Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q5lmAM2G8ssarBop1E9SwUWduKs.roa
File: Q5lmAM2G8ssarBop1E9SwUWduKs.roa (raw, json)
Hash identifier: ZGzs0ic+2xf6iENE6gZArLdlEyk4/WQ4DPVuQyRFHm8=
Subject key identifier: 43:99:66:00:CD:86:F2:CB:1A:AC:1A:29:D4:4F:52:C1:45:9D:B8:AB
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 5A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q5lmAM2G8ssarBop1E9SwUWduKs.roa
Signing time: Mon 01 Nov 2021 01:28:31 +0000
ROA not before: Mon 01 Nov 2021 01:28:31 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 121.200.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:31 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=43996600CD86F2CB1AAC1A29D44F52C1459DB8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:e3:1b:99:a8:43:df:61:72:b0:4e:76:d1:
1b:82:3f:ce:af:19:42:4b:01:89:53:34:2c:76:a2:
96:fe:d9:87:f8:51:33:6a:21:61:c7:1b:45:68:9b:
0c:a7:15:7c:a5:ee:db:75:25:18:1e:ae:68:e0:84:
53:ae:12:94:dc:98:f2:a2:9e:18:ee:91:b6:40:88:
08:b1:f3:39:5f:cd:fb:98:dd:ce:30:2b:a1:64:d5:
9a:de:9f:6b:e9:50:dc:53:67:91:e1:dc:69:3c:26:
fa:40:9e:af:84:08:b2:ba:17:c5:b9:36:fe:53:24:
72:c9:27:c4:eb:f4:82:d6:1a:24:0a:33:17:bd:1e:
57:27:4f:5a:c3:fe:5c:07:11:47:67:ad:97:c9:78:
b3:14:18:4e:6c:8d:7a:98:df:24:fa:f9:a9:c7:6d:
a9:48:b1:f1:07:c5:75:7f:f1:b2:97:7d:67:d6:59:
fa:ad:53:62:2f:f4:a0:ea:b9:fb:8e:b4:da:6d:b4:
1c:08:c8:d7:05:39:1d:92:57:12:c3:19:3c:94:e0:
80:a6:60:25:a4:c5:9b:e4:8c:7a:d3:c9:6f:a7:25:
c9:3b:e7:6a:21:ea:12:3e:3d:89:1c:37:62:3c:41:
61:92:a3:f8:8a:79:9b:a1:5b:d5:4f:6a:31:a9:fc:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:66:00:CD:86:F2:CB:1A:AC:1A:29:D4:4F:52:C1:45:9D:B8:AB
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q5lmAM2G8ssarBop1E9SwUWduKs.roa
sbgp-ipAddrBlock: critical
IPv4:
121.200.200.0/21
Signature Algorithm: sha256WithRSAEncryption
66:88:9c:64:ae:72:a0:2d:c0:c7:38:3d:26:cf:bd:24:de:3f:
d4:87:6b:27:22:97:9e:d6:7c:b6:0b:5e:0f:1e:37:b3:ff:e6:
5d:b8:92:9d:2a:18:b8:5b:5a:aa:6e:dd:df:66:ee:13:1b:22:
e9:e3:59:c4:80:40:ef:07:47:ab:04:9f:ff:9e:40:10:15:0c:
2a:a5:e6:10:86:05:05:3c:25:ee:10:ea:00:02:24:c8:72:ff:
ac:e3:cd:5e:d6:3e:c0:d8:9c:24:ae:f2:26:a4:7c:58:18:54:
4a:6d:eb:a3:28:08:7d:4c:e6:2a:95:a6:fc:f6:8a:d8:83:a8:
39:9e:cd:ab:b1:3d:01:68:82:1e:e0:bc:d7:7e:b8:0b:a9:7a:
52:67:fd:d0:c4:db:d5:05:d4:00:6a:58:03:48:b3:f9:42:d2:
f1:f7:82:d6:07:a7:dc:6e:67:12:97:83:ce:78:62:49:e3:cd:
6e:99:11:76:66:e0:d8:ce:f4:7f:d7:57:80:fa:85:de:44:42:
b5:dd:c9:b6:86:3d:f2:98:93:98:51:25:a8:f3:8c:d3:9a:17:
b6:eb:71:f3:07:9c:8f:cd:4e:c3:2d:6b:f1:89:06:f6:6d:ad:
cf:b4:80:db:5c:f7:1a:c6:64:c9:6e:12:3d:95:f9:5f:ff:1b:
1c:45:57:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org