Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/1jtqfX9iG3_DX9EMf_KgDHXJpSU.roa
File: 1jtqfX9iG3_DX9EMf_KgDHXJpSU.roa (raw, json)
Hash identifier: UNrQItP4UqMuraiq/CkqQ7PGF5dNLj5mIDYiNiOwyjE=
Subject key identifier: D6:3B:6A:7D:7F:62:1B:7F:C3:5F:D1:0C:7F:F2:A0:0C:75:C9:A5:25
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 10
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/1jtqfX9iG3_DX9EMf_KgDHXJpSU.roa
Signing time: Fri 30 Jul 2021 09:52:08 +0000
ROA not before: Fri 30 Jul 2021 09:52:08 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jul 30 09:52:08 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=D63B6A7D7F621B7FC35FD10C7FF2A00C75C9A525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:13:75:08:32:3c:22:39:48:9c:a3:37:ee:
73:62:31:b3:ee:04:78:37:a4:9b:99:94:df:1a:1d:
3d:49:7f:0b:f9:85:f5:86:cb:9c:58:b4:a6:a4:b7:
e3:db:94:54:bd:54:da:22:5e:44:99:55:4e:d1:1a:
a7:7f:12:f4:52:35:6e:15:41:33:95:a0:8e:5f:6f:
58:5c:9f:e6:a6:fa:8d:6f:51:0e:87:ea:02:ec:11:
d6:3e:93:7e:cb:a0:5a:27:42:9d:ba:da:20:0b:2d:
9c:b1:71:44:d2:cf:60:e6:be:d0:6f:98:c2:b9:12:
40:0f:3a:2d:f3:4e:ca:94:27:49:97:1f:07:7f:74:
92:28:71:0a:0e:af:8a:46:68:a3:88:87:31:8b:35:
b9:7f:60:12:4f:c3:43:9f:77:c2:5e:16:3f:b7:37:
f0:9b:2b:e5:d2:61:79:ac:85:38:d2:fc:0b:b2:d0:
b4:71:63:e3:02:4d:e1:7b:ac:ca:b5:63:23:16:ee:
c8:97:9a:98:20:b0:5c:d4:dd:05:25:09:6b:cd:a1:
b2:6e:d7:de:ee:fd:cf:55:50:6c:09:25:14:13:d4:
5b:d5:45:f1:ab:41:7b:5d:dd:72:8b:93:5d:57:20:
aa:6d:fd:0b:6f:8d:f3:2c:ce:0c:dc:6a:f0:55:88:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:6A:7D:7F:62:1B:7F:C3:5F:D1:0C:7F:F2:A0:0C:75:C9:A5:25
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/1jtqfX9iG3_DX9EMf_KgDHXJpSU.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.32.0/20
Signature Algorithm: sha256WithRSAEncryption
d6:34:93:50:58:85:2f:74:56:ea:1c:5c:23:9c:5e:96:e0:36:
bf:d0:f8:91:be:80:75:29:81:1b:19:9f:37:6e:b6:a9:00:b1:
5a:ae:96:93:0b:ae:15:24:56:d1:9b:13:6e:f6:55:a6:15:b1:
85:53:af:89:26:45:73:ef:d1:b7:58:81:28:4d:e5:cc:a6:23:
9f:b2:78:32:16:40:4b:17:34:70:32:25:67:3e:71:b6:2d:f4:
a0:4a:71:eb:54:7c:fb:e5:06:37:c8:14:0b:cc:6c:82:ca:b6:
f7:eb:61:83:db:02:ba:e8:d9:09:78:cf:40:90:05:94:34:8b:
d5:c3:46:0f:a0:a7:c0:5d:81:44:b7:8d:5f:4e:e8:68:87:c2:
a8:ea:5e:44:8b:3e:cf:ec:49:2f:8a:19:02:24:9d:9c:44:f5:
b3:54:55:65:df:85:63:67:7b:df:a1:5b:c9:3d:5e:94:6e:1b:
55:e3:77:47:c6:a1:b5:4d:37:24:ec:26:24:b2:ca:2a:d7:a2:
1d:18:40:d3:37:da:ac:50:4b:52:28:79:8c:f6:95:e3:94:83:
cd:38:2a:00:f6:47:c5:3b:1e:96:00:36:8e:ea:b2:e4:fb:b6:
1f:4b:41:20:b8:31:d7:f2:93:ed:98:7a:41:3c:f1:fd:d8:8a:
ef:95:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org