Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/z2fGzQ31BZryZ9mC47iiRsGFFxY.roa
File: z2fGzQ31BZryZ9mC47iiRsGFFxY.roa (raw, json)
Hash identifier: xAT+kzDKhqLYFeu1XIj5UqgLJgpNZOTNXzzdZAK1IhI=
Subject key identifier: CF:67:C6:CD:0D:F5:05:9A:F2:67:D9:82:E3:B8:A2:46:C1:85:17:16
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 70
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/z2fGzQ31BZryZ9mC47iiRsGFFxY.roa
Signing time: Sat 08 May 2021 04:05:40 +0000
ROA not before: Sat 08 May 2021 04:05:40 +0000
ROA not after: Fri 15 Apr 2022 01:30:01 +0000
asID: 4713
IP address blocks: 210.254.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: May 8 04:05:40 2021 GMT
Not After : Apr 15 01:30:01 2022 GMT
Subject: CN=CF67C6CD0DF5059AF267D982E3B8A246C1851716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:4a:d0:1c:db:cb:51:10:39:be:a4:c0:b4:
9f:23:e1:a0:bb:43:d1:19:d9:87:29:25:01:3d:86:
c2:f3:b6:2a:fb:79:db:e0:b7:76:e9:55:da:b8:a5:
d6:ff:a7:36:31:1b:f4:31:70:19:63:e6:82:f8:24:
a7:ed:c5:a2:46:4f:d0:3f:22:16:2f:64:e8:90:f3:
cd:6d:9f:05:46:29:2b:01:da:2a:1a:f6:b4:e6:b2:
ce:61:a5:c5:66:4c:d9:dc:90:86:34:db:b3:03:a2:
77:06:46:73:38:86:8f:6b:f7:04:10:14:d4:25:77:
9d:10:28:03:04:05:0b:fd:59:f7:96:08:7d:04:c0:
e4:bb:d4:84:60:ca:cc:2b:9f:53:7e:68:12:27:7f:
b9:4c:72:fe:f2:2f:25:ca:1e:b3:3f:fc:c2:e5:e7:
6c:d4:40:bf:6e:48:66:a7:31:be:6e:92:28:f7:82:
f9:4a:a3:b0:10:5c:24:44:d6:84:ee:94:5b:c6:25:
42:60:5b:aa:c5:e2:5a:dd:12:36:6a:b8:7d:66:7f:
af:ca:14:09:fa:ba:52:f2:41:49:55:a9:7d:bc:27:
f5:e9:d5:48:8f:f4:63:cf:83:5f:a5:71:1d:60:7e:
00:f0:44:75:d2:8b:83:6a:5a:a5:2b:03:90:85:96:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:C6:CD:0D:F5:05:9A:F2:67:D9:82:E3:B8:A2:46:C1:85:17:16
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/z2fGzQ31BZryZ9mC47iiRsGFFxY.roa
sbgp-ipAddrBlock: critical
IPv4:
210.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:58:d3:cb:6f:5b:b4:dd:3d:81:c9:43:5f:94:e5:b1:11:43:
c8:13:36:1f:8f:df:39:74:49:27:d9:91:32:a8:07:3f:d4:da:
1b:b7:cd:68:0f:17:3e:47:9f:1b:ed:d2:eb:45:89:09:5d:03:
b2:46:6d:07:a5:d4:b8:33:39:27:7f:bd:6c:44:1d:47:ec:c4:
11:c5:c4:04:0b:7d:5d:10:af:34:f7:c2:64:22:3b:65:e1:39:
c1:8d:c6:68:a9:3c:b9:e3:3f:44:3d:02:67:b0:76:a9:b8:10:
4c:8e:91:99:f6:5f:2a:a8:94:3f:cd:c1:b1:18:59:97:4d:18:
5a:8a:2d:91:12:2a:a8:35:15:dd:36:cb:ae:5a:bb:08:c2:64:
6a:34:8a:74:4b:c5:85:65:54:c5:13:db:aa:5f:9c:22:15:cf:
5c:12:ef:3a:38:90:0c:d5:43:aa:6d:fc:19:44:d9:ef:bc:ed:
8d:30:42:cd:26:a4:0b:af:79:49:59:fe:e4:06:6d:b7:d7:27:
a2:e0:f7:30:27:ff:a7:37:5a:74:c8:f3:61:e8:42:a4:02:4e:
05:1e:04:bc:25:4e:11:2d:ce:bb:27:28:b1:2b:af:ad:14:90:
17:a3:28:19:3f:5b:18:9b:36:33:c0:a8:cb:c2:55:3d:6a:b6:
12:a5:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org