Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/7DrGHdUn4oO1BMM81wKFOR1x3Ws.roa
File: 7DrGHdUn4oO1BMM81wKFOR1x3Ws.roa (raw, json)
Hash identifier: ZJUeOvn6mehKU6F8J770qxU7aRPluoJ+TOOW8MLEU2w=
Subject key identifier: EC:3A:C6:1D:D5:27:E2:83:B5:04:C3:3C:D7:02:85:39:1D:71:DD:6B
Certificate issuer: /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial: 1A
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/7DrGHdUn4oO1BMM81wKFOR1x3Ws.roa
Signing time: Tue 25 May 2021 02:31:52 +0000
ROA not before: Tue 25 May 2021 02:31:52 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 58785
IP address blocks: 157.118.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Validity
Not Before: May 25 02:31:52 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=EC3AC61DD527E283B504C33CD70285391D71DD6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:d0:9c:6d:9e:b3:2c:de:01:ff:fc:a7:f3:
51:4d:86:64:2e:6d:77:1b:ac:7a:37:3b:0c:0f:09:
9e:16:d3:68:cb:b8:02:e0:0f:91:10:e0:66:58:85:
0f:17:23:0e:85:c7:5e:a1:1a:bd:77:78:d7:28:58:
01:29:72:05:61:a7:ec:5e:d7:46:d0:0d:1e:f8:a7:
58:31:b9:1d:63:44:c1:bc:e8:cd:7c:40:0e:77:5a:
8d:6d:9d:81:f0:2e:68:2c:79:53:3d:20:c4:33:eb:
64:ab:f5:4c:4d:d0:dd:71:45:12:a7:74:ab:8d:9d:
b3:57:10:b1:cd:1e:9f:95:d7:ab:d7:fe:ab:c9:c4:
ad:aa:dc:02:02:f1:55:29:1e:c3:3d:54:93:fa:1e:
57:64:c2:fc:21:3b:39:18:b3:9b:7b:cb:74:2d:69:
1e:44:92:34:ba:6d:d0:d4:a7:21:d3:cf:b0:8a:9c:
67:bd:e4:fe:27:61:61:02:dd:cc:ce:44:64:5f:62:
20:66:55:1c:de:78:13:be:b8:4c:93:95:ef:d6:fe:
9a:df:40:2d:e3:29:ef:67:76:51:3b:46:9f:4a:a6:
a9:51:1e:b1:4d:2d:c5:4a:ab:9f:b8:5e:07:63:49:
ae:48:73:91:e6:cf:b0:27:62:d7:49:3e:bb:ea:3d:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:C6:1D:D5:27:E2:83:B5:04:C3:3C:D7:02:85:39:1D:71:DD:6B
X509v3 Authority Key Identifier:
keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/7DrGHdUn4oO1BMM81wKFOR1x3Ws.roa
sbgp-ipAddrBlock: critical
IPv4:
157.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:2b:31:7b:00:82:12:30:80:29:b7:56:55:cc:42:50:93:c2:
4e:d8:6e:06:74:71:dd:44:79:c0:be:e5:6b:b0:1a:7a:25:8c:
4d:6d:bb:14:8e:a5:4c:cb:f1:33:c7:44:98:12:22:15:e6:21:
82:7d:dd:a7:8f:77:af:cd:91:f7:36:b1:e3:98:86:9c:16:11:
e2:ff:76:94:1c:25:a3:23:9a:37:d1:63:79:fa:f7:36:b7:84:
32:c8:f6:cd:3b:8a:4d:f3:ed:28:59:9b:b3:de:3f:15:50:cf:
46:6b:75:97:08:86:d2:1c:15:bc:3f:e4:3d:2e:cc:4a:7c:f4:
23:81:2e:18:cd:df:2d:46:f2:71:55:ee:ee:08:cc:f0:62:11:
6e:a5:4c:10:bb:16:d6:36:37:8e:ac:64:f4:0d:1f:52:00:49:
b8:69:2f:59:0b:24:ee:a7:b9:ee:8a:37:c0:3e:28:67:63:76:
db:0c:e3:cb:e0:68:80:c0:39:7e:b0:5e:2f:99:04:10:fa:95:
94:46:06:73:8e:59:87:1a:3e:33:67:dd:5c:91:a4:65:84:83:
46:68:f3:e9:5c:6c:d9:47:d4:04:9e:4f:1f:c9:76:48:74:85:
6e:0a:70:2d:be:f8:f2:67:b5:6e:66:05:5f:ef:46:30:54:22:
d5:bd:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org