Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/J43De3RHr3N2z0G6AFcG3uQtSSg.roa
File: J43De3RHr3N2z0G6AFcG3uQtSSg.roa (raw, json)
Hash identifier: wkkeSBqhfqTp1xr8dUak0ez8L5zZoDs5ynoxsTKqDFA=
Subject key identifier: 27:8D:C3:7B:74:47:AF:73:76:CF:41:BA:00:57:06:DE:E4:2D:49:28
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: B8
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/J43De3RHr3N2z0G6AFcG3uQtSSg.roa
Signing time: Fri 01 Apr 2022 01:28:11 +0000
ROA not before: Fri 01 Apr 2022 01:28:11 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 114.144.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:11 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=278DC37B7447AF7376CF41BA005706DEE42D4928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:22:c9:e7:61:0f:71:ce:f8:6f:be:c0:04:ae:
cc:8e:97:c8:f2:3a:3e:37:42:c2:24:cc:2f:87:07:
ba:44:be:ed:be:d5:63:9d:44:5c:8f:05:d8:7d:fe:
ba:7f:1c:dc:26:46:e5:02:07:1a:da:54:0d:c5:b9:
d7:a4:4e:f1:80:cd:13:38:92:26:5c:d0:70:f0:46:
7c:af:8d:00:d8:70:24:ad:6f:09:e4:ad:29:5f:f8:
6e:8d:04:86:b4:96:65:4e:2b:21:43:37:30:f8:e0:
89:11:d3:10:81:9c:04:48:c7:57:6e:a9:6b:8e:65:
84:e2:c8:fb:ee:ab:c0:88:77:86:39:92:67:20:30:
70:fa:73:65:e5:0e:29:b8:18:b5:4e:c0:75:aa:51:
85:e1:ce:d3:ea:1e:6f:cc:07:ec:fe:f5:5d:e0:30:
d4:52:9d:f2:7d:fd:84:38:76:37:c7:9b:a3:39:08:
35:67:3e:66:73:e2:08:1e:c0:8d:3e:33:a8:b1:8b:
0a:2d:9e:ed:c8:a3:ff:bc:8b:90:5a:91:e1:9e:c5:
94:02:f0:da:ac:92:49:86:8a:f0:2c:77:fc:cd:0e:
e5:4c:3e:32:63:02:91:42:fc:e8:80:54:03:92:ff:
93:c8:80:82:f7:76:85:6a:81:e7:e7:1a:60:74:bd:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:C3:7B:74:47:AF:73:76:CF:41:BA:00:57:06:DE:E4:2D:49:28
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/J43De3RHr3N2z0G6AFcG3uQtSSg.roa
sbgp-ipAddrBlock: critical
IPv4:
114.144.0.0/12
Signature Algorithm: sha256WithRSAEncryption
22:d2:fc:86:35:06:17:b8:06:3f:c4:81:30:36:7d:9b:96:4b:
9f:c4:18:a2:6f:38:73:ed:17:c0:c3:99:80:21:9a:26:cb:9f:
19:9c:65:25:f8:41:e4:4d:e4:21:ad:bd:4c:b9:93:50:77:a6:
ba:b8:83:3f:cb:af:da:b7:10:ad:b6:a9:98:47:42:5e:07:6a:
f5:e7:3f:df:92:25:0b:61:ec:a5:64:7b:65:4d:25:70:25:ac:
fb:79:e3:dc:86:2f:c9:b5:dc:a7:c2:1b:5e:68:37:36:f7:22:
e6:8d:1a:a1:97:10:60:70:42:37:a6:ca:40:47:48:c2:a4:44:
60:b7:fa:b4:8b:46:f7:99:56:96:e4:43:55:19:40:dd:ee:ca:
34:ef:e7:1c:af:ae:78:3d:4b:32:4b:b4:de:fc:d5:86:34:58:
42:17:c3:d7:92:77:6d:0d:94:de:60:a7:5d:e3:d8:1d:9d:cd:
16:50:78:72:58:1b:5a:5d:d7:ce:06:28:04:f7:28:f8:e4:93:
56:43:f4:10:4d:18:54:b4:39:6b:cc:39:52:89:11:5e:b7:1d:
b4:ee:a7:d7:0f:1c:3c:4b:89:c9:4b:15:50:1d:f2:94:e5:00:
81:f9:7b:e5:31:b5:10:bf:60:9e:6b:fb:30:8f:f5:55:25:3d:
28:e7:dd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org