Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/gox9B6wI4eoQuyVyuh308-o6QbE.roa
File: gox9B6wI4eoQuyVyuh308-o6QbE.roa (raw, json)
Hash identifier: BILd5AEw7l1PE+o8YJwKQj5HyzkJlsyPNg5koI/3sEs=
Subject key identifier: 82:8C:7D:07:AC:08:E1:EA:10:BB:25:72:BA:1D:F4:F3:EA:3A:41:B1
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 14
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/gox9B6wI4eoQuyVyuh308-o6QbE.roa
Signing time: Fri 30 Jul 2021 09:57:07 +0000
ROA not before: Fri 30 Jul 2021 09:57:07 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Jul 30 09:57:07 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=828C7D07AC08E1EA10BB2572BA1DF4F3EA3A41B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:d7:2b:05:db:ae:a5:3a:b3:b3:94:64:b9:
62:2c:48:d8:53:4e:54:f2:f5:8b:17:5a:ee:e1:af:
e4:7c:c3:f4:b1:59:c3:01:03:e5:cb:3e:c2:8e:69:
52:a5:62:58:aa:5a:80:72:bd:48:2f:a8:b3:8a:82:
7a:45:62:1c:4c:a9:49:d8:e5:a9:17:9c:cc:36:51:
8d:44:c2:5a:5f:10:c3:ca:4c:5b:88:6f:f6:82:b5:
f7:70:61:ed:9c:00:0e:6e:da:db:21:53:95:a7:84:
98:7c:5d:18:60:df:69:5b:19:57:3a:08:0a:fb:07:
7f:9f:b1:f7:fe:e4:f6:5c:0e:76:1f:f7:8d:42:42:
ed:01:61:84:f0:4c:f4:e6:8c:e1:27:3b:8c:e6:c1:
13:40:07:b7:e6:ff:1e:0b:e8:39:a3:d0:bb:e4:12:
61:7a:76:a3:8f:ba:65:7e:5e:37:b2:96:c4:18:38:
69:c2:4a:30:1e:0d:36:d3:69:0c:39:ba:43:19:42:
e5:a2:5e:3d:e2:bb:45:0a:e1:3e:bd:7b:14:bc:21:
16:45:8a:47:d5:42:5d:b5:17:3c:cb:96:9b:db:65:
81:d5:a9:8b:bd:be:53:fe:08:0e:03:d8:f9:8e:07:
86:0c:a7:d8:f8:90:89:71:e6:06:f4:39:cc:a9:dd:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8C:7D:07:AC:08:E1:EA:10:BB:25:72:BA:1D:F4:F3:EA:3A:41:B1
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/gox9B6wI4eoQuyVyuh308-o6QbE.roa
sbgp-ipAddrBlock: critical
IPv4:
157.17.84.0/22
Signature Algorithm: sha256WithRSAEncryption
da:c2:d7:a1:22:fb:de:56:00:f0:5b:93:01:3b:26:44:31:7c:
02:1f:01:52:f6:c4:91:bc:3d:72:d6:d0:1f:1e:9b:c6:65:34:
69:66:b2:4f:bb:c7:2e:74:4e:fb:f1:0e:19:fd:80:d2:b8:ed:
4b:3c:9e:05:dc:5f:d6:80:3e:03:e5:4c:be:61:ee:ed:5b:e1:
e2:04:7e:b9:df:bf:bf:3c:51:1f:cc:8e:21:9d:6b:54:21:a0:
1a:86:63:77:3d:73:02:d7:09:f7:24:5f:b8:5d:db:7c:81:35:
92:5b:f5:0d:50:a2:51:c1:9b:51:39:18:7d:5a:8c:09:13:51:
e5:e3:34:96:0a:bd:61:15:f0:3b:8c:57:cf:32:46:6f:3d:b4:
1a:a7:ac:11:f3:58:e2:98:bb:25:9e:a3:65:3f:36:22:96:ab:
83:67:e6:6a:33:56:db:fd:75:d3:f3:04:35:9b:d1:11:26:5e:
a2:2a:cb:bb:0b:6d:c5:e4:c3:10:d2:8c:12:fe:a7:f9:b0:7b:
ba:2d:66:7e:57:a7:c2:21:73:0c:2f:bc:cf:46:2d:fb:ba:33:
fb:8c:68:92:29:c7:b8:c3:c5:9f:2d:65:6d:c3:7c:ca:51:a5:
c4:90:06:10:ad:3b:f9:14:64:aa:f7:13:77:6e:72:32:e1:3a:
09:58:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org