a6:fe:c8:17:6d:a3:15:05:17:3f:1a:fe:73:
4b:30:dc:02:73:be:6f:17:5f:7f:ea:fb:fa:63:12:
c4:58:4a:b6:f0:29:4c:ac:ff:b2:20:e7:34:44:8c:
1a:78:f2:3f:b6:b5:9c:57:cc:0a:6b:b3:a8:ff:61:
7c:ab:e1:ac:81:1d:be:5b:e1:a8:e0:2c:b0:25:7c:
46:e8:66:13:fc:28:b6:81:01:55:83:9c:7b:4a:be:
8d:40:3a:9e:91:84:d8:0d:8f:0a:00:91:9a:22:54:
32:a1:3b:0d:63:13:80:45:43:ba:fb:db:0c:fa:33:
7c:de:45:11:47:fb:65:9c:f7:cc:4f:81:68:59:43:
68:1f:44:01:24:6c:be:66:89:9a:fd:71:86:c0:13:
c5:24:d0:4c:e5:ed:2c:b8:27:1b:f9:ec:fa:c1:20:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:23:97:3F:25:1C:CE:7D:52:C0:44:E8:CF:F9:D8:EB:3E:72:E9
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/K7Ejlz8lHM59UsBE6M_52Os-cuk.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.58.0/23
Signature Algorithm: sha256WithRSAEncryption
83:7e:2b:9a:b1:1a:4b:ff:20:93:c0:a7:75:40:a8:a4:0f:d9:
6f:e1:e8:79:f1:cb:23:bd:48:d4:0a:be:3f:02:79:d3:bf:fa:
57:07:33:84:9c:99:30:f4:fc:ff:6b:71:9b:f5:3a:f3:d8:4f:
96:43:2b:37:61:67:4a:af:76:53:0a:78:93:7e:2f:2f:04:4c:
96:e1:ba:41:4c:5f:cc:5d:cd:86:71:19:64:a1:41:11:31:e0:
0d:58:c5:2f:2b:9c:58:16:3f:af:9c:7c:11:bd:5f:e6:4a:4b:
76:cd:32:8a:5e:7d:56:8c:cf:58:24:4f:57:f9:2b:72:a4:b4:
76:79:66:ea:20:ca:35:fa:df:a1:7c:7d:1b:da:2a:27:00:74:
16:69:01:64:7d:6f:c7:5f:27:98:b9:9d:7b:ec:04:07:93:7f:
cc:b8:3c:bf:33:66:64:72:da:ea:bf:52:28:59:ba:fb:73:8d:
5e:ad:e3:3f:2e:1e:d6:4f:4b:15:63:7c:d3:e4:55:09:aa:7f:
0a:15:f4:8c:b5:fd:46:12:f9:4d:ff:f8:9f:56:b5:cf:6d:a0:
7e:18:76:08:d8:cd:17:70:e4:ac:9e:d5:19:ad:eb:26:6f:de:
ad:8f:45:43:48:49:33:f9:12:50:a0:2d:45:3b:58:16:50:86:
fb:67:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org