Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/MbItiX2O73SRy6uF2LQkZ5zTEgc.roa
File: MbItiX2O73SRy6uF2LQkZ5zTEgc.roa (raw, json)
Hash identifier: Tug+8SoKfbgUXLEenSTCtIhe6ZGBUT1UxoCLdy9P0k8=
Subject key identifier: 31:B2:2D:89:7D:8E:EF:74:91:CB:AB:85:D8:B4:24:67:9C:D3:12:07
Certificate issuer: /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial: 21
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/MbItiX2O73SRy6uF2LQkZ5zTEgc.roa
Signing time: Tue 25 May 2021 02:31:51 +0000
ROA not before: Tue 25 May 2021 02:31:51 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 55392
IP address blocks: 14.1.4.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
Validity
Not Before: May 25 02:31:51 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=31B22D897D8EEF7491CBAB85D8B424679CD31207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:1c:16:54:4f:aa:96:c7:09:03:95:b1:e1:
85:08:2c:d0:19:9b:86:f4:3d:15:ed:a8:ed:ba:e2:
37:f8:89:c5:d3:dd:a0:8b:e7:ee:6a:70:c1:b3:44:
b3:d7:8a:c8:44:72:62:ff:4d:22:fb:57:c7:83:0d:
53:72:f1:58:e4:ae:ba:83:75:ed:3a:e2:4a:b5:7a:
43:b6:85:23:3f:47:69:33:58:b1:f9:71:b5:d8:e1:
9e:ec:18:17:f7:3e:70:85:29:31:3a:0d:76:5b:9c:
d6:77:21:d2:0d:cb:91:2d:06:4e:54:ca:d5:80:41:
f1:f0:d3:36:d0:e8:ee:40:f8:f9:4b:91:47:f3:07:
a1:ee:c4:40:91:9a:f5:ed:ee:5a:a3:02:8d:31:bc:
6e:f1:8b:15:df:4c:cf:7f:d6:b3:85:c4:57:47:c9:
d7:04:74:d1:c8:25:06:01:56:06:5c:db:63:7c:43:
f1:94:16:9d:8f:5b:1d:96:95:29:2e:e2:23:70:6f:
09:d5:2f:31:48:10:aa:34:a1:6b:bc:a5:19:b4:bf:
b8:90:31:c7:52:84:3f:8e:25:c9:55:d9:dc:fb:2b:
54:0d:a7:03:0d:bb:9f:51:0e:ee:bb:5b:b6:73:b0:
c6:e4:e0:d2:c2:69:57:74:ae:0b:2c:29:21:df:60:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:2D:89:7D:8E:EF:74:91:CB:AB:85:D8:B4:24:67:9C:D3:12:07
X509v3 Authority Key Identifier:
keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/MbItiX2O73SRy6uF2LQkZ5zTEgc.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:df:85:81:e3:0d:b9:fd:10:66:c6:6f:d0:2d:d9:f9:61:f9:
a2:37:6c:a8:83:75:73:eb:80:fd:a4:ca:9c:08:b6:47:96:66:
3f:c4:86:1d:38:ca:ff:ee:5a:c7:70:71:e7:db:80:bf:eb:8e:
1f:e3:35:42:bb:63:67:fd:61:0d:73:8b:cb:88:39:7d:82:46:
0c:b8:c2:ee:f4:91:fb:c0:1c:cb:0c:30:29:fd:f8:1d:a0:2c:
de:ef:15:e5:f7:69:cf:3e:d1:8d:4e:f6:db:f6:ef:24:34:91:
8a:22:00:d3:23:29:18:6c:fd:30:be:89:89:2e:96:73:a9:77:
02:c6:e0:f5:3b:83:5b:d5:a2:82:df:64:a2:6b:be:bd:05:f3:
fb:2f:a7:4d:51:68:bd:5c:43:2f:3e:a0:0f:77:c3:cd:7b:29:
2e:b3:de:38:ae:b6:bf:f0:15:6c:10:3e:82:a7:43:be:85:93:
b5:41:75:36:d8:3e:75:a4:19:26:96:21:45:8b:06:6f:87:3c:
f5:b3:e8:8c:35:4d:5b:9a:ad:89:2f:7e:35:f4:8a:c9:5b:29:
c4:95:11:e9:e8:3d:3d:e3:97:f2:63:df:54:c0:46:be:74:e6:
dc:79:25:42:31:47:63:f3:82:fc:11:6c:45:2b:bb:30:36:9f:
e5:6f:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org