Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/YsWfwdKJTh5AAd53hu14_e5sbLo.roa
File: YsWfwdKJTh5AAd53hu14_e5sbLo.roa (raw, json)
Hash identifier: nI/XO86GtpjvBLGAceog/LjAVsYgDPJe3x4I2y848D4=
Subject key identifier: 62:C5:9F:C1:D2:89:4E:1E:40:01:DE:77:86:ED:78:FD:EE:6C:6C:BA
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: D7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/YsWfwdKJTh5AAd53hu14_e5sbLo.roa
Signing time: Fri 01 Apr 2022 01:28:20 +0000
ROA not before: Fri 01 Apr 2022 01:28:20 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 4713
IP address blocks: 211.11.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Apr 1 01:28:20 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=62C59FC1D2894E1E4001DE7786ED78FDEE6C6CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:b6:61:b2:1c:d7:99:ca:4a:62:15:11:10:
1b:07:18:fa:2e:04:ee:d1:05:43:7f:89:eb:72:10:
85:81:bc:c4:3e:d3:1b:b9:f9:a0:f7:89:0d:72:a8:
f3:11:da:b5:a2:65:01:01:00:1f:81:e5:0b:55:bb:
d0:f5:44:f1:f5:de:79:b4:f0:d0:ed:33:51:de:6b:
ff:7e:4b:0c:d4:dd:5c:9f:97:2b:4b:5c:28:fc:69:
23:ee:b5:1c:ed:dd:11:00:c2:4f:5c:f5:e0:b2:cb:
ce:98:65:08:8f:85:de:36:1b:44:70:f9:05:f9:35:
b4:a9:69:50:4c:4d:d4:a5:ac:cb:7d:b0:c4:4f:dc:
7e:7b:f3:cb:7c:ac:7f:09:6a:f8:73:99:8f:8e:0c:
ef:a9:6b:bb:c1:d7:a3:17:d8:fc:ad:f4:3b:87:d8:
8e:06:ec:84:92:e0:60:39:e7:24:1c:3d:47:28:63:
47:38:61:96:64:75:95:75:69:db:2b:81:52:f8:80:
74:e1:27:49:26:73:e2:1f:85:7a:5e:9a:3b:f5:9f:
a8:78:04:77:46:af:82:76:a8:59:c7:da:b5:d8:e6:
4a:0c:4c:3f:bc:1f:b4:66:b1:00:fa:a1:90:02:d0:
66:1b:3c:94:35:27:87:c7:b5:22:d8:03:07:8f:27:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:9F:C1:D2:89:4E:1E:40:01:DE:77:86:ED:78:FD:EE:6C:6C:BA
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/YsWfwdKJTh5AAd53hu14_e5sbLo.roa
sbgp-ipAddrBlock: critical
IPv4:
211.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:36:89:d4:ff:03:d0:d1:16:be:68:8e:1a:9d:a6:96:40:59:
2c:1a:09:1b:3c:38:0d:46:30:26:43:50:0a:f3:29:7a:62:69:
97:91:34:70:eb:fb:04:01:d2:bf:ab:91:91:cd:ec:44:f2:f7:
62:e3:a6:2d:46:ed:b2:6d:b1:01:d5:d6:fb:eb:ea:63:ef:10:
8b:db:17:3e:73:c5:2e:46:ca:69:01:3e:81:8b:96:d0:53:60:
1a:36:50:0e:ee:34:ad:91:de:36:55:94:e0:da:eb:17:04:b4:
27:fc:ca:89:a3:ec:f2:42:f2:cc:12:4f:e5:d4:27:cc:d1:c0:
26:db:a5:2b:0e:2c:42:d0:09:04:90:5f:32:90:6f:58:5f:49:
b4:df:2c:90:e2:f9:d2:ce:b9:e6:fb:60:92:89:99:48:70:88:
c5:16:1e:31:47:0f:1c:e8:90:92:cc:3a:dd:b4:71:32:6e:04:
5a:24:2e:a3:f3:cc:05:78:4d:36:e0:21:4f:74:29:6b:ba:54:
b3:c0:b7:92:50:63:68:75:0a:b3:ee:20:0b:61:b4:2a:f5:e0:
57:28:7d:f5:da:36:11:63:4e:b7:83:75:ae:3c:4e:6b:b7:b2:
fa:ea:30:3f:00:c1:02:da:63:93:25:47:86:30:8e:e2:fa:fd:
8a:56:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org