Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/oTFFTic4eGuIW7Jwi1vdMNJkP7k.roa
File: oTFFTic4eGuIW7Jwi1vdMNJkP7k.roa (raw, json)
Hash identifier: NLDYfcvOEQmKGUD/mfZoaTFF1fsTcFDhTqlcx5cDF50=
Subject key identifier: A1:31:45:4E:27:38:78:6B:88:5B:B2:70:8B:5B:DD:30:D2:64:3F:B9
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 83
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/oTFFTic4eGuIW7Jwi1vdMNJkP7k.roa
Signing time: Wed 01 Dec 2021 01:28:49 +0000
ROA not before: Wed 01 Dec 2021 01:28:49 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 2497
IP address blocks: 210.130.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Dec 1 01:28:49 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=A131454E2738786B885BB2708B5BDD30D2643FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:92:11:e6:61:67:6f:f6:4c:21:fe:d0:8d:
12:14:ea:ab:62:5d:47:c0:69:26:63:62:94:5d:62:
4d:53:40:72:11:6e:ec:2f:02:e4:91:a6:22:39:79:
7d:03:e7:b4:11:e6:3b:81:fe:81:43:72:df:75:5e:
ab:bf:4d:40:2b:25:ff:a1:ee:ee:05:0a:d9:67:4c:
fc:e6:be:cd:64:3e:5c:1d:74:77:61:e8:3c:12:03:
37:82:9d:6b:5c:3d:46:8d:78:3d:c6:75:06:13:e9:
76:05:e3:33:3c:d6:5a:49:81:e5:6e:35:14:7d:e3:
f8:c4:7d:03:ae:02:4b:14:86:76:f6:3a:af:9d:95:
2f:c2:8e:c2:5f:af:2d:a9:f8:aa:39:93:48:a3:f7:
04:87:14:74:c9:26:88:72:4d:e8:d0:a2:a7:88:69:
c3:f0:3b:b9:f8:cc:ac:6f:fc:49:34:28:dd:71:0a:
5f:5e:7c:30:70:01:da:a0:84:2b:05:16:72:42:45:
5b:5d:eb:4a:a0:35:f1:2d:11:bd:34:4f:6f:83:4e:
b5:84:3e:73:2a:30:3c:c9:da:ab:03:96:7c:e6:94:
4e:90:69:8c:fe:0a:ee:a8:d8:d4:f3:b7:42:5c:d4:
79:4d:a8:00:4d:27:9d:0c:75:3e:be:11:09:46:7c:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:45:4E:27:38:78:6B:88:5B:B2:70:8B:5B:DD:30:D2:64:3F:B9
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/oTFFTic4eGuIW7Jwi1vdMNJkP7k.roa
sbgp-ipAddrBlock: critical
IPv4:
210.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:85:a6:13:6b:b1:84:61:27:7e:51:1d:9d:73:97:4a:73:4c:
81:8c:05:da:11:33:a6:45:32:a3:59:a0:99:c9:91:af:36:79:
56:69:0a:a9:65:fe:8a:a0:c3:59:fe:10:e0:2d:e4:37:7d:21:
66:6f:0e:d5:df:63:d6:3f:47:d4:08:4f:57:50:3f:52:1f:2f:
df:15:34:1d:ef:04:02:5b:04:e2:7c:8e:36:2d:fa:39:6e:9c:
0c:75:2a:af:e1:fd:bb:5b:bb:8d:cc:d8:e2:31:9b:32:da:c9:
cf:77:c0:f2:e2:a1:e7:7f:64:8f:ce:6b:4c:bd:b0:5f:6e:74:
52:95:1e:f3:68:51:8d:00:61:6e:53:3e:9f:0f:84:eb:5a:69:
29:06:c2:c8:9b:11:f4:73:bc:f7:0f:f2:80:9c:ec:69:82:7a:
1b:51:c0:e4:8a:f2:eb:3b:1c:c4:d0:49:ac:fd:78:f9:f9:2e:
a0:73:39:91:b7:1d:ac:fa:75:e6:27:5d:0c:0e:5f:83:a2:b3:
39:7d:40:42:9a:75:16:4d:38:21:77:4b:43:e3:6c:9f:58:ab:
b6:2f:e1:8d:bf:92:3e:a5:be:a3:7e:60:76:68:5d:d5:da:4d:
4c:6f:d9:85:6a:39:0f:0f:7b:d1:10:04:1f:87:c8:98:2e:29:
5b:4c:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org