Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oGh-OFPwfUvy6Vvxfu4epLotE54.roa
File: oGh-OFPwfUvy6Vvxfu4epLotE54.roa (raw, json)
Hash identifier: O9nkePW5z32z+UYK+MzFN8U/1Q9mgtvjM9ynGhaRxGM=
Subject key identifier: A0:68:7E:38:53:F0:7D:4B:F2:E9:5B:F1:7E:EE:1E:A4:BA:2D:13:9E
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0123
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oGh-OFPwfUvy6Vvxfu4epLotE54.roa
Signing time: Sat 01 Jan 2022 01:32:08 +0000
ROA not before: Sat 01 Jan 2022 01:32:08 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:32:08 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=A0687E3853F07D4BF2E95BF17EEE1EA4BA2D139E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:0d:00:72:31:43:68:e3:9e:78:c9:0c:73:
00:f7:82:bb:76:77:de:5c:b7:cc:dd:b2:52:7d:89:
b6:c9:58:54:d4:5e:53:07:9c:72:7f:79:fa:53:a5:
cd:39:0f:ff:9b:88:3f:61:02:f0:02:fb:52:8a:0a:
eb:07:89:4c:b3:9a:17:09:05:f9:70:80:a1:63:46:
66:42:8b:02:2a:e8:e0:b0:b5:96:2d:d9:33:39:32:
0b:11:35:1a:59:6f:66:9a:c8:d8:cd:96:30:5e:d2:
53:92:17:6c:95:42:4a:96:c2:ea:2a:d1:0e:7b:15:
e6:6b:ce:47:fe:9e:f3:2f:e1:ef:bd:92:af:37:fb:
0e:be:39:5f:f2:ea:03:2f:b0:76:11:a5:b0:d6:43:
35:63:1b:83:49:cb:8c:fa:4c:3d:d4:80:c2:c6:d8:
82:51:41:07:5f:92:0c:b0:b8:20:cb:8e:64:44:a2:
47:5f:a7:7c:8c:2c:d8:3c:28:fb:49:15:b8:bb:80:
82:94:09:15:50:0f:41:b1:b5:92:7a:e5:72:7d:a9:
2e:ce:ce:a7:8e:6f:33:e8:ea:ac:37:5e:c4:6f:ce:
b1:e0:8c:06:db:d4:a3:1f:f8:bb:8f:4e:dd:8c:6c:
cb:45:ea:31:27:b1:9d:70:6d:5b:34:d1:f3:ad:0a:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:68:7E:38:53:F0:7D:4B:F2:E9:5B:F1:7E:EE:1E:A4:BA:2D:13:9E
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oGh-OFPwfUvy6Vvxfu4epLotE54.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.120.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:08:81:9f:5d:93:fa:fa:ad:cb:b5:6d:3d:35:99:a9:ae:61:
97:f3:72:25:4e:fa:29:c4:15:cc:cc:07:36:73:c2:b8:dc:9a:
a6:36:38:c9:1f:21:ee:a2:25:d0:52:b4:da:f7:a9:3a:7b:6e:
09:23:64:52:21:2c:e4:f7:82:70:a4:cb:b1:73:61:e2:e6:f8:
ec:73:19:a9:15:9d:c7:99:6a:a2:46:07:3f:ce:b0:df:ba:80:
92:b5:56:30:9a:bb:40:a8:5c:ca:00:1e:a0:82:40:9c:1d:88:
46:48:11:c6:49:95:f2:8f:80:c7:93:3c:c4:59:01:84:24:b7:
64:18:5c:58:8a:2e:ce:6e:f2:31:1f:b9:9a:cd:00:49:26:d7:
f1:5a:b6:94:5d:61:b0:a5:de:67:e2:35:f1:72:df:5f:c3:17:
63:8a:1e:ef:3b:55:a1:ee:62:c2:1a:df:52:85:7e:67:44:40:
b7:17:b3:d9:d8:9b:e2:2a:70:8c:a8:f4:e6:9d:c2:08:b7:ed:
18:bf:fc:76:13:1e:20:2e:f7:6c:15:d2:d2:f5:97:bc:4a:3d:
a9:16:11:8b:0a:00:44:c2:c5:37:ae:33:46:70:7b:d5:4b:76:
44:7d:a3:f6:8f:18:75:0e:65:c6:2d:d3:a2:a0:37:f8:71:0a:
42:14:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org