Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Lr7Ag3r_uid0JwBrIdwR9ZiP2dY.roa
File: Lr7Ag3r_uid0JwBrIdwR9ZiP2dY.roa (raw, json)
Hash identifier: qTJoa7Npi9RCb0RMPlYaQcuq16nPnJVvLv1yWIYGeV0=
Subject key identifier: 2E:BE:C0:83:7A:FF:BA:27:74:27:00:6B:21:DC:11:F5:98:8F:D9:D6
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 11
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Lr7Ag3r_uid0JwBrIdwR9ZiP2dY.roa
Signing time: Fri 30 Jul 2021 09:52:08 +0000
ROA not before: Fri 30 Jul 2021 09:52:08 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jul 30 09:52:08 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=2EBEC0837AFFBA277427006B21DC11F5988FD9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:91:f5:89:23:e7:63:57:e0:dd:6b:b3:00:
57:35:b3:93:a0:af:d8:17:6c:b1:0a:97:95:29:73:
cb:81:fe:39:01:af:1e:b4:ea:d1:d1:12:0f:04:81:
3b:39:0f:7a:86:54:08:ed:04:3e:ea:18:80:a4:14:
2d:d6:1f:55:22:d7:7c:26:e0:c9:d5:f0:e3:a2:4a:
cf:4d:42:4e:a2:4f:4b:dc:9c:31:f1:7c:1c:14:87:
be:76:7b:2d:c2:c0:c4:a6:5b:aa:7a:e5:fa:de:03:
10:ed:a0:ce:63:36:98:7e:75:1b:ed:b0:0e:0f:c9:
79:7c:f5:f3:2f:95:7f:03:02:02:33:c1:e2:9f:cc:
54:f3:fb:40:cd:97:9d:34:d5:42:f1:88:ae:f0:fd:
78:6a:d1:6c:8f:00:bc:06:7f:b7:9d:07:b2:47:b3:
b8:e5:50:6e:4e:79:cf:4a:77:61:11:03:db:d3:4a:
e9:aa:1f:77:0f:5f:5e:b5:a0:41:bb:3c:b6:83:32:
b0:82:31:42:94:4f:7d:5c:16:4c:f2:36:f2:a1:4e:
c9:58:79:f1:c0:6f:28:67:79:c7:61:10:4b:81:d7:
f2:ef:a9:c0:88:02:6b:bc:34:6b:94:87:62:4a:fd:
71:5f:65:39:77:07:c8:a7:32:3f:d2:b7:6a:95:2a:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:C0:83:7A:FF:BA:27:74:27:00:6B:21:DC:11:F5:98:8F:D9:D6
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Lr7Ag3r_uid0JwBrIdwR9ZiP2dY.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:f0:d9:68:c7:fa:ce:79:dd:79:e9:20:a5:1f:d2:9e:d5:3b:
58:72:0d:1c:34:bf:a2:9f:47:90:05:25:94:a6:c0:9e:53:02:
e0:9b:e7:93:0a:ca:12:a6:5f:ed:cc:27:b6:3c:95:28:be:39:
6d:4e:0f:1e:a3:17:ca:01:9a:63:f2:9c:28:c3:93:9d:88:64:
51:9f:8d:c0:de:44:ae:10:d3:98:eb:04:ac:a6:33:9c:9e:89:
55:de:66:27:27:3a:f0:0e:75:8a:82:44:59:0a:73:cf:be:6f:
90:86:7b:76:62:37:0a:06:43:d5:c5:5e:5e:37:73:c0:16:c9:
2d:c3:96:d8:3a:ff:9a:4b:fd:8a:68:42:b1:50:6e:b7:1c:b0:
48:f2:67:e0:d0:d3:25:9a:e8:17:5a:57:62:f3:5a:99:21:fe:
ad:e0:f6:9c:07:fd:22:42:75:2d:3e:d9:ad:8c:9c:22:3c:a1:
77:f7:98:c0:78:e4:0b:f3:2f:8b:a9:05:95:20:1b:1a:41:60:
64:a9:97:13:32:24:aa:63:4f:b4:f6:bb:a7:83:92:8d:f1:bb:
b8:e8:a4:21:be:08:f8:74:00:f3:20:fb:d2:94:c5:ec:56:f0:
c3:0e:c0:34:02:49:b7:c7:52:b1:a8:b1:bb:f9:49:a7:fa:74:
cd:aa:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org