Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/9erGh0lgpTFaTweqduvRnCpaiQw.roa
File: 9erGh0lgpTFaTweqduvRnCpaiQw.roa (raw, json)
Hash identifier: Z2CwStg2lPdjn6B6RSO7WI5JQaG/zYKrjazqVon4J0A=
Subject key identifier: F5:EA:C6:87:49:60:A5:31:5A:4F:07:AA:76:EB:D1:9C:2A:5A:89:0C
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: D9
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9erGh0lgpTFaTweqduvRnCpaiQw.roa
Signing time: Fri 01 Apr 2022 01:28:20 +0000
ROA not before: Fri 01 Apr 2022 01:28:20 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 123.216.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:20 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=F5EAC6874960A5315A4F07AA76EBD19C2A5A890C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:43:5f:9f:a5:c4:1e:5d:ac:96:4d:23:e2:
81:ed:11:d5:16:ba:87:05:86:fd:11:49:54:51:ed:
7e:83:e3:0e:1d:a7:a4:c9:9a:17:99:57:9d:d5:6e:
4b:4e:60:6d:8e:ac:93:99:b7:96:12:97:ef:cf:f6:
d2:ed:47:d5:81:0e:7e:93:15:12:b4:c3:7d:a3:3b:
c4:6b:b7:1d:e7:8f:8e:29:f1:b1:98:3d:ae:40:c4:
1a:3f:d2:d9:59:25:14:d8:ae:a3:b2:58:ba:f7:4a:
da:4a:a4:ed:5a:00:5f:07:50:ae:47:ca:61:4c:95:
00:06:b3:42:f2:03:58:a3:72:5f:0d:9d:d7:57:7f:
fa:e8:49:02:f4:00:b1:fc:08:72:a9:c6:c6:1c:03:
e0:4c:1d:39:99:06:9c:63:17:9d:42:6a:ae:fd:b5:
31:0e:69:9e:c5:57:a2:a4:ba:4b:5f:37:ff:f7:60:
24:14:ea:4a:0b:3d:8f:a6:3a:d3:ae:52:55:f8:4c:
dc:97:1f:99:48:12:83:7c:08:cb:2a:8a:b2:8c:a8:
2f:bb:25:5c:a0:6a:b2:bb:84:b5:c0:5a:a9:25:0a:
f9:73:d6:f7:5d:db:22:09:d7:6b:a7:05:94:1e:13:
41:30:f3:03:80:99:8f:44:16:28:d9:bd:8f:24:51:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:C6:87:49:60:A5:31:5A:4F:07:AA:76:EB:D1:9C:2A:5A:89:0C
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9erGh0lgpTFaTweqduvRnCpaiQw.roa
sbgp-ipAddrBlock: critical
IPv4:
123.216.0.0/13
Signature Algorithm: sha256WithRSAEncryption
d6:a8:c2:61:52:01:43:e5:fc:44:96:a7:24:0c:c5:45:bc:f5:
81:ce:77:62:71:93:79:a4:a1:ad:e4:08:af:95:8e:69:ea:92:
9e:8b:8f:85:b7:70:f5:4c:f6:b4:2e:c8:d9:09:03:72:2d:a8:
72:e8:ad:4a:1b:04:7a:64:3d:c9:3d:ed:97:16:90:cd:a6:cb:
27:79:00:dc:73:03:c7:db:ec:cf:37:62:3a:75:0b:e6:3e:e6:
85:81:a5:60:79:a2:0e:e2:1b:8a:7e:51:fe:75:10:d9:97:7d:
7f:f7:fc:81:b4:d8:3b:cb:08:8f:77:4f:68:1d:7e:64:0a:97:
0b:be:1b:ea:67:35:cf:ce:c8:5d:01:7a:bf:24:8b:4a:f9:c2:
c2:21:55:06:97:9c:1f:96:21:d4:73:5b:07:87:f7:00:76:65:
d1:fd:d0:c5:c0:84:58:ca:89:bd:5d:b8:a1:bf:d2:d6:ab:00:
5e:aa:6f:9b:51:68:ff:a6:b1:93:0a:af:44:5e:07:08:35:f3:
3f:c0:d8:20:cf:a7:bb:89:61:0e:dd:3a:c8:57:c3:0e:1c:f0:
6a:a6:fd:77:4d:da:c2:aa:71:6e:bf:c5:b5:f9:fa:98:82:15:
7f:ef:8d:e5:0c:5b:25:ae:bd:91:d0:51:04:52:24:b6:bd:17:
e5:a0:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org