Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/595XECKxezAfN8_JeuZmLOUvaWM.roa
File: 595XECKxezAfN8_JeuZmLOUvaWM.roa (raw, json)
Hash identifier: ZFnPKOfQ6NK6ERp5J3MWyfNQ/XI5/aZ8ca3H/K0f8xA=
Subject key identifier: E7:DE:57:10:22:B1:7B:30:1F:37:CF:C9:7A:E6:66:2C:E5:2F:69:63
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 0F
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/595XECKxezAfN8_JeuZmLOUvaWM.roa
Signing time: Fri 30 Jul 2021 09:37:08 +0000
ROA not before: Fri 30 Jul 2021 09:37:08 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jul 30 09:37:08 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=E7DE571022B17B301F37CFC97AE6662CE52F6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:72:77:ca:fe:11:a4:7b:47:c8:2c:47:7f:
10:f8:28:a5:1e:84:6b:8e:61:53:93:db:48:14:c9:
d7:2e:6a:b7:75:27:a7:49:64:ac:5f:cb:1b:8e:f9:
a1:8e:bd:4c:dc:14:1f:04:b9:7e:92:14:fa:b7:2e:
e8:72:9b:6f:9b:c2:84:c0:51:c1:67:75:8d:e9:53:
97:2d:e2:08:72:d7:a0:f1:0f:c5:e0:f4:52:48:e9:
ba:4a:68:01:d6:cc:e1:18:56:13:60:11:21:9d:2c:
e6:2c:99:7e:8e:76:49:86:ee:34:9b:58:90:7c:1c:
e4:51:d8:5e:52:fa:b8:ed:f2:ae:23:ce:94:18:0b:
cc:94:4a:bf:c6:40:26:e7:ee:dc:1c:36:91:fd:82:
84:ab:aa:53:a1:fd:2e:93:ca:e1:e9:84:6d:32:af:
dd:c1:dc:12:bf:24:7e:e4:95:d5:d6:61:2e:00:66:
e5:6a:53:62:89:61:5d:96:d4:74:c1:f3:5c:d6:67:
b2:f7:0b:38:90:a2:1a:7a:51:ec:8b:88:a4:21:8e:
8a:6b:c9:94:fa:ba:d6:43:3d:08:b2:0f:1b:cd:eb:
c1:d4:5c:ca:3e:16:b6:ac:a4:27:85:6c:76:f2:e1:
e8:9b:7e:ea:56:5e:3c:33:94:e3:52:a0:24:ae:3a:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:57:10:22:B1:7B:30:1F:37:CF:C9:7A:E6:66:2C:E5:2F:69:63
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/595XECKxezAfN8_JeuZmLOUvaWM.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.112.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:87:76:1d:2d:76:e8:6e:17:76:ec:5b:2b:50:b5:11:9f:49:
a9:5c:31:19:50:09:63:9d:11:99:a2:a0:80:3b:45:7b:e5:88:
9c:4f:5e:53:8d:44:c7:57:ab:ce:ce:02:bc:90:a8:49:8d:88:
c0:66:52:1a:e5:82:c4:59:1b:d4:7a:f4:47:7d:c3:ce:dd:b0:
c1:93:b1:c7:2f:c8:e4:e3:12:93:95:03:14:31:c7:0f:fd:d7:
dc:fd:16:69:ea:63:cd:0b:ff:05:d7:ea:3f:26:f7:a5:5f:f5:
bb:0c:b3:b6:ae:76:a8:c5:82:e6:05:e3:59:6e:45:bc:de:6b:
36:7a:c8:77:de:dd:bb:88:17:5b:5a:eb:ab:84:95:f4:cd:94:
ea:51:66:0f:fb:a0:4d:ae:69:ae:32:a7:7f:de:1e:6a:6a:00:
6e:ea:e3:ec:6f:4f:1e:57:c5:31:da:d4:29:80:b3:ed:63:ce:
20:32:37:2d:2c:96:14:52:7c:2e:85:54:88:43:fb:5a:73:d2:
07:27:7b:4b:82:38:85:a3:5f:c3:35:f6:a1:cf:a8:5d:92:a1:
4f:13:5b:b5:29:fe:05:02:cb:aa:b5:69:56:fe:24:0a:54:ca:
6f:96:1c:69:4c:c9:7a:c7:40:0a:62:ac:05:ec:03:b6:60:9e:
1b:f6:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org