Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xvVDGOPc2-5hBrgT2veNl5kW2VQ.roa
File: xvVDGOPc2-5hBrgT2veNl5kW2VQ.roa (raw, json)
Hash identifier: eFoaCiEZ5h4fZ2jteMbwmGA4o7kQ/xbFizAf3Xau8iw=
Subject key identifier: C6:F5:43:18:E3:DC:DB:EE:61:06:B8:13:DA:F7:8D:97:99:16:D9:54
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 010E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xvVDGOPc2-5hBrgT2veNl5kW2VQ.roa
Signing time: Sat 01 Jan 2022 01:31:19 +0000
ROA not before: Sat 01 Jan 2022 01:31:19 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:19 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=C6F54318E3DCDBEE6106B813DAF78D979916D954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:72:f6:3e:6a:b9:11:4c:36:35:f4:8b:3f:
77:f1:c2:bf:bb:9b:e4:bc:bc:79:16:9d:f5:7a:e8:
34:06:04:f3:de:89:60:88:84:1b:6f:e7:04:2e:0c:
7b:9f:2a:3e:77:6f:1e:56:ff:96:3d:33:5c:c0:d8:
b6:c7:d5:55:1c:52:00:c5:c6:80:2d:ef:ce:07:65:
32:89:c1:00:9d:62:86:a4:1b:f3:18:6a:d2:00:75:
f0:a9:b5:a6:88:c4:99:ff:e0:24:56:f7:b6:13:a7:
6d:32:e3:27:28:aa:e6:23:46:57:0d:63:a0:f3:f9:
1f:be:3b:81:dc:40:2f:6f:7d:fb:3f:07:c9:89:a6:
93:7e:ca:39:88:2b:6d:0f:dc:e6:80:e9:0b:5b:82:
4e:fe:bc:8d:8f:06:2e:54:ae:9c:88:1a:9e:33:cf:
6f:78:93:72:a2:45:23:1c:9a:44:4c:8d:e2:be:5e:
b0:9c:c7:96:58:4c:79:da:a8:75:d3:d4:c9:89:4f:
1b:b2:f5:88:e0:15:99:9f:ef:7f:43:f5:41:80:e9:
f5:ca:2c:1b:ad:cf:c2:ab:00:aa:25:0a:9f:ab:83:
ef:55:41:dc:98:45:b9:18:38:20:c3:96:ae:70:07:
5f:03:59:71:d8:eb:00:7f:69:b6:d0:94:d6:08:7e:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:43:18:E3:DC:DB:EE:61:06:B8:13:DA:F7:8D:97:99:16:D9:54
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xvVDGOPc2-5hBrgT2veNl5kW2VQ.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:eb:d2:9a:92:15:ea:bc:6c:fb:c3:a5:13:45:83:60:cf:01:
40:e6:9b:93:7c:4b:8b:d8:bf:18:03:ba:bd:8b:c2:d1:e5:f0:
c2:e8:50:de:dc:e4:4e:9c:c1:dc:ab:50:cc:41:02:92:00:2c:
df:d3:26:b4:fd:53:a7:02:ab:e7:81:2a:92:ba:05:41:03:90:
3c:7d:6e:1e:67:d5:f7:04:20:d2:22:7d:71:00:d1:8f:a6:6c:
57:d3:b1:6c:13:10:99:5a:08:82:af:4c:14:96:c4:62:f3:d8:
94:ea:81:20:4b:bf:7a:97:1d:61:10:85:99:e1:f6:02:97:11:
84:34:4d:af:31:22:e4:cd:be:af:40:c4:57:60:af:5b:71:4a:
d4:83:32:6c:1a:97:74:e4:0c:0f:79:19:8e:29:bf:d6:5a:89:
aa:4e:d6:f7:a7:1a:b5:ab:36:af:9c:51:fa:27:34:72:d0:b7:
71:c6:78:cb:9b:04:ee:20:f4:86:da:3e:d6:8b:20:df:ad:fe:
69:6d:42:7c:5b:51:ac:6d:50:90:34:29:3c:f0:13:c4:29:c0:
9a:60:2a:4d:f0:71:d6:be:77:aa:88:6c:32:74:ac:d0:71:db:
3b:23:1b:1b:a8:3a:23:79:ef:83:54:6f:df:5b:50:ac:05:57:
7f:04:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org