Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3gikpWayj2DSxHl-M5eRcNp929g.roa
File: 3gikpWayj2DSxHl-M5eRcNp929g.roa (raw, json)
Hash identifier: BTGr5ddDRsGp8YvMXgUYmxy2o/kNT/Qp9m0oFlrLm50=
Subject key identifier: DE:08:A4:A5:66:B2:8F:60:D2:C4:79:7E:33:97:91:70:DA:7D:DB:D8
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0197
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3gikpWayj2DSxHl-M5eRcNp929g.roa
Signing time: Mon 01 May 2023 01:30:32 +0000
ROA not before: Mon 01 May 2023 01:30:32 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 61.204.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:30:32 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=DE08A4A566B28F60D2C4797E33979170DA7DDBD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:ae:c9:4a:19:cf:a1:3d:76:40:49:9a:a6:
7e:c0:e0:7f:97:c8:6d:f7:ca:33:51:59:77:0c:35:
a4:dd:8f:20:19:11:01:5f:66:ad:86:30:40:7c:70:
68:e3:cb:6c:9c:fd:48:da:1d:99:62:fb:40:93:1b:
f3:06:20:e6:33:75:46:8b:14:0d:70:7b:60:a8:06:
40:35:52:5b:33:f5:6a:38:02:b0:74:93:08:fd:fb:
23:53:30:9a:7a:bf:bb:31:c9:f6:ac:92:35:01:f9:
84:58:ca:26:4d:2a:2a:60:b6:f7:45:79:e4:7d:e2:
e9:91:4d:f1:6d:d0:1e:45:e7:1a:bd:7f:ba:d3:4e:
71:09:91:3d:35:07:66:92:ab:60:ae:6e:41:bc:30:
f3:fc:a6:81:40:34:8b:f2:f1:1a:f7:a7:af:82:27:
cc:c8:f4:c7:ec:1e:63:14:13:44:95:16:a7:e1:5e:
64:9e:46:30:63:6c:44:54:6e:69:06:83:97:28:c2:
a7:8c:ce:b8:d9:f0:d4:80:fb:b8:a7:9b:4d:92:f6:
bd:09:87:87:6d:c3:2f:bd:36:ec:e4:6c:d0:83:97:
d7:83:10:b5:5f:a9:86:df:46:cc:2c:b5:bc:38:81:
73:77:25:b4:fc:33:85:94:fc:4e:4f:63:33:80:e0:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:A4:A5:66:B2:8F:60:D2:C4:79:7E:33:97:91:70:DA:7D:DB:D8
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3gikpWayj2DSxHl-M5eRcNp929g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.204.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5d:8f:dc:ec:53:bf:fe:90:36:8d:b1:bb:d6:1a:28:74:62:63:
d2:9f:96:09:98:8e:a2:91:69:8c:7c:d9:a5:89:9e:0a:d9:36:
ef:22:74:91:13:95:c5:5a:ca:74:34:00:c2:25:ac:1a:bd:5e:
ed:cd:52:e8:d3:28:20:5e:23:34:96:5c:12:dd:81:10:0e:69:
ff:c3:82:e2:0b:a6:b9:0f:d7:b0:e5:0c:ef:8d:bb:99:18:9e:
a4:6d:0e:c9:b1:1f:cc:1e:b6:a5:bf:10:03:38:6d:f3:71:8e:
e9:a5:a6:dd:9c:89:24:a0:52:f2:ea:2b:96:ca:b1:85:78:1f:
1b:05:7d:e4:f1:38:2d:49:96:c0:1b:d3:f2:bf:ed:bd:a7:78:
6b:bf:9f:cc:5d:3b:db:a2:8d:93:26:9e:6b:e6:1a:8f:db:bf:
d3:2a:46:12:df:98:ce:71:90:df:b6:0b:7d:54:9b:95:99:c1:
0d:62:c9:e1:0d:3f:d1:64:34:8f:f6:19:18:74:e0:ce:1c:04:
9c:1a:0b:bd:b0:b9:93:56:75:7d:45:b3:77:74:3f:57:4d:f7:
a8:6c:e3:83:d3:d0:39:b5:4d:27:ab:02:24:e1:85:a7:e7:ed:
db:ed:d9:d7:b0:db:1d:92:b2:65:29:0e:fc:e1:22:df:b1:33:
8a:7f:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org