Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/Q3xp8eu7JnQY-C7mNcERbT9HLC8.roa
File: Q3xp8eu7JnQY-C7mNcERbT9HLC8.roa (raw, json)
Hash identifier: MhZYEtj9j9V0nVJoBs9KCzfphGWnappQ2FXtWO4hNh0=
Subject key identifier: 43:7C:69:F1:EB:BB:26:74:18:F8:2E:E6:35:C1:11:6D:3F:47:2C:2F
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 60
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/Q3xp8eu7JnQY-C7mNcERbT9HLC8.roa
Signing time: Tue 25 May 2021 02:36:57 +0000
ROA not before: Tue 25 May 2021 02:36:57 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 203.209.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: May 25 02:36:57 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=437C69F1EBBB267418F82EE635C1116D3F472C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:81:4f:c2:c7:7a:08:67:e6:6b:a2:33:16:
08:aa:0e:51:03:84:1b:cb:76:15:29:95:a7:a8:f2:
3c:e4:fb:da:5d:fc:55:2a:ba:fb:d2:46:71:5c:d7:
1d:30:77:57:8f:df:93:5d:f0:7a:1f:5e:1a:41:02:
7c:7b:e0:3b:19:86:41:8c:ae:56:43:ae:b8:1f:d6:
6c:95:22:79:c7:45:7b:7b:08:22:36:b3:6e:8b:d5:
66:eb:e2:2c:62:7f:1f:52:c0:cc:3b:c5:e3:20:6b:
27:bf:5b:8b:d2:38:dd:ab:ad:cc:ca:45:ff:c1:42:
f6:5f:a2:f0:a1:63:39:04:72:d3:88:34:f0:db:52:
d4:29:e9:91:e1:e0:33:b6:1d:86:16:95:6f:ef:db:
77:36:f8:b7:95:57:21:ff:d6:98:7a:5d:c5:d9:5f:
3d:00:3e:b3:9b:58:ba:83:fd:4b:fe:45:08:54:fa:
59:f5:cd:f5:8e:e4:a7:74:3e:2e:6d:fe:e2:14:5c:
e4:16:0e:9f:6b:f2:cc:dc:a7:6e:e6:b2:95:84:cf:
f8:63:6a:93:02:3e:de:2b:a2:80:eb:e3:c2:84:72:
c1:96:8a:c9:23:49:9b:78:76:c3:01:fa:f4:4b:b4:
ac:dd:d0:24:e7:3e:7b:8c:0a:96:9f:0c:42:4d:82:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:69:F1:EB:BB:26:74:18:F8:2E:E6:35:C1:11:6D:3F:47:2C:2F
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/Q3xp8eu7JnQY-C7mNcERbT9HLC8.roa
sbgp-ipAddrBlock: critical
IPv4:
203.209.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:bf:2c:ca:67:53:cc:ce:5e:74:b8:e8:2a:50:8b:16:af:51:
a5:35:27:ce:ef:e6:65:50:f8:be:c0:ec:76:fb:97:1d:cd:44:
93:c1:c7:b0:4e:b9:e2:e1:b9:93:53:93:22:27:ed:b6:67:aa:
d0:b1:b0:a8:cb:bd:ba:47:10:87:1d:7a:56:7f:51:d1:22:60:
ad:63:dd:86:4b:4e:2b:a8:5e:15:6f:4c:00:a1:61:bb:32:71:
88:68:13:d4:5c:c9:c6:d9:ec:45:8a:3f:f2:30:1d:f7:1f:c6:
85:f6:ab:09:b4:fe:f5:2e:f2:69:f4:27:86:e3:c7:66:0e:aa:
f5:8c:88:17:eb:95:66:a2:8b:23:0d:65:34:f5:fd:45:e1:fb:
10:d6:35:ff:5a:18:54:07:9e:3b:13:a5:15:d2:71:3e:53:03:
c5:ee:19:c5:dc:77:f2:96:8c:64:90:59:17:9a:48:a1:23:0b:
62:b7:0d:35:76:e6:24:87:96:26:87:b8:a3:fb:84:14:cb:20:
8a:d7:95:f5:32:9b:3f:32:a9:2f:ea:c6:ab:c9:87:50:ae:56:
6d:0b:7e:4e:59:64:a6:50:b0:4a:e4:7f:9a:a3:ba:fc:46:7f:
d9:fd:e5:e3:ba:a8:51:04:b8:eb:f3:c7:0e:e2:e1:cb:f0:29:
b1:ce:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org