Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/uTerrLYjG4UzW_oHzVcC6Q7sE6o.roa
File: uTerrLYjG4UzW_oHzVcC6Q7sE6o.roa (raw, json)
Hash identifier: h+jIq7iMAbI8BX+k/8R21meRi96rJw0ixkZQm4Cy/YA=
Subject key identifier: B9:37:AB:AC:B6:23:1B:85:33:5B:FA:07:CD:57:02:E9:0E:EC:13:AA
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 71
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uTerrLYjG4UzW_oHzVcC6Q7sE6o.roa
Signing time: Sat 08 May 2021 04:05:40 +0000
ROA not before: Sat 08 May 2021 04:05:40 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 125.172.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:40 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=B937ABACB6231B85335BFA07CD5702E90EEC13AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:fa:e6:2b:aa:db:7b:3d:6c:df:bc:c8:ef:
87:b6:d0:0a:c4:23:ab:38:34:fe:a9:37:2d:17:da:
f2:1f:87:0e:4c:34:09:1a:45:21:e0:cc:66:92:df:
b6:5a:c6:54:91:52:da:11:0f:ad:95:95:bc:da:ab:
40:8e:3c:67:52:3f:6f:59:5b:6a:47:b8:37:8e:f4:
fa:ed:ba:1f:16:b3:16:8c:9a:81:b3:78:18:b6:ab:
94:10:30:96:1a:48:66:c3:52:4f:24:9e:a1:e5:bd:
2d:c1:18:65:d5:d6:4a:bf:df:bf:23:28:6b:bb:a2:
84:ab:ed:21:64:82:fc:07:f6:1b:28:4b:08:fd:cf:
b7:21:76:a6:e6:fd:c6:1b:07:2f:0b:d8:77:5b:09:
9d:53:21:26:45:1c:a2:0d:2b:12:f5:f2:f0:01:1f:
11:e6:e2:69:c0:ef:ee:18:03:79:42:41:3a:d4:58:
fe:80:6d:4c:f5:84:51:77:09:16:96:1a:60:fa:cd:
af:8a:5a:31:63:50:a9:50:e7:6e:af:c0:fc:55:91:
19:6d:c3:82:78:dd:8c:2f:8d:3a:e0:9d:8c:6c:9b:
e1:43:f5:a4:2b:5d:c1:70:48:09:d2:79:f6:d7:13:
23:f1:af:fc:fe:a2:d1:5b:e0:b7:66:ba:d3:78:d8:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:AB:AC:B6:23:1B:85:33:5B:FA:07:CD:57:02:E9:0E:EC:13:AA
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uTerrLYjG4UzW_oHzVcC6Q7sE6o.roa
sbgp-ipAddrBlock: critical
IPv4:
125.172.0.0/14
Signature Algorithm: sha256WithRSAEncryption
d9:92:bc:dc:e5:8a:d2:0b:eb:72:b9:63:a8:63:6a:29:83:25:
e4:33:e3:c4:5d:0e:e3:cb:a2:0f:5d:21:7d:6a:c7:3a:ad:a5:
f2:d4:87:f9:55:5e:f0:43:d2:82:4a:3f:f9:3d:c7:84:f8:76:
96:6a:cb:a7:66:1c:28:98:54:55:33:a2:b3:21:34:f7:b4:bb:
29:e1:2c:a4:23:6a:4a:41:f2:44:dd:88:06:c7:d0:35:0e:25:
e1:4b:32:d7:5a:e3:03:ed:05:7c:c4:53:bb:62:fd:96:bc:8b:
a6:af:ea:e4:24:da:01:0f:f3:7a:cf:c3:52:23:60:8b:26:a8:
4e:d1:dc:0b:ae:76:6e:38:bb:cd:24:fb:59:2c:a7:9f:d1:de:
11:96:54:5a:53:c3:c4:85:49:19:f6:94:85:28:a3:44:58:1d:
d1:a8:b1:df:cd:57:72:a6:03:20:75:bc:fa:c8:69:12:c8:e8:
cb:22:90:63:00:d9:3b:a6:b3:06:6e:95:5c:b8:67:e8:f5:9d:
9b:bc:72:a7:20:5a:7f:58:28:52:12:37:6c:10:96:96:a0:6b:
83:a8:f3:ec:6b:68:41:94:7a:7a:27:fe:9a:2d:e3:b3:9b:2d:
96:ba:3c:32:3a:08:6c:d0:73:dc:88:f7:c5:92:d6:bf:12:cd:
ce:eb:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org