Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/bMMEQ8-GjhLwQ9AcN3dn8d0Hcq0.roa
File: bMMEQ8-GjhLwQ9AcN3dn8d0Hcq0.roa (raw, json)
Hash identifier: bnlmSXTrO2NINlJuHfoC0Z1VDXVBymqFOV8inFzRDCM=
Subject key identifier: 6C:C3:04:43:CF:86:8E:12:F0:43:D0:1C:37:77:67:F1:DD:07:72:AD
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 57
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/bMMEQ8-GjhLwQ9AcN3dn8d0Hcq0.roa
Signing time: Mon 01 Nov 2021 01:28:30 +0000
ROA not before: Mon 01 Nov 2021 01:28:30 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 219.119.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:30 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=6CC30443CF868E12F043D01C377767F1DD0772AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:de:33:1e:9d:91:b2:ef:b2:98:08:bc:91:f9:
34:02:53:da:ca:46:46:83:b8:5b:2b:8f:4e:c6:ae:
8c:5d:6a:a8:32:99:3e:42:aa:c0:d8:79:a3:15:71:
43:9c:2c:ab:31:1f:2a:93:6f:f8:05:a8:69:02:9f:
50:e3:bc:2f:2a:a4:c6:c0:fa:75:9d:8e:ec:33:d4:
18:c2:64:ae:cd:99:48:56:d6:4e:a7:6d:2b:fa:a7:
e9:61:84:dd:37:e8:f8:b9:c0:19:1e:46:ae:a8:b8:
da:58:4d:4c:c5:ff:db:dc:02:47:23:06:69:ba:93:
a7:be:28:20:80:ee:b5:7e:b4:e4:f5:d0:8b:f2:3c:
0f:72:d7:9a:80:24:7a:dc:6d:7c:40:31:f2:01:87:
6b:d3:48:b3:a6:2c:8e:37:d2:a9:c6:3c:cf:62:e3:
8d:9f:80:c9:4a:31:3c:75:66:59:d9:d4:d0:07:37:
c0:1b:f7:a1:34:41:b9:d8:5e:b6:a3:c7:ef:bc:c5:
2d:49:5b:90:29:04:6a:5e:a8:a3:2f:d4:81:c1:5c:
54:2e:25:79:72:74:55:f1:a6:b1:0a:77:9e:51:bc:
65:f7:88:22:7d:70:1a:9b:fa:2e:f6:6d:26:f4:b2:
0f:a3:60:e4:61:95:c2:de:2b:84:56:eb:a4:db:d3:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C3:04:43:CF:86:8E:12:F0:43:D0:1C:37:77:67:F1:DD:07:72:AD
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/bMMEQ8-GjhLwQ9AcN3dn8d0Hcq0.roa
sbgp-ipAddrBlock: critical
IPv4:
219.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:72:a1:fb:97:20:df:7d:2a:c6:ff:39:d7:e9:eb:96:92:db:
77:a8:d2:e5:66:f1:f0:b3:e7:4a:a7:ac:c2:7e:84:12:80:d2:
e6:d9:b6:e0:12:9a:f7:f4:5b:c1:44:76:9d:75:da:14:88:bd:
47:02:3f:06:37:1a:1e:02:b8:cd:83:69:cd:0c:38:b4:98:45:
f4:5e:bf:ec:72:56:da:04:b7:e5:57:1e:fd:4d:b6:27:8b:33:
ea:cf:a0:98:9d:ce:9e:bd:57:18:fd:c3:86:d6:3d:07:43:b1:
2c:1e:27:2c:c7:96:72:13:2b:ee:c7:8d:3e:73:ac:eb:5f:be:
8f:9c:d0:c6:b4:04:60:26:d3:d4:08:c0:10:c1:11:27:91:98:
db:34:d1:2f:28:74:9b:b3:e4:96:78:8a:70:ec:e7:d0:5f:e8:
b5:ea:6e:2b:a0:82:36:4a:8c:11:ab:ed:b5:e7:5b:8e:2f:cc:
0d:20:cb:6a:74:e1:68:e1:aa:a3:3b:0e:95:98:c7:ec:cc:5c:
bc:a8:14:09:c6:28:50:33:c8:01:f8:06:01:38:89:2f:cb:ab:
3b:48:f3:f2:65:53:2b:5d:11:6f:14:50:ef:8f:45:7d:de:b9:
a9:dd:80:32:64:4a:17:f5:43:37:a9:82:53:ed:e1:2c:07:9a:
d2:72:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org