Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/MvYOqB5aK9Y2ymSPFCxnq4X1gtM.roa
File: MvYOqB5aK9Y2ymSPFCxnq4X1gtM.roa (raw, json)
Hash identifier: f0uPFXoZE1P9WDqStfaSersZXxR3r3OwygIFYikRmMw=
Subject key identifier: 32:F6:0E:A8:1E:5A:2B:D6:36:CA:64:8F:14:2C:67:AB:85:F5:82:D3
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 66
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MvYOqB5aK9Y2ymSPFCxnq4X1gtM.roa
Signing time: Mon 01 Nov 2021 01:28:35 +0000
ROA not before: Mon 01 Nov 2021 01:28:35 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 220.100.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:35 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=32F60EA81E5A2BD636CA648F142C67AB85F582D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f6:06:83:e0:ce:66:97:ea:e7:f3:92:e2:9e:
5f:f3:59:9d:a7:1c:05:0c:8c:f5:81:7a:08:a9:42:
c6:b6:72:cf:9e:d0:79:64:b1:a1:5b:a1:93:3a:6e:
1f:ba:71:7c:c9:ef:ad:c0:2a:5a:10:35:45:39:f6:
4f:76:96:b2:fb:e9:15:eb:04:75:ff:7f:76:30:0a:
b0:f4:71:43:3e:76:19:da:51:1e:89:e8:8a:47:72:
64:49:11:8c:8f:03:63:76:58:be:79:50:7e:62:0c:
d8:dd:51:ab:77:8c:0a:03:99:08:97:b3:ba:9e:9b:
02:b1:46:35:96:33:2d:b4:0f:f8:fa:8a:e2:fe:f2:
e2:f1:f8:f2:d6:b2:cf:ec:fc:5b:de:eb:d2:c3:3c:
00:be:7a:b9:12:19:39:5b:fe:b0:8a:d5:c5:1c:f5:
fe:33:0d:1e:e3:c0:a1:0a:9b:50:d5:36:52:ba:9b:
a1:cc:06:5a:8d:3e:0f:78:d9:72:fa:80:11:db:04:
1c:9b:00:c1:f1:62:f7:01:a8:f6:ba:0d:db:6b:3e:
74:18:c9:38:c2:7d:53:3c:11:4d:96:2a:80:11:76:
e1:36:b4:51:e8:54:bf:9e:d9:2d:8e:f7:30:85:60:
46:a0:80:56:77:d7:38:04:e4:87:de:57:a3:4d:b6:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:0E:A8:1E:5A:2B:D6:36:CA:64:8F:14:2C:67:AB:85:F5:82:D3
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/MvYOqB5aK9Y2ymSPFCxnq4X1gtM.roa
sbgp-ipAddrBlock: critical
IPv4:
220.100.0.0/17
Signature Algorithm: sha256WithRSAEncryption
75:87:65:e7:38:d8:9a:10:cd:be:42:dd:4b:8e:b9:12:af:ee:
7f:d0:fe:71:64:4a:09:91:6f:44:84:91:92:62:59:93:bb:1d:
30:d5:30:17:f7:9f:f0:e5:ea:0c:d9:1e:96:45:a6:f0:60:47:
97:c3:99:74:de:cd:b7:fa:4f:b8:65:3e:38:a5:2b:e9:b1:bc:
5d:36:c4:25:7e:7b:7b:71:b9:47:35:a9:0f:d2:cf:f1:3d:64:
11:65:08:98:5f:8f:a1:e1:7b:c4:61:a7:85:03:f7:2f:6b:95:
90:ff:2d:89:c3:10:18:65:88:9d:a8:af:f8:ff:47:b4:a2:6f:
0a:82:c3:b4:3b:5f:9a:b3:98:26:bb:1d:43:50:21:36:97:a5:
70:5d:a2:d1:1e:cd:38:79:79:21:98:82:d2:d9:dc:f7:ef:fb:
c4:81:65:a9:5a:46:6f:93:8f:a4:45:fc:b6:64:e6:31:74:85:
c8:2c:f2:ad:41:9c:1d:4c:a5:2a:08:b8:6d:10:4a:0d:f2:7c:
01:5c:80:47:09:c5:a9:09:23:f6:64:ca:89:d3:5e:d9:b2:15:
85:1d:6c:1a:ed:ae:56:ea:84:5d:3d:15:a4:ef:5e:68:96:8e:
4a:54:a1:1d:35:e0:ad:b7:d5:22:95:16:4c:0e:2e:f8:77:3d:
08:1c:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org