Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/u1xO4t08yffYumXCQ3yc7WTN-dk.roa
File: u1xO4t08yffYumXCQ3yc7WTN-dk.roa (raw, json)
Hash identifier: XPCEi23Tmwk8Yu/DP82ooH2zXTS4ByyzvFIIzvbd9mg=
Subject key identifier: BB:5C:4E:E2:DD:3C:C9:F7:D8:BA:65:C2:43:7C:9C:ED:64:CD:F9:D9
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 7B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/u1xO4t08yffYumXCQ3yc7WTN-dk.roa
Signing time: Mon 01 Nov 2021 01:28:41 +0000
ROA not before: Mon 01 Nov 2021 01:28:41 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 219.126.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:41 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=BB5C4EE2DD3CC9F7D8BA65C2437C9CED64CDF9D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:40:8f:d5:b8:ca:e0:38:10:4f:ac:fe:dd:
2b:44:31:e3:44:a6:b7:21:3e:75:72:d2:98:91:03:
17:37:eb:b7:66:5c:9f:69:81:bc:42:54:59:d7:84:
91:21:13:b0:14:32:cd:bd:03:ff:08:2b:8d:10:bb:
3e:e8:01:f5:65:87:bb:c4:a3:01:60:8e:2a:2a:70:
45:5d:68:45:ad:52:74:fa:46:e6:3e:bb:58:82:46:
b7:5b:be:89:e2:4d:b7:7e:b0:ec:de:ae:fe:4b:6a:
a0:47:66:f8:4a:fc:5b:70:9f:b7:eb:5b:e6:a8:b6:
10:f0:e6:e3:09:ce:fe:af:dc:a1:88:9e:77:d8:50:
1d:58:1b:a7:8f:ba:dc:eb:fb:3d:6f:9e:e7:20:3c:
d0:65:d1:f9:87:06:39:35:fe:35:14:cb:24:5b:69:
a0:69:02:9f:07:e7:8f:84:05:10:0c:70:c5:38:1c:
28:b3:07:0b:47:38:30:d1:e7:ba:4b:3f:c5:76:03:
35:5f:ba:fa:37:b9:b9:a0:62:57:8c:8f:5d:1f:b3:
73:16:fa:c3:7b:02:a8:e1:3e:65:b3:36:b8:7d:54:
dd:4a:78:68:22:84:ef:d0:47:ac:02:5c:91:1b:76:
53:02:24:8b:ae:a3:aa:af:51:5c:7a:8d:f1:1d:91:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:4E:E2:DD:3C:C9:F7:D8:BA:65:C2:43:7C:9C:ED:64:CD:F9:D9
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/u1xO4t08yffYumXCQ3yc7WTN-dk.roa
sbgp-ipAddrBlock: critical
IPv4:
219.126.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0a:c3:a7:31:a3:02:37:7b:62:2c:22:a7:53:9e:79:7e:82:98:
ac:cc:c9:5c:8d:48:f4:f1:a2:62:45:3e:87:f3:e5:f1:e7:ed:
33:48:ee:e7:ee:58:e0:31:5b:36:dd:27:48:bb:a1:56:86:54:
3b:47:d5:a6:06:1b:47:ac:29:d1:10:83:0a:b6:a5:39:4f:97:
a4:e4:be:a1:ee:1c:dd:77:54:b0:bc:52:b0:7c:66:4f:c1:82:
7a:d4:8d:b1:43:28:e7:9d:04:a5:b6:17:fe:d6:91:df:ba:fa:
69:00:e6:1f:f4:49:58:d6:d4:82:b5:ef:68:b9:14:ec:b3:9a:
d7:3b:e1:1a:84:db:81:ca:78:65:80:5d:de:58:af:82:b1:ad:
18:13:15:c8:7a:e9:98:e5:fd:08:88:e5:36:99:2d:43:27:99:
4c:a6:0c:b3:e4:b0:a2:ff:c6:0f:42:7d:df:e8:74:67:74:6e:
1d:2c:63:0b:f6:7c:5c:0c:c6:d0:2d:aa:fc:e6:7b:dd:d7:57:
d6:77:1b:82:ad:36:4b:5a:ea:59:18:89:ba:ab:ed:5b:6e:5f:
dc:b3:7a:d9:11:47:44:f3:f2:67:de:64:b2:91:56:0e:63:66:
4d:74:e2:ee:ad:16:0e:95:ff:6e:1c:e6:24:18:cd:51:8b:c2:
02:7a:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org