Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jLZg9bNjbGspgrjDckYSuklR7Tc.roa
File: jLZg9bNjbGspgrjDckYSuklR7Tc.roa (raw, json)
Hash identifier: N1sMqDimunawJ7ETowKezCKIMyR0kKdb5W0xfmCAENA=
Subject key identifier: 8C:B6:60:F5:B3:63:6C:6B:29:82:B8:C3:72:46:12:BA:49:51:ED:37
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 8A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jLZg9bNjbGspgrjDckYSuklR7Tc.roa
Signing time: Wed 29 Dec 2021 09:18:39 +0000
ROA not before: Wed 29 Dec 2021 09:18:39 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 32787
IP address blocks: 210.130.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 29 09:18:39 2021 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=8CB660F5B3636C6B2982B8C3724612BA4951ED37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:b5:7c:84:cf:68:89:8a:e0:a3:c5:82:27:
61:2c:bc:ab:22:25:42:c2:8c:b1:29:81:28:28:dd:
48:28:49:b9:39:51:f6:1f:b2:df:ae:2e:77:be:05:
62:5f:23:01:48:27:1c:7a:ce:2c:03:e9:25:97:c3:
aa:cb:a1:50:1d:f0:40:ff:6f:70:6e:d0:50:f1:ab:
28:4d:4d:d5:cf:d9:16:63:fd:66:2f:ed:eb:df:6e:
71:46:68:4b:39:57:fb:46:b4:d0:53:75:50:b5:44:
be:8e:a5:88:0f:bb:6d:d0:a4:7d:8e:63:58:6d:f7:
0b:b3:2b:d8:29:b9:0f:ba:1f:90:cb:98:db:2a:a2:
29:ab:5b:1c:b0:2f:c7:27:58:9a:17:22:f3:5e:f8:
fe:aa:50:3d:d2:54:3a:cd:77:86:60:35:29:57:d3:
63:b8:01:51:13:e3:81:15:3c:20:d9:f9:94:78:e6:
ca:a9:ff:fb:96:f1:33:2f:86:dd:76:9a:41:ce:c5:
08:fc:61:f9:e1:16:e5:e8:c3:ea:dd:a6:a3:dc:8d:
e6:58:1a:f8:b9:b3:b3:71:a1:12:09:22:0b:aa:3e:
3a:ee:a5:40:d1:46:77:f8:8d:3c:42:08:35:72:da:
20:ed:44:65:d3:fc:47:dc:59:37:37:ff:d9:ae:1a:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:60:F5:B3:63:6C:6B:29:82:B8:C3:72:46:12:BA:49:51:ED:37
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jLZg9bNjbGspgrjDckYSuklR7Tc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.130.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:46:fb:f7:e5:11:c6:b4:2a:fe:63:0f:77:f7:ef:1e:46:60:
93:15:8a:74:16:fd:3f:40:1e:b2:25:7a:eb:43:7f:40:05:3e:
82:93:50:0a:90:d4:22:e7:91:ce:92:be:a8:50:0a:e7:c1:5c:
4a:0f:d9:cc:f0:2a:7c:c7:0b:ee:d2:c5:f0:31:1c:60:b5:be:
ff:ae:ff:09:52:da:eb:47:c9:62:46:65:3c:ec:3a:38:a4:73:
96:2c:87:52:63:79:63:92:d4:c1:cf:b2:53:cd:aa:31:3a:94:
87:6e:f3:16:0c:48:ea:0f:e6:d3:13:91:fd:7c:1d:ef:3a:5b:
08:7e:c5:e4:b1:a4:aa:a7:28:b8:32:4d:c7:54:61:db:ad:7f:
3f:4d:37:59:b3:73:37:c5:09:c4:39:c7:9c:e7:5b:e9:44:66:
4d:c5:91:9e:3c:d6:0f:65:bc:99:34:93:10:e8:4e:61:53:d6:
cc:e7:f0:6d:e8:d0:8c:ff:94:65:d2:4d:b6:30:44:bd:c3:42:
36:35:7d:66:3d:ff:c7:1f:d2:ae:cb:05:dc:88:17:1f:21:8c:
81:89:77:7f:04:ed:14:5f:83:60:02:c1:8c:78:c8:f1:d9:b1:
d5:64:3b:52:60:97:42:a4:ba:82:75:d8:34:0e:9b:0e:63:9e:
99:fe:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org