Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dboC-jHHVft1Xsb80P0nbVGRdts.roa
File: dboC-jHHVft1Xsb80P0nbVGRdts.roa (raw, json)
Hash identifier: Gi1HyFneah+MI9stQKQaZtCmJcLOXVOPnNxTkWBhD8c=
Subject key identifier: 75:BA:02:FA:31:C7:55:FB:75:5E:C6:FC:D0:FD:27:6D:51:91:76:DB
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 7C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dboC-jHHVft1Xsb80P0nbVGRdts.roa
Signing time: Sat 08 May 2021 04:05:42 +0000
ROA not before: Sat 08 May 2021 04:05:42 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 211.0.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:42 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=75BA02FA31C755FB755EC6FCD0FD276D519176DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:1b:06:b5:b1:fa:bb:53:c4:dd:0a:1c:8a:
aa:52:b7:6c:45:1a:e5:dd:7f:98:61:f0:75:5d:2e:
35:c1:01:ea:fe:2f:25:e0:5f:bb:1f:ca:46:f9:bd:
9d:d1:2d:a4:66:a2:13:1e:4a:bf:da:cb:08:1a:d8:
54:85:cf:b6:fd:77:9c:8e:ca:e3:43:8d:e8:b5:80:
18:13:dc:03:29:97:e0:27:a1:cf:4b:f0:36:96:2e:
07:17:cd:79:59:63:e7:9d:0e:d2:45:2e:f4:e0:c6:
c7:de:25:a5:a6:77:46:25:94:e7:f2:d8:2d:84:bc:
5e:0d:ef:53:f5:88:5e:ef:b2:3c:8d:b2:68:de:bb:
58:b3:8f:df:2b:5d:52:80:44:63:66:fd:7b:21:f1:
c6:ed:37:44:63:1f:ea:20:31:fd:77:44:5b:a4:05:
b3:59:d1:ce:77:04:ce:02:33:e8:38:da:5b:57:2b:
4d:fc:cd:47:e5:58:a9:50:f0:d3:f3:42:90:e8:ba:
a3:ac:5a:66:a3:1a:9e:69:d0:68:73:e1:b0:f9:dc:
b9:06:65:47:bd:02:82:c0:e9:9a:e7:c2:23:5d:c7:
ec:92:70:5a:23:ae:8b:7d:36:92:3b:9d:70:d9:dd:
1d:4e:8a:e3:47:2c:ba:fc:da:9a:36:8b:5c:37:49:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:02:FA:31:C7:55:FB:75:5E:C6:FC:D0:FD:27:6D:51:91:76:DB
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dboC-jHHVft1Xsb80P0nbVGRdts.roa
sbgp-ipAddrBlock: critical
IPv4:
211.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:77:4e:9c:43:53:51:a5:fd:3c:3e:2c:39:8e:11:57:b1:de:
5d:1c:df:be:55:82:b7:46:f3:91:28:10:86:33:45:cf:75:5f:
c0:72:94:18:2b:77:51:6d:40:30:aa:01:60:5e:d9:81:b4:58:
91:4d:8a:20:d0:52:36:51:9c:08:c5:98:e7:51:ea:19:cf:a0:
80:da:40:d2:6d:8a:1b:8a:76:d8:6e:95:5e:b5:ed:65:1f:b2:
e7:67:b0:70:d6:9b:fd:70:6a:e3:81:26:b3:4b:b9:1f:5d:d3:
f1:0d:0c:43:7a:4b:ba:26:5e:f6:ae:bf:93:cf:0b:4d:62:9b:
0d:13:74:3e:5f:fd:76:cd:5b:b5:12:3b:53:95:9e:f5:75:69:
fa:de:0f:7f:86:fb:7c:f9:0c:56:4f:4e:8d:56:95:2f:6c:be:
6c:75:56:4a:87:e4:20:cb:50:f8:0f:c4:d4:1b:a4:20:3c:31:
3f:a6:11:c0:10:38:89:6d:bf:19:3e:b0:55:44:8b:02:24:78:
58:5f:c7:8d:5e:cb:f5:44:88:f0:0c:4b:8a:1c:41:e7:62:f7:
a4:84:5c:67:77:e9:50:19:e3:52:bb:71:71:54:4f:c0:86:b8:
2b:02:13:5b:e1:78:bc:2c:41:d6:19:41:af:d3:8c:d2:0b:9e:
c0:e7:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:03 2025 by rpki-client