Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/UNIrkCT7jm5mXki2vJDMs61x8d0.roa
File: UNIrkCT7jm5mXki2vJDMs61x8d0.roa (raw, json)
Hash identifier: 9REPMV/hVo2M5FyLQv2MP87uRX6MaCz9sgCRr6ia6hk=
Subject key identifier: 50:D2:2B:90:24:FB:8E:6E:66:5E:48:B6:BC:90:CC:B3:AD:71:F1:DD
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: F6
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/UNIrkCT7jm5mXki2vJDMs61x8d0.roa
Signing time: Wed 01 Dec 2021 01:28:48 +0000
ROA not before: Wed 01 Dec 2021 01:28:48 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 55897
IP address blocks: 219.111.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:48 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=50D22B9024FB8E6E665E48B6BC90CCB3AD71F1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:fa:40:2b:eb:3c:ad:23:27:bd:f2:45:fa:
51:bd:7b:a6:aa:ed:53:07:b7:29:70:e3:ef:eb:6f:
46:90:a4:70:ce:a5:e6:02:fe:96:9f:8a:0e:b7:6a:
cd:26:4f:18:25:3d:00:bb:8b:fc:60:28:34:fb:cd:
8f:c2:e2:66:65:24:24:df:bf:33:8d:39:8b:19:20:
df:9e:50:9b:1f:51:4e:f2:ed:93:10:55:44:54:66:
5a:67:47:85:47:87:9d:cd:ce:8c:6a:e2:a3:72:29:
da:28:55:19:64:20:c3:d8:ad:3f:2e:ab:39:98:94:
4f:53:2b:1d:6e:76:11:76:de:7c:32:55:ae:9e:28:
ad:6b:a3:8d:9d:2c:f9:ff:18:0c:ea:02:e7:a4:66:
8d:64:6d:64:75:ea:80:6b:fa:2c:13:be:74:25:d5:
dc:cc:3c:b4:2c:07:2e:e8:de:40:ba:66:ce:18:39:
a2:e4:d1:b5:4f:06:cc:00:9b:c7:6d:51:d3:25:d9:
5a:e9:0c:7f:82:d7:97:4c:24:b3:60:a1:0c:4a:2b:
45:fe:64:94:1d:01:b1:31:ab:5c:fe:7b:bf:0e:11:
57:c1:50:3d:c2:c7:79:ef:e1:97:c8:8f:15:5c:1c:
8a:12:a6:c9:07:65:6d:41:7b:3a:fd:b2:d1:13:67:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:2B:90:24:FB:8E:6E:66:5E:48:B6:BC:90:CC:B3:AD:71:F1:DD
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/UNIrkCT7jm5mXki2vJDMs61x8d0.roa
sbgp-ipAddrBlock: critical
IPv4:
219.111.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:32:82:fa:9c:fa:4b:09:4b:f4:e8:ed:c0:4b:12:52:a8:8e:
a7:15:fd:4b:e9:e5:26:25:e2:38:d8:bd:63:f8:98:b2:10:0d:
53:e3:2f:17:ca:ce:64:cb:6f:88:cb:98:f9:c9:79:be:53:06:
58:bc:b7:12:e2:4d:f9:cb:88:1a:1c:b8:a4:18:e7:33:3e:d4:
12:6a:b2:42:b4:29:ab:c9:e1:af:72:6b:e3:38:b2:11:69:ac:
c2:7c:a7:69:59:ee:61:71:be:ef:69:14:3d:e0:80:b5:d4:50:
83:5b:af:64:52:91:9a:13:59:17:ea:75:45:99:55:26:97:b2:
89:d8:dd:6b:9f:d9:7d:a6:c5:b6:f2:73:06:c4:e1:fd:39:43:
c8:26:67:b2:03:dc:26:31:06:2f:78:62:1e:b2:c3:59:c6:cf:
52:b5:4b:95:13:6b:53:9f:83:34:79:cd:55:7a:dd:1d:89:9e:
83:8c:c3:22:78:4f:52:39:da:e3:55:3c:8e:5b:e4:04:42:d2:
93:75:64:cb:3a:e3:9a:a8:4a:54:17:4a:0a:c4:ec:fa:06:aa:
4f:a6:f3:e0:ca:77:66:fd:c8:05:bd:db:7e:c9:89:42:64:eb:
69:b5:f6:2d:95:3a:9c:67:c1:16:d6:be:95:8b:fc:d7:54:58:
88:6a:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:55 2025 by rpki-client