Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/f23JQXjavkmWmHlyMzOE_NFBQV8.roa
File: f23JQXjavkmWmHlyMzOE_NFBQV8.roa (raw, json)
Hash identifier: qttMjOmKFtxF1fNiQD8X+oLXd7pGjmmHpRdpfmRa8BQ=
Subject key identifier: 7F:6D:C9:41:78:DA:BE:49:96:98:79:72:33:33:84:FC:D1:41:41:5F
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 1D
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/f23JQXjavkmWmHlyMzOE_NFBQV8.roa
Signing time: Wed 18 Aug 2021 07:54:10 +0000
ROA not before: Wed 18 Aug 2021 07:54:10 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 0
IP address blocks: 103.10.112.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Aug 18 07:54:10 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=7F6DC94178DABE4996987972333384FCD141415F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:a1:d9:2b:1c:65:cc:56:1f:92:45:9a:0b:
6c:7f:bd:ed:e1:95:eb:07:5d:04:f5:62:6f:5c:f8:
12:30:63:26:7e:4c:f7:b9:b3:c7:ff:44:e5:17:5d:
46:a1:e9:d6:3c:64:17:26:3e:4a:01:40:ca:6b:ec:
15:df:ea:c3:20:aa:7e:cb:e3:bd:16:94:b9:4a:f1:
d7:40:e4:e8:38:09:b6:aa:7e:e4:71:99:cd:83:d9:
51:8c:5e:b6:bd:51:22:5c:d7:9f:47:15:5f:da:66:
60:d5:7a:68:1a:89:ba:3c:7d:fc:be:3b:4f:33:f6:
d8:ca:d7:10:7b:ec:89:e5:5e:1c:c1:04:4f:cf:52:
c4:ca:80:ac:cf:a1:ed:36:a2:5d:23:3b:6f:92:be:
4c:5e:a8:a7:9f:a8:9e:77:29:ca:0f:31:d1:b6:59:
94:f5:3a:b5:7a:04:50:f7:c7:8c:b3:d8:ca:1b:bb:
00:2d:fa:0c:f5:a9:1c:af:04:84:e1:92:3b:96:55:
5e:03:9c:02:53:37:87:87:88:5b:ac:8f:cf:ba:6c:
e3:a5:79:0b:83:23:d0:28:19:75:b6:3e:ac:cb:b2:
bd:ec:b0:fc:82:65:b2:bd:21:0c:ab:d5:e7:48:ad:
3b:60:ab:61:44:df:51:ca:80:e4:21:6c:96:89:5e:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:C9:41:78:DA:BE:49:96:98:79:72:33:33:84:FC:D1:41:41:5F
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/f23JQXjavkmWmHlyMzOE_NFBQV8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.112.0/22
Signature Algorithm: sha256WithRSAEncryption
54:d1:9b:e8:f5:c3:77:64:03:39:ca:76:f3:19:70:cc:ee:67:
a1:4f:52:65:ae:7a:bb:4c:67:9c:d8:9f:70:c0:d5:f0:9b:41:
54:1c:0a:2e:72:83:2f:e5:8f:12:48:ff:fe:c0:e2:9c:99:53:
0c:59:e6:70:b6:ef:a4:f1:04:bc:5b:07:e1:13:16:c4:fa:46:
a5:42:a2:af:80:62:1a:3f:99:0c:05:d6:d0:a5:24:1b:38:85:
00:32:3b:b3:2b:31:cf:2a:1f:20:64:09:01:91:60:5a:13:bc:
90:9f:78:49:a1:36:0d:cc:98:9d:fb:2b:11:75:a0:c2:92:32:
0e:a7:0a:6e:c3:ce:b0:7c:7a:86:ec:e6:14:34:8e:e8:cf:ce:
1d:b2:1e:16:83:1e:10:77:68:67:7f:47:dd:19:a0:36:eb:63:
7a:c4:9b:5a:72:37:b2:03:67:4b:6d:4b:1f:b5:4e:1b:b9:49:
1e:1c:1a:57:57:83:65:6c:ec:fc:62:34:f7:9a:92:ed:93:c2:
0e:37:5e:72:9e:9a:40:66:d3:d7:8a:18:cb:f7:62:bf:5d:ed:
2f:c7:ce:c2:19:dd:3e:06:5e:de:4f:90:70:30:24:eb:2a:f5:
a8:97:43:f3:9f:fd:d7:ed:56:77:61:2c:d2:36:2a:0e:14:6d:
17:92:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org