Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gpekxIkocWSFZAJ6NzXoqff_Kr8.roa
File: gpekxIkocWSFZAJ6NzXoqff_Kr8.roa (raw, json)
Hash identifier: /BeVHYMRZF6qU9fdubwIMqd4ULx9ALadVtYXlVLAY+Y=
Subject key identifier: 82:97:A4:C4:89:28:71:64:85:64:02:7A:37:35:E8:A9:F7:FF:2A:BF
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 017B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gpekxIkocWSFZAJ6NzXoqff_Kr8.roa
Signing time: Thu 01 Dec 2022 01:28:34 +0000
ROA not before: Thu 01 Dec 2022 01:28:34 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 9371
IP address blocks: 210.188.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:34 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=8297A4C4892871648564027A3735E8A9F7FF2ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:d8:05:e8:5f:5d:4d:42:39:4e:58:41:57:
13:4d:d5:42:d8:12:ad:c9:53:21:c8:de:51:6e:c6:
73:c9:10:fb:2f:a6:f6:8d:0e:b7:d8:ca:fb:c2:ac:
50:19:8c:da:e8:77:27:ef:cf:45:f0:4a:7f:42:4d:
31:be:7c:f2:75:9c:18:fd:2b:0b:3b:1d:53:3b:13:
1f:0d:ef:fb:e1:7d:77:40:df:84:bc:96:b4:7f:76:
b1:96:e0:cc:07:07:87:1e:a2:2c:a4:1f:fd:66:5b:
c9:74:1b:2a:b4:51:02:fb:65:6f:bf:1a:6e:4a:0f:
98:a4:0d:f7:7a:0f:ce:f1:d9:d3:f8:a7:d3:e4:f6:
ba:00:95:ad:79:f0:af:86:09:c6:41:42:a2:7c:a8:
d0:e4:14:ac:5c:7e:3a:64:99:0f:52:fb:26:29:e9:
53:b2:54:10:02:36:2e:24:fd:aa:13:99:72:f4:a6:
9e:c1:95:e9:df:7c:9e:37:99:19:11:7d:7d:7c:61:
f6:6f:d8:37:05:96:3a:31:a0:6d:8a:5d:90:d9:05:
86:d4:ca:16:9c:56:e7:7e:50:34:f8:64:08:3f:8a:
7a:bf:17:e9:13:c0:46:76:ae:c2:b0:d6:b9:9b:f7:
65:00:6d:b0:0b:4c:c8:5b:af:02:c0:3f:63:77:41:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:97:A4:C4:89:28:71:64:85:64:02:7A:37:35:E8:A9:F7:FF:2A:BF
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gpekxIkocWSFZAJ6NzXoqff_Kr8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.188.211.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dc:37:ba:35:ba:95:40:51:92:49:0f:39:4b:83:09:77:e6:
13:08:a4:be:70:a5:6a:f8:ee:1b:9b:06:44:7a:5d:d5:ce:1d:
84:4a:5b:3d:b4:81:cb:83:60:b0:e6:27:25:70:2e:54:da:81:
4b:a9:21:9a:73:87:69:48:4c:b4:99:b7:4d:af:aa:52:0b:cf:
e5:15:53:53:8d:9a:1b:3a:c7:c7:6c:51:9f:d3:0f:50:09:62:
04:3c:97:6d:97:67:d7:20:74:cd:2b:79:76:a3:4f:eb:a7:fc:
25:74:de:b3:b0:ca:15:97:df:e3:cc:1a:8a:04:40:b9:f7:b4:
09:87:43:fb:fa:2a:11:90:24:24:b6:5c:67:06:c0:5b:b8:96:
b8:21:97:c1:fe:6b:14:ca:67:0d:30:ac:16:eb:f6:67:3a:60:
59:de:8a:d8:c0:77:f7:c4:f8:78:d5:f8:01:52:c9:5d:f9:cb:
73:28:67:fd:23:4f:9d:19:be:bc:cd:9c:f9:df:fb:ba:20:25:
64:5c:57:30:4c:4f:57:7b:8b:dd:80:1a:31:f3:67:05:87:ea:
f7:fa:4c:1c:72:4d:87:30:80:2b:42:63:89:dd:a6:ff:e1:40:
66:39:88:00:3f:5e:5c:36:14:1d:77:1f:fe:a7:d8:fc:55:50:
ee:04:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org