Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/w2YijrFw_42P6NWHo0jztkoTPNw.roa
File: w2YijrFw_42P6NWHo0jztkoTPNw.roa (raw, json)
Hash identifier: ym/2kaTRTpGC87kH2wkvaP+zjmsYaL0r0Pq+qTPYKGo=
Subject key identifier: C3:66:22:8E:B1:70:FF:8D:8F:E8:D5:87:A3:48:F3:B6:4A:13:3C:DC
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 12
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/w2YijrFw_42P6NWHo0jztkoTPNw.roa
Signing time: Thu 12 Aug 2021 06:18:45 +0000
ROA not before: Thu 12 Aug 2021 06:18:45 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 7660
IP address blocks: 203.181.248.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Aug 12 06:18:45 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=C366228EB170FF8D8FE8D587A348F3B64A133CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:c0:03:0f:39:54:6b:bb:f4:00:81:23:f4:
4b:78:29:8c:50:56:4c:2e:7b:dd:8c:70:b7:9e:74:
10:bd:35:91:36:7a:a0:f8:e6:52:6c:61:4b:8d:75:
ac:4f:c3:fc:83:3a:6b:c1:a3:96:cc:cc:7d:17:97:
11:ba:7f:60:db:79:fb:08:e0:70:c9:99:3d:b2:e9:
82:37:6a:d2:87:a0:1c:4a:4e:c0:b8:6f:fd:d5:d9:
f4:82:74:55:5b:9b:36:0b:da:45:38:1a:c2:f4:2b:
2c:59:f4:9c:03:aa:9f:86:12:f6:47:9a:e4:b1:b3:
fa:30:ef:8f:91:c2:5e:bf:03:60:de:09:9e:0f:44:
ac:0d:89:85:ce:d5:95:e7:df:1b:04:50:eb:37:8b:
29:1c:e0:ca:f0:b6:c0:d2:5e:7f:7c:fc:a3:96:7b:
cd:6b:41:d4:01:66:d8:75:37:3f:a8:18:68:bd:61:
b1:43:bf:cb:7a:58:32:1f:5f:2f:91:c3:74:73:31:
7a:e1:5f:1f:17:62:68:bf:1a:71:ef:30:c9:9c:22:
be:6d:7a:a9:df:b2:02:34:94:ae:8f:39:67:6a:bd:
07:b4:84:f7:83:5e:39:04:39:70:30:72:da:b3:e9:
21:bc:1b:05:92:d4:92:59:43:cf:f5:c7:1a:1f:74:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:22:8E:B1:70:FF:8D:8F:E8:D5:87:A3:48:F3:B6:4A:13:3C:DC
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/w2YijrFw_42P6NWHo0jztkoTPNw.roa
sbgp-ipAddrBlock: critical
IPv4:
203.181.248.0/23
Signature Algorithm: sha256WithRSAEncryption
46:9f:c7:59:fc:b5:a3:31:58:e5:ed:50:6d:14:dd:0d:d7:af:
f6:e7:7e:d9:4b:3c:bd:d4:0c:1d:a3:c9:21:38:e3:62:bd:95:
dc:03:19:f5:5c:24:2c:6a:0d:78:77:fb:83:13:f6:86:36:78:
ec:21:23:44:aa:76:e4:2d:8f:dd:d0:30:8c:99:96:38:91:4d:
df:a9:d3:46:ff:54:7e:7b:03:82:36:84:41:a1:59:37:41:b8:
90:ed:64:00:ae:c1:3a:5d:c0:a1:26:20:c9:00:85:96:15:16:
ac:8f:b3:62:60:2d:39:f3:6f:2f:d1:d5:02:02:dd:39:93:fb:
93:93:d6:8c:89:68:e2:d3:64:95:20:29:86:4e:6a:fb:81:84:
27:aa:72:f1:7d:ce:21:73:b5:04:6d:7b:f6:5e:b1:71:e8:9b:
18:78:1d:be:38:0a:f7:70:23:62:3c:92:d5:70:eb:c7:19:05:
98:79:a6:dc:79:ab:e5:36:a5:74:45:91:b1:87:b8:32:34:47:
1e:cb:91:b0:85:0d:7d:71:88:9f:ce:37:22:ab:89:ac:f8:8f:
9e:3f:b8:24:d1:f8:95:5c:e0:01:86:46:45:0b:d0:86:eb:af:
7e:3f:86:4e:26:99:e5:5f:a3:ae:fe:da:1c:4c:f1:26:fb:3f:
bf:fd:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org