Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/p1YxUPFK0CAFZONTDkQH8PQVu14.roa
File: p1YxUPFK0CAFZONTDkQH8PQVu14.roa (raw, json)
Hash identifier: wEGrLT2xt8OWf+S3lzqe/wPYn9q7vc1q9TToO4/4G3U=
Subject key identifier: A7:56:31:50:F1:4A:D0:20:05:64:E3:53:0E:44:07:F0:F4:15:BB:5E
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 2E
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p1YxUPFK0CAFZONTDkQH8PQVu14.roa
Signing time: Mon 01 Nov 2021 01:28:28 +0000
ROA not before: Mon 01 Nov 2021 01:28:28 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 157.65.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Nov 1 01:28:28 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=A7563150F14AD0200564E3530E4407F0F415BB5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:4a:13:dd:9d:56:e5:b9:09:68:92:71:49:
bc:0d:33:a3:c0:ca:3c:22:f4:50:7a:b9:b8:66:5f:
9c:2b:34:eb:7a:ef:53:f8:96:e4:a9:55:0a:5e:f1:
cb:0c:36:0b:86:db:3b:7e:03:24:32:46:b1:b2:b7:
98:b9:51:93:0d:df:6b:dd:08:2f:66:54:56:b6:f8:
aa:fe:53:02:ef:e9:c4:78:66:14:a0:d7:0b:a4:96:
fd:c3:1d:6c:ce:51:ea:6c:a5:73:8c:d7:b5:f2:a3:
1e:82:25:3f:12:dd:06:fb:be:5d:06:2a:45:5a:c9:
9d:68:c8:a7:cf:67:8d:34:af:38:d8:6e:9c:62:8b:
06:2d:64:0d:bb:ae:71:cf:8f:b1:a1:0f:5d:49:e7:
97:be:ec:a3:c8:09:67:19:fe:4b:cb:42:89:cd:52:
b4:87:4e:a2:d2:59:1f:4f:9c:c1:b2:03:60:66:04:
6d:b1:e6:77:bd:73:c4:93:f0:7d:3e:a1:44:f6:b3:
66:73:ed:d9:39:bb:77:56:b0:38:8e:70:95:b3:13:
10:e8:29:04:33:d5:60:0f:49:d3:40:9d:92:cb:af:
9b:01:3f:34:1d:32:26:af:25:cf:81:b0:f9:9c:29:
dc:a6:3d:1d:7d:bf:bb:71:8f:c8:68:72:80:24:7c:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:31:50:F1:4A:D0:20:05:64:E3:53:0E:44:07:F0:F4:15:BB:5E
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p1YxUPFK0CAFZONTDkQH8PQVu14.roa
sbgp-ipAddrBlock: critical
IPv4:
157.65.8.0/21
Signature Algorithm: sha256WithRSAEncryption
06:6c:d8:62:88:1a:c1:8b:6a:97:7e:9c:18:5f:dc:d7:81:49:
73:10:76:3b:bd:ad:50:55:d8:f8:dd:10:89:c7:38:b8:73:60:
1d:28:c6:9a:38:c2:67:96:e5:db:ea:cf:56:94:35:d5:d0:62:
47:d3:da:0f:4c:a9:c1:eb:29:2b:69:dc:03:92:d6:ef:81:5d:
3f:0c:e3:0b:70:9e:7f:1f:d5:54:95:8f:e1:04:7d:e3:38:f3:
6a:bc:08:ad:ee:5f:40:35:3c:49:b2:4b:fa:4b:7e:f5:7f:23:
c5:ff:70:ef:6e:ad:08:43:bb:f9:b1:7c:40:82:22:22:97:22:
1f:ce:3e:d2:97:78:6d:b1:b5:38:ce:89:a7:af:0c:e9:ce:c2:
8c:9a:4d:49:15:75:df:55:83:39:27:46:74:84:2b:cf:03:ef:
c8:81:21:78:57:28:c0:d1:8b:bd:da:88:cc:24:93:08:1b:ff:
82:87:65:3a:bb:d9:39:38:70:fd:4d:fc:37:8b:d5:5f:81:ac:
67:7c:c9:dc:ff:04:ee:08:63:b4:31:07:56:0a:5a:13:a4:b6:
6e:5b:71:0d:f2:b4:3f:36:55:a4:1f:f9:58:6a:58:a7:57:fc:
81:89:e2:cc:07:bb:d2:74:cb:58:d1:7f:73:7c:69:da:ea:01:
34:9e:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org