Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/nkq98qs7Td0-GE5ijHpk215oerQ.roa
File: nkq98qs7Td0-GE5ijHpk215oerQ.roa (raw, json)
Hash identifier: IszB2OOTtMZLSahqaLMb5f8FbEjBDP8yEgL3gZwkOZk=
Subject key identifier: 9E:4A:BD:F2:AB:3B:4D:DD:3E:18:4E:62:8C:7A:64:DB:5E:68:7A:B4
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 7B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nkq98qs7Td0-GE5ijHpk215oerQ.roa
Signing time: Sat 08 May 2021 04:05:42 +0000
ROA not before: Sat 08 May 2021 04:05:42 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 210.248.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:42 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=9E4ABDF2AB3B4DDD3E184E628C7A64DB5E687AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:4b:19:3c:f6:43:1a:bb:1f:2b:ea:f1:1d:
91:f0:1d:b1:80:f6:c8:23:f2:26:22:fc:49:be:50:
66:b1:98:c3:6c:2d:af:39:f5:24:6a:0c:3d:e7:db:
31:49:38:49:24:ba:70:c4:ba:db:30:b4:7c:a6:f3:
d1:9e:c8:3b:19:a1:79:fe:ac:89:79:c2:c4:7d:ce:
7b:09:ed:21:23:37:05:bf:ae:b5:57:c1:5c:29:d0:
f5:bf:3d:a5:2c:56:9a:b6:b8:61:13:9f:85:32:ad:
70:2f:52:fd:61:ab:eb:be:03:1f:5c:62:0f:93:29:
09:cf:b7:0d:ac:f4:6c:6c:8a:0f:18:77:b6:93:b0:
78:d1:13:4e:1c:67:97:6a:4e:d0:c1:09:a4:29:55:
bb:f2:f0:15:f1:43:d1:39:15:eb:22:2f:44:f1:59:
7b:b1:94:6c:c2:eb:0b:6d:7d:16:d0:1b:4f:f8:bb:
03:23:62:2c:6c:d4:92:e7:fb:84:1f:3b:ed:9b:1e:
38:30:d1:54:2b:33:96:0e:d5:f4:31:16:d9:ad:3b:
b4:3b:95:bf:2f:6d:a0:42:78:d5:1b:14:1a:02:54:
9c:21:59:be:a7:37:1b:9d:1c:2c:42:a9:a8:c3:0a:
a7:63:de:2d:b3:07:77:1b:04:71:ac:4a:b1:15:af:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:BD:F2:AB:3B:4D:DD:3E:18:4E:62:8C:7A:64:DB:5E:68:7A:B4
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nkq98qs7Td0-GE5ijHpk215oerQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:23:7b:76:4f:9d:08:32:aa:bd:ec:a9:1a:e4:8b:df:a1:2b:
85:80:81:73:da:fb:dd:28:e7:b1:7c:5a:d5:14:77:a5:ee:31:
7a:89:b8:3c:e7:cd:cb:7b:6b:a5:54:18:e8:93:7d:88:9c:58:
a0:df:8f:a7:21:27:2c:19:05:98:80:fa:51:05:9a:94:2a:f9:
85:83:f0:13:71:7c:e1:98:21:d7:21:53:df:c0:3c:c3:0f:8c:
23:41:bb:b0:83:7c:58:93:9c:ab:12:7e:16:40:62:a4:bf:4c:
08:8a:ea:90:c2:e3:fa:58:cf:d8:cb:4b:8e:26:f2:bb:14:1c:
99:f6:ff:c4:32:f2:11:0c:7b:d7:cb:ff:ac:a2:a2:b5:78:55:
6f:c2:e3:aa:f5:38:cb:0b:6a:da:e5:35:a4:c9:f8:2c:95:90:
9a:68:69:c1:02:a7:fc:da:b1:8f:f6:f3:1d:c0:f5:a6:27:6c:
ae:21:79:d5:f6:a7:96:35:d6:a7:d3:7a:06:41:ae:3f:15:96:
e2:d7:c6:2f:8e:a4:91:85:1f:2c:4d:15:13:73:53:11:42:1c:
33:52:09:cb:56:d1:6d:29:fc:2f:09:a2:3c:06:16:82:83:7d:
32:a6:df:54:e7:47:0c:86:0d:c7:c2:53:83:d1:b4:be:26:55:
07:ab:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org