Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WlkN4c9YwSGxHnAB4Xf7RF9KfME.roa
File: WlkN4c9YwSGxHnAB4Xf7RF9KfME.roa (raw, json)
Hash identifier: Fa1KGzc33cdCGyiGNsNIMtCGCbQNnxJKoIAFlXuMEuo=
Subject key identifier: 5A:59:0D:E1:CF:58:C1:21:B1:1E:70:01:E1:77:FB:44:5F:4A:7C:C1
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 33
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WlkN4c9YwSGxHnAB4Xf7RF9KfME.roa
Signing time: Mon 01 Nov 2021 01:28:34 +0000
ROA not before: Mon 01 Nov 2021 01:28:34 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 160.13.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Nov 1 01:28:34 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=5A590DE1CF58C121B11E7001E177FB445F4A7CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:35:41:6a:f9:0d:09:b3:44:f1:6a:2c:9d:
7b:cb:be:94:7b:29:42:85:0f:b7:d2:3b:56:c8:fb:
90:0b:67:1b:29:79:03:49:e9:98:71:6a:a1:8b:61:
2c:ae:38:98:5c:b5:f4:cb:22:a8:fa:15:f8:f6:8f:
e9:51:b2:e8:b9:d5:e4:d2:1d:ab:f2:79:90:a1:ed:
c4:c0:b4:02:e4:f5:69:2e:f4:f8:f0:32:94:af:9f:
da:ae:da:ba:ac:5d:31:3c:44:96:55:a5:ea:3a:38:
f9:88:4e:b6:20:80:db:dc:c8:a2:70:f9:98:a0:86:
4b:b5:6f:20:a2:af:ae:9b:be:f5:98:a8:d7:d9:8d:
1b:ac:7e:cb:e1:7c:c5:0c:af:54:3d:24:ab:1e:46:
ee:8f:f0:37:44:c2:51:26:65:5b:18:49:e2:20:86:
d3:d1:81:23:42:ee:a7:be:9f:b1:92:1f:4d:19:e9:
25:4d:22:f8:eb:60:08:62:53:48:3c:b8:58:4b:52:
fe:22:d6:d8:9f:f9:5e:4d:9e:db:29:00:5a:d0:0e:
79:83:77:a1:35:8e:68:94:19:2c:38:1d:96:0d:f4:
67:c2:e6:fb:6a:1f:5d:88:a2:fd:e1:de:e4:40:b9:
a1:3d:16:f7:0c:cf:4c:ce:bc:7b:de:25:7e:9b:6c:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:0D:E1:CF:58:C1:21:B1:1E:70:01:E1:77:FB:44:5F:4A:7C:C1
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WlkN4c9YwSGxHnAB4Xf7RF9KfME.roa
sbgp-ipAddrBlock: critical
IPv4:
160.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:8e:b4:8a:f1:66:d1:fc:e2:63:c1:cc:02:52:c2:8d:3d:eb:
6c:76:28:02:3a:87:e5:43:42:73:c6:1c:71:65:65:30:bb:c1:
a6:a7:fe:36:11:be:54:db:9b:32:cb:dc:02:4a:be:13:3f:93:
ec:e0:f5:d0:4b:34:2a:44:df:76:d7:c4:38:1a:3a:12:54:44:
f9:9f:3a:ac:32:b7:c8:a7:e6:e1:45:fe:29:6a:79:9d:bb:fd:
a4:fc:ab:09:b0:ae:54:aa:3b:6f:9a:bc:54:4a:c2:c4:0e:ec:
e9:0e:b5:7c:3a:d2:ae:b9:f9:ab:71:a0:ec:b0:3e:3d:18:5a:
a7:6e:eb:10:42:e2:9f:80:03:4f:43:e8:1b:a1:b7:cc:63:68:
da:18:db:fc:80:ed:e2:8e:81:62:b8:8d:15:8e:26:46:6c:60:
36:87:95:7b:f7:e8:a1:f9:5d:54:42:0d:1b:35:d7:b2:1e:7c:
8f:54:20:48:01:1b:30:6f:ed:46:9d:90:bc:62:15:77:98:dc:
f7:ac:54:d0:9b:67:c9:37:dd:86:ac:a7:af:7a:60:cc:05:be:
36:fd:04:c0:25:07:7e:4d:94:03:03:d7:2d:9d:6d:bd:a8:9b:
1a:8c:55:b2:53:a7:2e:82:74:f1:41:3c:21:a1:24:df:45:b7:
eb:48:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org