Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ZdVNZHr7dUcJQqBQh5D0GlNBwKc.roa
File: ZdVNZHr7dUcJQqBQh5D0GlNBwKc.roa (raw, json)
Hash identifier: UWAQnNoPuETj1tEPUgOLZQVCGJKhKzjRq9wESh2cMlo=
Subject key identifier: 65:D5:4D:64:7A:FB:75:47:09:42:A0:50:87:90:F4:1A:53:41:C0:A7
Certificate issuer: /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial: 23
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ZdVNZHr7dUcJQqBQh5D0GlNBwKc.roa
Signing time: Tue 25 May 2021 02:31:49 +0000
ROA not before: Tue 25 May 2021 02:31:49 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 55391
IP address blocks: 14.0.8.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Validity
Not Before: May 25 02:31:49 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=65D54D647AFB75470942A0508790F41A5341C0A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:ad:ab:25:10:05:3a:cb:04:04:e0:24:59:
5d:d7:2b:d3:c0:2d:94:9e:a6:6f:fe:3f:7f:1f:ec:
cf:ff:0f:71:8f:82:44:1c:ef:63:37:0e:a9:01:50:
68:d9:6d:90:b8:91:e7:e3:d0:3b:a5:d8:c8:6b:97:
3d:e0:f4:da:53:ea:af:60:97:f3:d5:5b:d3:12:7e:
87:b4:d7:85:0b:a6:88:1e:11:94:9b:a1:fa:f2:96:
dd:c7:ed:81:ef:51:f1:b9:24:9b:a7:e7:b8:a1:f1:
93:7d:bb:e8:6d:a7:31:6c:36:a9:55:21:c5:00:1c:
26:ed:59:37:59:51:f5:82:a4:64:30:1e:01:29:ee:
af:ba:3d:e0:d5:95:19:7f:15:ac:c7:95:de:89:6b:
2c:8d:2b:37:25:01:14:60:9e:d4:86:7b:99:ab:ee:
70:ae:64:9d:9e:f6:a5:73:e0:a2:b4:e1:ba:74:da:
49:10:75:7c:7d:69:cb:68:6f:95:fb:01:04:33:b3:
7c:17:4d:4e:cc:99:f0:cd:ae:a1:e3:21:7e:2a:eb:
ab:18:94:b7:f9:23:19:6e:e8:68:bb:d6:b4:51:cb:
d4:26:1d:04:d4:9b:7e:05:84:4e:04:70:73:f2:1f:
c1:b8:97:7f:ce:2b:a1:3a:c7:d0:a8:08:20:c8:6f:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D5:4D:64:7A:FB:75:47:09:42:A0:50:87:90:F4:1A:53:41:C0:A7
X509v3 Authority Key Identifier:
keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ZdVNZHr7dUcJQqBQh5D0GlNBwKc.roa
sbgp-ipAddrBlock: critical
IPv4:
14.0.8.0/22
Signature Algorithm: sha256WithRSAEncryption
81:e6:e2:c2:21:bc:a2:59:62:25:01:15:14:82:e2:28:bc:c1:
ff:82:d1:58:0a:55:85:d4:fb:02:9c:10:7c:8a:2a:be:b1:14:
24:87:28:a7:f3:d6:81:b5:71:07:46:c5:d2:15:49:22:7e:e5:
90:06:06:e8:37:62:16:70:95:fa:40:34:d2:36:b1:82:92:4f:
89:7d:c5:3e:f1:f0:37:ee:70:85:93:2c:b9:c4:aa:40:17:a7:
fa:cc:4e:db:dc:96:62:77:1f:a4:ff:a2:c8:81:a0:59:b7:0a:
d4:43:1d:96:88:a1:9d:7f:7d:1e:99:59:26:0d:e1:c4:42:5c:
7a:c9:f0:00:6e:60:f2:10:c1:f0:9e:6a:5b:ec:29:00:cd:73:
6d:04:65:53:e7:1a:b6:a4:b5:d3:62:9b:42:c6:e5:ec:c3:a2:
3a:d1:c2:2e:8e:3e:76:78:9c:37:74:3d:fa:b6:d1:f9:d6:e0:
14:f4:10:17:25:ac:23:65:67:ae:cc:72:a1:5f:a9:13:a1:95:
5a:45:7b:a7:e5:42:47:f5:fc:a3:27:9d:7a:99:04:cc:9c:bf:
b9:f3:95:3a:35:4e:ce:e0:f8:7d:a5:d8:2a:b5:32:5c:d0:cf:
57:3e:87:ab:17:7c:62:a7:4b:51:6c:ac:58:3c:d4:3b:35:bd:
4c:cd:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org