Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ygkznlr7eTMUGUJNF9OY0UytDOc.roa
File: ygkznlr7eTMUGUJNF9OY0UytDOc.roa (raw, json)
Hash identifier: Cses5xJ5nriIVi5Fu82D5h9pcSkOqoOpu1/gFgJ0Xw0=
Subject key identifier: CA:09:33:9E:5A:FB:79:33:14:19:42:4D:17:D3:98:D1:4C:AD:0C:E7
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 79
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ygkznlr7eTMUGUJNF9OY0UytDOc.roa
Signing time: Mon 01 Nov 2021 01:28:40 +0000
ROA not before: Mon 01 Nov 2021 01:28:40 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 210.149.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:40 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=CA09339E5AFB79331419424D17D398D14CAD0CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:07:f9:09:da:44:f6:d7:92:e7:0b:a7:71:
49:a5:30:c5:93:93:6e:3e:b4:71:52:68:fe:81:c4:
b9:c8:da:c3:c3:7c:5a:e5:a3:33:b6:80:cc:43:7e:
63:50:fa:b3:f3:6a:b2:74:6c:94:7c:07:96:6c:d7:
3c:97:3b:e2:0a:90:65:3a:3a:9a:b7:e2:e8:0c:e3:
a9:de:83:51:e2:b4:3e:55:cd:93:9f:57:fa:2c:c8:
2a:0a:6c:10:6c:de:fe:06:0c:0d:7d:f7:e0:c2:94:
cc:d2:b6:90:8c:e1:97:e0:d1:88:fc:d5:3b:c9:f2:
a3:aa:07:2d:f0:c3:07:a0:1e:f9:ec:fe:4f:d7:4f:
3f:cb:d6:41:a1:44:11:b3:f1:e4:2a:4e:9f:51:cc:
ab:c2:56:fa:67:c4:ea:5a:31:bc:ec:45:29:7b:26:
14:07:0b:7c:92:0f:f5:dc:dc:e6:43:18:5f:36:93:
18:76:f5:ad:97:af:ad:63:66:95:49:7f:d6:1f:ee:
3b:10:a0:60:b6:21:fe:b2:9e:0b:2a:1d:42:86:54:
2b:0f:eb:41:91:b6:98:8c:b0:56:e6:e2:16:ca:65:
9f:ad:5f:ac:0a:41:1f:99:a5:7e:20:69:54:ee:06:
a2:99:d5:5b:68:6d:0d:01:ec:36:08:44:0d:d6:c2:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:33:9E:5A:FB:79:33:14:19:42:4D:17:D3:98:D1:4C:AD:0C:E7
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ygkznlr7eTMUGUJNF9OY0UytDOc.roa
sbgp-ipAddrBlock: critical
IPv4:
210.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:83:20:0b:98:6c:3d:f5:9f:ef:bf:d2:28:42:0b:97:77:e8:
9e:8f:83:b1:7e:9f:3b:bf:ca:96:d1:cd:a1:4b:b6:06:38:cb:
d2:b5:d1:ea:77:42:3a:0d:05:58:2f:eb:58:8f:c5:16:25:0c:
b1:4d:6c:89:a0:30:81:9d:8a:7b:4d:c6:50:28:b9:9f:bb:2b:
af:1a:3b:61:66:f5:e3:6d:f9:d6:b3:7d:89:9e:29:e4:37:a6:
5a:62:a9:dc:f8:79:5f:20:31:24:16:53:61:e2:20:2d:97:38:
5f:11:5e:a1:fd:bf:c1:e7:25:7f:65:cb:8f:76:02:74:84:19:
95:a1:10:5e:41:b8:b6:c9:bc:b1:76:6e:9d:30:35:cd:a4:1a:
b3:b9:c8:5c:e6:e2:d3:0c:ca:83:09:67:aa:9a:27:bd:05:d0:
55:d7:89:1d:b1:23:1c:c3:02:6e:06:a0:b3:2e:f3:b8:9b:6c:
61:c1:af:0f:54:47:61:83:e2:f5:0c:bd:ad:30:5f:33:a8:10:
4d:2d:e7:92:2e:b3:b9:13:09:84:fb:f4:6f:b6:98:2c:fc:ac:
11:15:5a:9e:99:b0:64:0e:fb:e6:7a:c5:d8:48:da:12:58:95:
d1:84:63:19:76:0a:e9:5b:9c:87:f2:24:75:b5:0c:58:c8:5d:
7e:33:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org