Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/aX7nzd8P9ghVbKAWp-GehpCda94.roa
File: aX7nzd8P9ghVbKAWp-GehpCda94.roa (raw, json)
Hash identifier: o959KNOGMVSfxdGAe6zyGHjyguBZFOkPm8TEtDZ5Z6I=
Subject key identifier: 69:7E:E7:CD:DF:0F:F6:08:55:6C:A0:16:A7:E1:9E:86:90:9D:6B:DE
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 94
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aX7nzd8P9ghVbKAWp-GehpCda94.roa
Signing time: Sat 05 Jun 2021 03:47:29 +0000
ROA not before: Sat 05 Jun 2021 03:47:29 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 4713
IP address blocks: 218.47.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Jun 5 03:47:29 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=697EE7CDDF0FF608556CA016A7E19E86909D6BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:e2:28:0c:99:cb:ec:ac:cf:a5:ee:62:3c:
e2:65:33:5f:7a:46:a4:95:5f:7e:d7:1f:b7:f5:5f:
0f:1e:4a:10:52:db:17:bc:d1:37:04:3d:a5:ad:01:
45:4d:c7:5b:81:cf:75:06:c2:57:f4:ae:78:61:09:
5f:dd:d8:1b:dd:04:ee:5b:00:65:7d:77:62:92:54:
41:39:3f:bb:18:c9:d2:e8:82:c7:32:47:c0:af:5c:
cf:08:7f:cf:4b:c7:53:16:0a:63:ba:03:b6:e7:ad:
23:6c:25:fe:a6:9d:16:0e:69:e8:65:d7:e3:58:8d:
90:a0:97:5c:3e:eb:d5:cb:59:65:2b:67:95:e6:e4:
df:ee:ab:55:f3:05:92:06:ad:f7:af:d0:80:fb:07:
1f:75:46:4d:cf:bf:3a:0e:90:96:56:22:6b:77:bc:
16:47:64:fd:83:e6:cf:f7:7c:57:5e:60:ed:91:fb:
1a:e2:47:9a:f6:d1:54:91:35:bf:a4:00:6d:6c:bb:
8c:e1:28:34:9b:f2:b6:ea:20:51:31:b8:87:ac:33:
c2:60:59:e4:3b:32:b9:47:4e:7a:9b:f3:64:c2:45:
2d:d3:09:59:a0:cc:2e:a0:5e:f8:9d:83:b1:e4:bc:
ca:0b:fd:e4:1c:e4:53:93:0c:1d:cb:52:e5:bc:2c:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:E7:CD:DF:0F:F6:08:55:6C:A0:16:A7:E1:9E:86:90:9D:6B:DE
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aX7nzd8P9ghVbKAWp-GehpCda94.roa
sbgp-ipAddrBlock: critical
IPv4:
218.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:4d:cf:1a:d5:8b:8b:16:14:fa:58:2e:36:be:0c:b3:6d:91:
16:06:58:57:ec:51:84:c7:9a:11:f4:2e:9a:79:e6:0c:5f:aa:
0c:7f:47:23:5a:7c:e2:20:af:73:b1:53:0b:18:90:2d:7e:b2:
0f:72:33:02:11:33:39:a7:52:40:6e:e6:29:3d:27:16:be:a9:
39:e3:1e:fa:34:cd:17:c2:1b:66:08:5b:02:a8:1e:92:36:6b:
52:63:65:d9:ff:3f:6e:83:3e:ea:13:9c:fb:88:28:e4:96:18:
95:8a:94:ec:a2:72:61:64:c8:de:a2:c1:9c:ca:fe:8d:8f:bc:
ad:21:cd:26:c8:d0:57:5e:ca:87:63:3b:2f:8c:88:a6:c2:e7:
ee:08:11:b3:7f:55:41:07:fa:09:cf:2a:4d:5c:95:aa:5b:a0:
89:7b:40:f4:c1:76:05:1b:57:74:40:35:5c:80:e9:1b:bb:01:
45:25:b9:f8:c7:c0:c2:cb:69:78:a4:16:66:53:13:f5:1a:6b:
11:91:b0:cb:59:5e:b5:72:82:b3:4f:50:55:53:c8:8d:92:c8:
82:c0:09:16:a2:ba:24:e4:59:aa:87:2f:f1:88:a4:13:d2:12:
97:81:f6:45:2c:48:f0:81:9a:ea:d7:f9:16:71:c2:f5:59:65:
1e:08:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org