Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/tkXUGSNtGy_6V-A_QQbQMzNnnJg.roa
File: tkXUGSNtGy_6V-A_QQbQMzNnnJg.roa (raw, json)
Hash identifier: KLSZ4bWJZiotG4KjEuS8Z9AelfWpMZ+SqRNubekwEiE=
Subject key identifier: B6:45:D4:19:23:6D:1B:2F:FA:57:E0:3F:41:06:D0:33:33:67:9C:98
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 7A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tkXUGSNtGy_6V-A_QQbQMzNnnJg.roa
Signing time: Sat 08 May 2021 04:05:42 +0000
ROA not before: Sat 08 May 2021 04:05:42 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 202.234.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:42 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=B645D419236D1B2FFA57E03F4106D03333679C98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:5f:b2:1c:d3:e1:a3:ac:8a:a8:69:be:fb:
61:5f:ab:ef:22:f4:4f:ea:99:16:a3:97:7e:08:e2:
7b:7f:12:96:54:1d:73:06:81:49:1d:38:18:9e:92:
6b:3f:f0:ee:04:32:e9:0a:4d:f5:bc:cb:db:8e:14:
36:f0:22:74:80:ec:7f:bb:7f:f6:fe:cd:99:0c:44:
6d:d0:c0:24:a6:72:d7:e4:52:30:33:8a:2d:de:ca:
b5:a9:32:2c:50:d9:bb:50:00:bb:3b:a9:01:b5:0f:
fc:0b:45:c7:3f:9b:42:c5:cf:ea:10:ee:3d:a7:01:
3e:06:d5:c5:30:b3:b5:79:65:f6:cd:ef:ac:5b:34:
3b:9c:56:fc:e3:cc:bb:ee:db:fb:87:ef:9d:2b:71:
43:35:4b:81:01:4e:64:ad:da:22:00:25:fb:ad:f6:
01:f7:72:36:36:20:7a:58:02:97:5b:60:dc:d4:e3:
a1:44:1e:e8:8f:50:dc:8e:2a:5a:88:23:ad:41:28:
1d:35:48:a1:7d:8b:2d:05:b6:dd:c0:3c:81:ed:5b:
7e:c1:2e:94:ad:fa:21:52:6e:6a:d6:67:61:05:7f:
51:97:41:77:6f:d4:b5:44:ea:b2:99:0c:95:01:50:
54:2f:3a:a7:b5:77:da:43:00:33:e6:1c:03:c1:09:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:45:D4:19:23:6D:1B:2F:FA:57:E0:3F:41:06:D0:33:33:67:9C:98
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/tkXUGSNtGy_6V-A_QQbQMzNnnJg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.234.192.0/18
Signature Algorithm: sha256WithRSAEncryption
28:80:bc:af:3a:07:33:3e:fb:52:86:98:0d:fd:e7:5f:70:af:
e6:1a:21:84:58:37:b0:9a:ee:1d:78:de:79:9b:fb:17:6b:28:
66:61:18:94:27:e1:d5:c2:66:d1:dc:15:96:4b:73:d9:2f:26:
49:0d:2d:67:c7:08:b2:3c:d5:61:6d:f9:78:45:ab:10:21:52:
bf:81:d9:56:33:44:a3:ef:82:42:1f:f5:7a:2f:15:a6:4e:e0:
cd:f6:4a:63:b9:89:1b:ef:1c:ff:2d:f6:6a:ae:cc:0b:51:55:
03:e8:aa:75:82:05:84:6b:09:5f:77:e1:60:2a:a7:5c:4b:ee:
a0:23:22:ca:d7:12:5e:d2:9a:04:43:8b:d4:9c:fd:a7:5c:b4:
2f:5f:32:2e:1c:83:9e:3d:bc:59:48:71:cb:4b:0b:55:c5:af:
10:57:83:f0:f0:f9:85:fa:b4:17:3b:6e:7c:af:46:39:15:06:
4a:09:7c:f6:1b:84:cb:c4:48:2d:19:25:30:54:39:74:19:88:
d8:31:bf:b0:c1:1f:50:d5:2e:84:42:b9:aa:50:c3:24:89:e1:
8b:11:f4:cd:42:87:8d:d9:1d:64:d2:aa:c1:14:b2:11:25:91:
82:68:f8:8c:ec:e2:a3:f6:c1:b2:06:ea:3f:52:a0:03:76:b9:
58:31:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org