Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aYM1TGg6BBJ04WYT8UiW5NkFHas.roa
File: aYM1TGg6BBJ04WYT8UiW5NkFHas.roa (raw, json)
Hash identifier: U2zkFvd0jrYags8UVkFKW1Myo3idcpA5NGPEHO75SJw=
Subject key identifier: 69:83:35:4C:68:3A:04:12:74:E1:66:13:F1:48:96:E4:D9:05:1D:AB
Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial: 58
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aYM1TGg6BBJ04WYT8UiW5NkFHas.roa
Signing time: Tue 25 May 2021 02:31:58 +0000
ROA not before: Tue 25 May 2021 02:31:58 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 123.48.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Validity
Not Before: May 25 02:31:58 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=6983354C683A041274E16613F14896E4D9051DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:f6:ac:0c:88:3c:86:76:5b:9c:0f:68:7c:
fa:28:6a:f7:3e:d7:76:6c:98:8b:60:00:02:94:a9:
cb:40:b6:32:45:01:80:d4:bb:50:b9:d2:5f:d1:41:
48:0f:7b:3f:c8:f3:6c:fd:e7:d3:86:0f:bb:e7:88:
37:51:8c:9a:14:d8:2f:9d:7b:44:b1:30:63:cf:58:
48:da:f9:e0:53:8d:69:f9:2c:5b:03:cb:de:e7:ea:
f0:a8:76:e5:3a:bd:4d:ca:bd:76:ed:ca:0d:af:a9:
ec:5a:1f:fb:e6:59:15:67:6e:0e:da:48:ee:ab:7c:
ee:f4:f1:24:0d:68:ca:ad:57:1e:23:f6:7c:a6:0b:
ef:11:0e:d5:ff:b2:0a:8d:d8:df:a7:f1:1c:ed:e1:
a3:14:9c:60:60:54:4a:63:96:6e:44:90:f8:05:80:
eb:8b:10:73:89:8b:ee:db:97:51:c9:8f:c9:fb:e6:
94:8a:b3:c3:a5:81:4f:0b:04:6d:65:3a:aa:58:71:
6d:c7:5f:9f:4c:52:db:4a:8e:b8:46:4d:73:5a:1d:
0c:18:4d:3f:30:42:aa:ba:56:30:54:e8:29:97:f8:
97:4d:d1:5a:4d:85:57:b2:50:91:95:eb:6c:01:22:
bc:1f:ac:b6:50:50:bf:d6:ce:1c:76:15:77:8c:80:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:35:4C:68:3A:04:12:74:E1:66:13:F1:48:96:E4:D9:05:1D:AB
X509v3 Authority Key Identifier:
keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/aYM1TGg6BBJ04WYT8UiW5NkFHas.roa
sbgp-ipAddrBlock: critical
IPv4:
123.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:71:e1:09:9d:a6:ee:45:7e:06:bb:c5:7a:2c:a6:21:6c:b0:
fb:17:66:2b:b7:5c:3d:5f:bb:f9:51:ff:e6:23:be:e9:e1:df:
8c:02:ca:38:2f:86:23:16:e1:53:2a:9d:37:2b:6c:06:31:b8:
5c:1a:d5:9a:7b:98:c7:45:7c:ca:71:97:9e:7e:c1:9c:70:64:
f8:85:92:a2:76:ed:a4:13:2e:f5:6a:49:0a:c4:04:8a:21:21:
7e:a7:3d:5a:0c:4b:3a:65:3a:2e:57:a1:7f:7f:7e:54:40:c6:
09:b7:3a:bb:c1:c3:04:14:cf:f0:08:14:38:15:2f:2f:c8:80:
37:38:77:98:7f:e2:2c:02:9f:a7:bf:4a:16:21:77:e8:76:aa:
50:90:51:fe:d9:8d:15:e4:f4:38:e1:4a:be:70:c4:36:72:94:
fd:49:10:3b:e7:d2:f1:51:c5:d7:55:3f:85:d6:5c:6a:c4:73:
89:20:2a:cb:32:69:bb:67:22:82:76:7d:82:87:7c:6a:79:a1:
5c:f3:e7:49:8c:88:ee:e0:e6:97:e3:bb:3f:44:c6:a1:61:40:
29:37:22:fc:30:d8:91:db:77:a9:0c:95:d8:31:86:12:cd:c3:
d8:23:55:26:05:3b:eb:10:57:0e:aa:ad:c2:3f:4e:f8:4e:df:
a6:7d:fd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org