Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/JZtxY7KpVDCJnB6Ucf-PA5ISZhc.roa
File: JZtxY7KpVDCJnB6Ucf-PA5ISZhc.roa (raw, json)
Hash identifier: yVnGj6xmSBDgNlChy1uBLntQ86CawQxOuFLpeiUuiDo=
Subject key identifier: 25:9B:71:63:B2:A9:54:30:89:9C:1E:94:71:FF:8F:03:92:12:66:17
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 77
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JZtxY7KpVDCJnB6Ucf-PA5ISZhc.roa
Signing time: Sat 08 May 2021 04:05:41 +0000
ROA not before: Sat 08 May 2021 04:05:41 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 219.114.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:41 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=259B7163B2A95430899C1E9471FF8F0392126617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:4a:62:d5:00:94:ec:b5:c9:1c:2f:0c:25:
b4:55:a9:7b:59:f4:4b:bc:df:81:92:9c:75:25:dc:
eb:77:e6:f8:ae:3b:b7:ed:e7:76:f0:4b:ee:e3:2f:
35:a1:ec:5b:3a:48:d8:6b:da:9d:83:b1:96:14:f2:
be:8a:e8:44:a9:86:d2:65:8d:d2:5d:d1:b6:58:3f:
8b:c4:f0:13:d5:c5:b3:d3:03:c7:11:be:a6:5e:f9:
68:db:c5:63:bf:12:40:05:d7:9f:42:6c:01:bd:23:
4e:ad:57:af:76:1a:26:a5:e4:36:74:dd:3b:40:c1:
16:84:56:51:09:46:5a:9e:de:92:55:29:88:b6:4d:
89:7f:e9:9d:3e:86:c3:c0:f7:07:d9:a0:85:91:e1:
74:3d:aa:f6:39:ed:d4:f2:9b:62:81:d2:ab:03:95:
99:b2:4e:53:bd:fb:2c:2d:e3:c9:3c:1c:42:10:fb:
88:2e:06:3b:dc:84:7a:d7:4a:3f:90:f1:d5:fc:f0:
c4:f6:03:31:8c:68:c6:c2:69:76:82:a9:d7:83:42:
00:d0:24:c8:4a:a4:8a:f4:4d:89:ad:03:9e:e6:2e:
1c:42:b5:e8:3d:36:fa:c6:00:55:cb:a2:31:cf:de:
b0:d1:b0:9c:fa:f4:a7:f6:e1:e6:91:ee:db:e2:20:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:71:63:B2:A9:54:30:89:9C:1E:94:71:FF:8F:03:92:12:66:17
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JZtxY7KpVDCJnB6Ucf-PA5ISZhc.roa
sbgp-ipAddrBlock: critical
IPv4:
219.114.0.0/17
Signature Algorithm: sha256WithRSAEncryption
09:09:12:c7:96:5f:0b:81:41:ba:ee:35:90:26:5d:c8:0a:c9:
2e:90:c3:39:14:13:06:02:3e:ed:f1:af:b7:a0:4d:c8:78:96:
7f:97:0a:b8:dd:b5:ee:c1:47:81:28:a1:8e:16:1d:47:81:5d:
db:da:34:c4:7a:a5:6f:c6:23:3c:b9:92:c6:43:94:3f:d4:0f:
7b:5c:e2:3f:9d:c5:42:88:cc:3c:5d:1f:85:ae:d7:47:0e:ab:
d7:f9:be:28:3a:06:43:69:55:ce:a9:48:73:4f:8b:b1:74:45:
7b:41:77:3a:65:6e:d4:a4:9c:57:ca:ba:57:72:04:4f:4f:f8:
16:59:16:ef:10:ef:56:65:0b:fe:e6:08:64:e7:fe:8a:82:59:
19:5b:4c:f0:04:75:2d:9b:9c:3c:c0:1f:e2:90:70:a0:af:dc:
2e:37:15:75:57:93:e5:67:e5:67:43:c2:b7:90:7b:a7:5a:1e:
e2:a5:26:fe:5e:b3:1f:18:14:fa:98:e7:ab:77:64:d4:39:69:
ac:eb:3b:56:42:ef:6d:6a:35:25:a9:48:35:1c:e7:e4:73:ec:
13:1f:f1:34:81:86:b6:4c:e8:b6:f8:05:1f:8e:4d:08:dd:95:
f8:00:d0:da:2b:43:76:56:4e:b4:16:4b:e4:54:f0:a0:87:f7:
3d:0a:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org