Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/TydhZtejdsKFzsy2rk9saa2_lhk.roa
File: TydhZtejdsKFzsy2rk9saa2_lhk.roa (raw, json)
Hash identifier: U7Zg3hvK4gycqc0CJTaJMzuTmROgJHR4Hs9LBmefY8o=
Subject key identifier: 4F:27:61:66:D7:A3:76:C2:85:CE:CC:B6:AE:4F:6C:69:AD:BF:96:19
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 89
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TydhZtejdsKFzsy2rk9saa2_lhk.roa
Signing time: Wed 29 Dec 2021 09:18:38 +0000
ROA not before: Wed 29 Dec 2021 09:18:38 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 32787
IP address blocks: 210.130.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 29 09:18:38 2021 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=4F276166D7A376C285CECCB6AE4F6C69ADBF9619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:8d:df:76:72:e9:16:ae:84:8e:66:15:56:
1b:46:15:10:7d:e0:7a:d4:14:0d:81:83:0e:1d:3d:
24:86:6f:ae:21:ce:59:d4:95:e7:49:cf:61:a3:4d:
e4:88:e3:2c:bc:00:ca:d8:94:21:88:fd:9c:3a:24:
2a:e3:6d:1d:ac:ee:89:d6:40:ce:97:66:ea:97:0a:
a8:f7:81:c5:af:39:7c:bd:e4:3d:1c:fd:a0:24:f9:
68:b3:f3:19:c7:4b:3c:ce:c9:9d:25:9e:83:55:d3:
9c:a7:15:5b:2a:a1:a3:d7:f8:d0:08:3d:f5:8b:2e:
70:5b:25:ea:e5:4d:d4:6a:10:2b:97:bd:77:9a:87:
93:fc:a1:7a:fc:41:72:dc:a6:1d:0c:e4:13:99:d1:
2a:d0:bc:6c:fe:bb:7f:95:ae:06:2a:64:92:79:29:
62:4b:39:72:86:90:c2:14:75:7e:42:d6:3c:a5:50:
a2:63:d5:d0:bc:aa:28:ee:01:b1:7e:7e:c1:39:27:
a9:c7:8a:80:e9:c3:dc:55:27:df:86:14:50:9c:e0:
56:f8:83:a6:66:61:7a:07:27:ba:28:87:65:53:57:
4e:d0:2a:dc:43:2d:83:df:fc:7d:1e:9f:4f:7d:38:
ff:2f:96:46:cb:19:82:c0:ab:d9:fd:26:65:f4:86:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:61:66:D7:A3:76:C2:85:CE:CC:B6:AE:4F:6C:69:AD:BF:96:19
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TydhZtejdsKFzsy2rk9saa2_lhk.roa
sbgp-ipAddrBlock: critical
IPv4:
210.130.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:46:b7:cd:6a:58:b8:cd:8b:96:a9:a4:0c:4b:6a:dc:9d:07:
42:f0:bc:d0:f5:24:42:86:3d:f4:69:97:8e:c6:f7:1d:35:a5:
d0:ba:b4:db:63:da:ce:63:ab:d4:04:89:4b:da:77:e9:41:6d:
b3:64:6a:55:ad:71:9a:21:6c:9a:6b:28:45:9b:61:53:fe:75:
0f:1c:b9:9e:5d:2f:d9:62:d8:61:06:91:5d:78:1f:fd:41:25:
46:7e:96:f3:72:c0:7b:be:68:55:12:8d:ba:8a:aa:58:9e:59:
7a:c2:24:79:c2:96:41:12:58:62:87:3a:0e:ba:15:a3:dc:e6:
b8:47:08:d7:b3:2f:73:eb:08:ab:c8:f9:09:f2:93:9e:27:a7:
fe:9a:70:c3:8b:0c:d0:ce:72:dd:84:82:89:47:8f:c8:5c:2e:
5e:9e:69:fd:af:12:95:02:76:6e:9f:09:51:c0:8d:3c:58:0b:
ad:04:b2:e1:03:c7:1f:bf:07:c2:d6:9e:a0:ec:ba:a2:58:79:
0f:e7:42:be:74:8b:bb:49:7c:93:43:bb:78:b0:0d:97:ce:9b:
83:fa:35:74:78:e6:c9:3c:e1:1a:8e:19:a2:19:1f:58:d7:56:
64:50:2f:70:a7:0d:1e:e1:57:23:4d:4a:57:93:6d:1c:0d:9f:
97:b9:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org