Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/XWXs1T6d8Q6LukkXu1UGAFTarQM.roa
File: XWXs1T6d8Q6LukkXu1UGAFTarQM.roa (raw, json)
Hash identifier: GDkO+gPs+dFFyxjCUD5T0w+9cU0CCg7lFEngKe28Kbg=
Subject key identifier: 5D:65:EC:D5:3E:9D:F1:0E:8B:BA:49:17:BB:55:06:00:54:DA:AD:03
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 66
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/XWXs1T6d8Q6LukkXu1UGAFTarQM.roa
Signing time: Sat 08 May 2021 04:05:37 +0000
ROA not before: Sat 08 May 2021 04:05:37 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 125.170.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:37 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=5D65ECD53E9DF10E8BBA4917BB55060054DAAD03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:6f:a7:aa:b2:41:ce:66:5a:9b:43:1c:b2:
f1:11:07:3f:4b:a2:ab:bd:6a:b7:39:14:3a:33:d7:
c9:98:73:23:a6:aa:9a:62:96:a8:9f:8c:0b:4a:e9:
46:b1:c3:e9:b1:b2:c7:02:ba:28:99:20:54:15:1f:
2d:7d:15:18:ab:7b:bf:08:6e:2c:53:5b:1b:7c:ce:
76:a8:ba:13:ea:70:bb:87:16:fd:4b:6a:08:5f:bf:
fa:7c:cc:2e:25:c4:6f:06:75:75:df:3a:f3:8b:96:
7f:f1:3b:5b:18:15:d4:94:9b:8a:e0:3a:4d:70:e9:
50:17:af:7b:12:a5:55:ee:98:75:46:c5:2e:a3:36:
47:43:e4:23:bb:cb:b0:d2:a5:cc:54:34:4c:f0:1f:
a1:43:6c:ca:61:13:68:7a:9c:22:73:04:f1:5b:66:
ff:7a:2b:74:e2:e2:ff:e4:66:81:47:ba:50:95:04:
bf:ef:af:d6:54:e3:d8:65:cc:26:67:d8:5f:d4:0b:
b9:0d:a4:00:fe:a3:6b:2b:ad:e3:49:60:cb:40:27:
fc:63:e6:c1:70:04:99:93:eb:6b:48:b0:a0:64:10:
75:b2:6c:ff:05:05:17:57:a3:89:92:a8:12:6c:c8:
4c:ec:e6:a7:71:e1:81:57:0c:a1:20:2c:5b:c9:92:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:EC:D5:3E:9D:F1:0E:8B:BA:49:17:BB:55:06:00:54:DA:AD:03
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/XWXs1T6d8Q6LukkXu1UGAFTarQM.roa
sbgp-ipAddrBlock: critical
IPv4:
125.170.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:f0:8d:32:20:ef:d4:ca:73:d6:eb:eb:d6:c9:59:81:71:09:
62:16:7d:f1:52:1a:e8:ec:0f:9a:91:31:2f:bf:c6:98:9e:ce:
be:a6:7f:90:53:b7:5d:a2:d9:5c:74:5a:d5:94:89:22:fb:02:
ce:bb:a8:9a:f6:e5:f6:42:6c:54:cc:d9:d3:0d:68:bd:f8:1e:
14:c3:fd:7b:c5:0f:f3:61:ca:4b:9c:35:fa:6c:fc:da:96:df:
10:5a:8f:93:c5:ed:d9:84:a9:ed:eb:36:6c:5c:53:19:b7:0f:
6e:1c:2b:79:fc:56:cb:ed:88:9f:c5:5f:34:93:11:65:4a:b3:
f0:ec:c1:3c:c9:96:c2:fc:cf:8a:4a:be:18:51:fa:48:3b:05:
64:9b:4d:fd:4e:a3:14:29:c2:64:ed:dc:1c:f8:31:e4:ef:1d:
01:67:a4:52:cb:9f:6e:ad:a7:3b:28:0f:96:e4:32:48:fd:fb:
35:f8:14:30:63:3a:bd:55:7c:2b:32:85:94:c3:e0:fe:96:89:
cb:6b:8e:9a:8a:b5:90:36:66:17:10:8b:54:e7:c6:26:6b:49:
2a:76:d9:1e:72:15:90:05:76:8e:2e:a4:95:af:10:c8:d1:46:
0a:d4:86:f5:87:b0:0a:1b:d9:6f:5d:a4:de:37:bf:4e:5f:c0:
86:d1:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:01 2023 by rpki-client on console-fra.rpki-client.org