Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/q0lXd4K7nLdCWk-M15skwBeirpw.roa
File: q0lXd4K7nLdCWk-M15skwBeirpw.roa (raw, json)
Hash identifier: AoOop1+X9QIOrBJyzDqsHvk2PFnaKjge4gfEzYD5NlQ=
Subject key identifier: AB:49:57:77:82:BB:9C:B7:42:5A:4F:8C:D7:9B:24:C0:17:A2:AE:9C
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 6C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/q0lXd4K7nLdCWk-M15skwBeirpw.roa
Signing time: Sat 08 May 2021 04:05:39 +0000
ROA not before: Sat 08 May 2021 04:05:39 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 211.6.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:39 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=AB49577782BB9CB7425A4F8CD79B24C017A2AE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:9b:7f:a6:c7:b3:62:a4:1a:1e:e6:f2:2f:
95:92:3a:b1:5e:15:99:e7:22:32:ca:ca:7e:5d:ba:
7e:08:93:8a:19:ff:9f:9d:b3:f6:f5:8c:fd:34:1b:
38:8e:4e:0d:06:eb:67:2c:95:6c:33:fe:65:92:a9:
00:88:ab:17:74:cb:ee:8a:8e:2f:63:3b:42:ec:3b:
09:58:c6:46:8e:d1:0b:d5:fc:ef:a8:b1:55:ab:e7:
26:84:d4:ca:b2:ec:97:89:36:e4:32:3c:dd:6b:e3:
54:ac:2b:c8:b5:b2:9f:f2:54:17:c0:fb:01:c5:e4:
b5:39:c1:30:1f:b3:60:d0:6b:ca:3b:37:64:09:1f:
19:10:3b:a3:63:09:37:e0:8e:1c:d7:1a:23:48:b5:
de:28:1d:54:13:f5:95:fd:40:ab:41:f2:84:3d:51:
bb:33:bc:cd:78:02:14:cb:78:fb:21:86:ef:99:d4:
9b:e7:6e:e5:2b:da:a4:db:c0:c1:d9:d3:a4:58:70:
3e:9f:85:c8:53:a9:f6:3f:46:02:4c:19:f8:ba:2a:
40:1d:1a:b7:cf:2f:db:d9:17:db:af:f8:31:63:e7:
f7:57:53:f6:30:d5:85:70:4a:56:25:1a:77:71:81:
38:4a:3d:33:f7:ed:f0:d3:bf:19:dc:04:33:a1:d5:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:49:57:77:82:BB:9C:B7:42:5A:4F:8C:D7:9B:24:C0:17:A2:AE:9C
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/q0lXd4K7nLdCWk-M15skwBeirpw.roa
sbgp-ipAddrBlock: critical
IPv4:
211.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:a6:17:49:d8:0a:74:75:76:81:0a:e1:32:0e:fc:b1:f2:ad:
c0:7e:7e:8f:fb:5a:f8:68:ca:e0:4b:bb:3b:d7:d6:ab:1f:f8:
4b:17:2d:d8:1a:a3:f8:e5:8e:d4:a3:0f:32:07:99:ad:de:b4:
02:7a:54:49:9a:ca:5e:7a:22:d2:d9:d7:69:92:08:6d:77:02:
6d:ae:cd:69:21:a7:fa:ec:e9:f3:cc:00:b7:09:1e:aa:75:01:
85:ff:35:0d:d4:03:7a:f0:4f:7e:07:2f:16:a2:94:df:fa:41:
24:9e:7f:8f:5b:e4:19:8f:b5:db:31:21:5e:2b:ac:90:7f:4b:
6f:c4:bf:69:a6:e1:7b:35:33:ee:c6:63:d3:13:f7:07:76:23:
b4:d8:60:4e:76:ca:a4:3e:16:81:ff:8f:69:b9:25:2c:b1:08:
b2:6d:b1:28:87:c1:41:4e:11:b6:63:f0:b3:b8:8c:24:bd:25:
b1:76:02:4f:50:b6:97:e7:fe:c9:c8:66:88:9e:c9:0c:e1:e8:
98:0c:db:02:11:ae:c1:9c:eb:ca:66:3e:d1:f7:72:b6:51:d5:
4f:30:5b:2e:1f:1b:23:ca:ce:d9:34:aa:9d:ea:e9:fd:73:36:
81:2c:e9:cc:44:68:51:8f:0b:c6:21:cf:f9:01:c3:04:23:0a:
b3:f0:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org