Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GagWNcbzr_onvFWnR8xTAIC70hM.roa
File: GagWNcbzr_onvFWnR8xTAIC70hM.roa (raw, json)
Hash identifier: q4muF3+SX6IWVh1ZAmrYqBz5oVC7ZucompiwIUoMbNA=
Subject key identifier: 19:A8:16:35:C6:F3:AF:FA:27:BC:55:A7:47:CC:53:00:80:BB:D2:13
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: FB
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GagWNcbzr_onvFWnR8xTAIC70hM.roa
Signing time: Sat 01 Jan 2022 01:31:13 +0000
ROA not before: Sat 01 Jan 2022 01:31:13 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:13 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=19A81635C6F3AFFA27BC55A747CC530080BBD213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:26:7e:01:f6:8c:1c:ff:56:99:fc:40:68:
ee:59:3d:4f:a7:d5:9d:5b:31:54:4f:24:23:05:c1:
43:a5:93:77:ac:47:03:87:5b:c7:83:1c:ee:43:c1:
f7:d7:e4:da:80:35:cd:d3:51:68:98:32:75:80:9c:
f6:71:57:08:f9:f8:5a:c1:6e:a7:d8:7c:2c:0a:42:
56:ee:44:e1:2b:22:7a:d4:47:65:80:af:d9:f6:a5:
fb:82:a4:54:3c:de:26:b3:52:84:cd:de:e0:cd:c1:
79:1e:97:85:a3:4a:d6:68:36:37:a7:9d:6f:59:37:
e8:21:0f:91:d6:24:35:dd:0d:fd:3d:ed:25:51:48:
5d:1c:ff:80:b1:b8:09:15:da:2c:cc:25:cc:c6:76:
b1:7f:8e:7f:b0:87:7a:6f:d1:85:db:21:c9:c5:a9:
bf:f9:cc:e4:75:32:93:8c:3f:f3:c4:d8:c7:0b:4a:
e9:04:1a:2e:5a:d9:c6:75:40:dd:d7:38:a0:fe:60:
4e:10:76:fb:35:3c:e7:24:f0:88:71:de:0f:0a:71:
6e:fb:a0:1b:fe:77:b0:81:4f:26:ce:7e:cb:d2:a1:
d0:05:30:aa:a6:ad:30:0d:83:08:e3:b2:ae:b5:82:
93:1f:0c:c9:d3:3c:cf:3d:8b:bb:d6:06:1d:b6:98:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:16:35:C6:F3:AF:FA:27:BC:55:A7:47:CC:53:00:80:BB:D2:13
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GagWNcbzr_onvFWnR8xTAIC70hM.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.116.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ed:20:36:30:6d:61:18:02:49:1b:7d:cd:1d:e9:7f:f8:e4:
0b:d8:13:bb:bb:59:c2:30:f7:e6:1f:37:31:0c:59:f1:aa:be:
bd:9e:43:bb:45:ba:94:db:6e:0c:91:e0:1c:79:1f:1f:1d:d5:
1f:51:49:02:a0:98:cc:f9:a6:37:72:df:76:4a:f2:28:7b:96:
c8:de:4f:29:65:05:e3:3f:ef:55:e2:8e:fa:03:7d:97:9a:da:
d4:39:60:d2:ae:e8:87:81:be:08:59:b8:01:a7:c7:35:9b:fc:
05:21:16:25:8f:fc:bf:cd:e4:e4:f0:f7:e1:37:e2:51:46:21:
49:4c:e3:f1:88:22:3e:23:5e:ce:c3:c2:b9:bb:ef:d2:47:c0:
7d:fb:50:f8:c6:a9:0b:a8:e6:ea:fa:1e:00:c9:46:36:23:79:
97:f7:a6:a6:f6:76:63:e9:22:d9:40:7c:7c:56:dd:a4:75:b6:
8d:cb:e9:65:ee:aa:21:95:5b:79:83:e4:79:94:8b:9c:9c:f1:
22:10:13:02:27:9e:9c:73:f0:38:8c:bb:8b:eb:c6:75:a1:fe:
cb:9b:1d:fc:1c:19:af:ab:f7:6a:b3:e5:7c:43:71:3c:53:28:
f6:5c:cf:91:3d:8b:f1:f4:49:be:ae:a1:65:c6:e2:3e:0b:cb:
e5:59:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org