Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/O_nqi3ETTOak7b2d7N-IS55zAfs.roa
File: O_nqi3ETTOak7b2d7N-IS55zAfs.roa (raw, json)
Hash identifier: ugYjwBhHrym4uD0kkX6AF1Suy5PpWN3jtF7kjVYdQZs=
Subject key identifier: 3B:F9:EA:8B:71:13:4C:E6:A4:ED:BD:9D:EC:DF:88:4B:9E:73:01:FB
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 85
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/O_nqi3ETTOak7b2d7N-IS55zAfs.roa
Signing time: Wed 01 Dec 2021 01:28:50 +0000
ROA not before: Wed 01 Dec 2021 01:28:50 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 2497
IP address blocks: 58.138.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 1 01:28:50 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=3BF9EA8B71134CE6A4EDBD9DECDF884B9E7301FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:00:27:37:98:5d:b6:82:74:93:95:a4:c4:
b2:5a:d9:72:2c:5c:8c:2f:2d:39:7d:68:b0:64:8a:
1a:8a:d3:c8:7f:62:19:37:55:d4:84:0d:c6:04:02:
76:04:16:a2:f5:d9:d4:87:19:86:cb:b3:f7:07:74:
88:a0:68:a8:66:91:53:4e:1c:a9:89:44:31:e1:74:
c9:37:2c:ef:6f:19:4e:a0:14:0d:2d:9f:e6:03:c3:
5c:e8:d9:5e:1f:70:60:70:30:c0:3e:f4:17:02:93:
4c:46:48:e5:c6:ef:ad:ae:03:fc:6d:1f:6e:c7:55:
3b:fe:bf:9b:e6:3d:19:4a:04:11:78:ae:8e:b9:db:
b3:b3:28:45:be:ba:f2:d3:63:98:cb:a7:4e:20:81:
b3:3c:0a:e3:75:1d:69:36:a1:c6:cd:d3:c7:48:bc:
b0:ce:94:4e:a9:96:6a:82:5a:d4:b1:02:5a:1a:87:
ec:69:a2:44:4d:16:fd:9b:24:84:18:43:81:be:cd:
db:87:02:71:55:62:33:cc:b6:54:00:88:ec:b4:d8:
69:cc:1e:6e:de:9d:53:48:2e:5e:88:5c:e3:27:00:
a2:00:80:6f:d1:9c:aa:d3:d3:0d:1e:8b:67:d9:ab:
ca:1b:91:bb:d4:b2:c0:e6:d8:ae:a6:51:05:a7:fa:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:EA:8B:71:13:4C:E6:A4:ED:BD:9D:EC:DF:88:4B:9E:73:01:FB
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/O_nqi3ETTOak7b2d7N-IS55zAfs.roa
sbgp-ipAddrBlock: critical
IPv4:
58.138.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a1:92:2f:c2:6f:98:80:b9:3e:d6:b3:55:d9:61:64:4a:c3:7e:
cc:b8:a6:5e:19:e2:2d:88:34:84:90:b4:f3:fe:d7:1f:86:8b:
a4:61:8f:8c:a6:7b:26:e8:95:ac:6e:1d:44:a4:23:9f:af:a6:
65:1d:fc:96:a1:28:b2:bc:e6:3a:4a:4a:f5:56:4d:45:57:8f:
6a:d0:1c:31:32:47:59:c9:5e:9f:3e:22:35:e9:d2:f3:18:fe:
51:2b:52:d3:aa:7f:09:75:bd:21:b0:b2:a3:33:04:5b:ad:f2:
ca:09:1c:c0:e5:79:98:ab:41:8d:16:d2:59:0c:39:db:ed:35:
f0:ab:df:dc:c4:0f:1c:a7:28:72:42:63:12:aa:0c:22:fe:d7:
ba:2d:16:d1:41:0a:5b:c6:33:d0:bc:2f:e6:6b:24:69:63:47:
cc:2e:a1:52:87:61:81:76:20:cb:a1:00:a7:bb:f9:f1:ea:31:
6b:b3:c0:75:19:c7:d7:5d:a7:2a:53:f2:2f:bb:3e:28:e0:2d:
e3:4a:12:e2:ab:4e:97:de:c4:76:04:52:fa:da:84:bf:39:1b:
f1:53:85:b0:9b:ec:fd:83:51:c1:71:cb:17:fd:8e:d5:24:cf:
55:34:8c:73:bd:25:09:b5:cc:ad:a4:98:6a:e5:a2:09:08:9d:
04:b8:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org