Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/nIR7-eO1r5gNwPaKiGIigY2w4vA.roa
File: nIR7-eO1r5gNwPaKiGIigY2w4vA.roa (raw, json)
Hash identifier: kfN3DfZ/QabmUE1gDf9x5EZEPDKGfHqT67gPtYrqlJ8=
Subject key identifier: 9C:84:7B:F9:E3:B5:AF:98:0D:C0:F6:8A:88:62:22:81:8D:B0:E2:F0
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 87
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nIR7-eO1r5gNwPaKiGIigY2w4vA.roa
Signing time: Sat 08 May 2021 04:05:46 +0000
ROA not before: Sat 08 May 2021 04:05:46 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 210.154.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:46 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=9C847BF9E3B5AF980DC0F68A886222818DB0E2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:1b:ab:56:0c:9f:00:68:cd:30:a3:f4:f4:
f0:69:02:ad:09:b8:18:59:47:1f:a2:ba:dd:8e:3c:
68:b9:07:04:42:e1:c1:15:54:ef:bd:11:49:9a:4b:
28:e8:1d:a8:c1:7d:71:58:c1:81:7d:74:3c:c3:5c:
35:06:43:52:90:b3:ef:a9:f2:f8:c0:07:03:41:8e:
0b:85:d3:fb:3a:ce:48:6c:bb:b5:c5:a8:1e:61:45:
a5:67:c0:27:d7:07:4d:cb:08:f1:d4:5f:de:e0:9c:
cd:31:44:31:b0:76:df:d2:cf:2e:bc:07:bc:77:96:
67:5e:12:c4:e3:cb:6b:ce:70:fb:b8:a2:2b:b0:e1:
6e:b3:29:ba:7b:19:19:b0:77:a5:04:a9:7a:ce:d2:
01:ef:92:5f:19:39:e7:ab:ee:3d:4d:e9:68:1e:b3:
7b:1a:64:4e:01:f4:10:b4:f1:a4:5d:d2:7a:c4:17:
42:71:08:4e:99:fb:0a:27:67:88:3b:3f:4e:96:bc:
a8:32:ff:8b:f4:1e:79:8f:38:c8:ac:b9:29:3b:dd:
9c:60:c2:30:24:6a:09:a0:fc:6e:e0:6e:ea:d2:2f:
59:69:60:79:c6:a3:98:08:ac:47:3c:21:b9:47:58:
3c:a9:ea:47:fe:b1:54:53:a7:d6:bf:4f:38:fa:45:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:7B:F9:E3:B5:AF:98:0D:C0:F6:8A:88:62:22:81:8D:B0:E2:F0
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nIR7-eO1r5gNwPaKiGIigY2w4vA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
dd:06:83:a5:63:74:80:64:ef:c1:06:76:27:52:f8:d7:d9:4b:
32:2c:9a:fc:34:15:3f:4a:cb:b3:a5:95:b8:4b:60:a0:bc:55:
d1:96:54:f9:6a:1a:63:b5:04:64:7e:95:93:71:ec:e0:0a:ae:
b3:ff:df:08:71:59:8b:56:68:c1:4e:da:82:45:28:c1:56:0e:
e4:ca:46:0e:90:b8:93:59:77:20:e4:aa:e5:6a:34:24:f8:90:
1c:bd:ee:8f:13:ce:03:1b:ae:40:5f:9d:22:bc:4f:2e:1c:7f:
54:c7:fa:d1:d2:a1:d3:22:90:5c:00:50:af:ca:53:05:7e:70:
98:5d:ff:10:6c:34:0b:78:d6:97:9f:eb:cc:1e:4d:f3:b1:6f:
bc:45:8b:18:a6:1d:55:35:77:3e:da:70:ce:bc:21:ec:9b:7e:
be:5b:7b:68:76:5a:c0:ff:c6:ac:22:33:1d:96:10:b4:52:d3:
e4:a6:87:f5:f6:80:c5:b3:ae:8b:21:86:f1:7f:7c:e1:8d:62:
4e:49:02:60:07:86:b3:1c:00:84:68:50:25:46:9b:95:8c:e7:
93:28:ee:6b:44:ab:d7:e6:3c:d4:a7:99:7c:b6:e2:32:21:41:
1d:68:24:7d:48:74:82:69:77:24:ba:c5:d9:b0:db:d2:74:dd:
96:c2:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org