Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/QsxRwmd-DO8H2Kb2UPCIa3Lm2to.roa
File: QsxRwmd-DO8H2Kb2UPCIa3Lm2to.roa (raw, json)
Hash identifier: nFAnT0EoHQMArDG4uKNhyEaACRWO08DmlJVpUpfMKD8=
Subject key identifier: 42:CC:51:C2:67:7E:0C:EF:07:D8:A6:F6:50:F0:88:6B:72:E6:DA:DA
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 5C
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/QsxRwmd-DO8H2Kb2UPCIa3Lm2to.roa
Signing time: Tue 25 May 2021 02:36:56 +0000
ROA not before: Tue 25 May 2021 02:36:56 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 202.124.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: May 25 02:36:56 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=42CC51C2677E0CEF07D8A6F650F0886B72E6DADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:83:00:45:14:e2:12:a7:b4:9a:36:f3:dd:
5f:d9:60:d5:33:30:8e:c9:27:e6:40:66:e3:5f:fa:
b9:cf:45:fa:ca:eb:1d:f1:65:19:94:b8:0a:55:cc:
36:40:70:54:45:9a:6f:c9:71:55:ff:6a:58:d1:38:
bd:7c:65:df:d7:bd:40:c9:92:af:56:f5:af:48:a1:
3b:c3:24:98:89:0e:66:2b:e0:73:bc:1c:4c:cc:fc:
94:25:a6:3b:d5:27:21:46:46:ad:5e:9d:47:91:c8:
6e:75:ef:a2:f1:5d:41:48:ae:ad:86:2f:c4:18:78:
a7:35:c7:5c:6d:27:6d:39:46:93:54:65:92:73:8c:
3b:8d:0a:6e:f2:c5:dc:d4:c2:a0:6c:ef:fa:ab:04:
3a:a7:8a:f7:b8:65:7d:2b:b5:0e:da:96:4a:b9:04:
b6:05:b9:32:04:4d:9c:85:6e:ce:9e:06:9f:09:6d:
38:81:cf:f1:ef:60:e0:16:43:62:79:73:31:f9:44:
06:1f:be:96:b3:5d:cb:ec:c4:ed:2c:67:97:70:e2:
9b:7a:de:96:47:3e:b9:ca:b0:1b:73:70:8e:3e:fe:
cc:d2:52:f9:93:69:71:ef:0e:f4:68:7a:13:ef:60:
e0:24:29:a1:14:dd:72:a4:a4:e5:c5:91:70:10:cc:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:51:C2:67:7E:0C:EF:07:D8:A6:F6:50:F0:88:6B:72:E6:DA:DA
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/QsxRwmd-DO8H2Kb2UPCIa3Lm2to.roa
sbgp-ipAddrBlock: critical
IPv4:
202.124.208.0/20
Signature Algorithm: sha256WithRSAEncryption
54:3c:2c:3f:81:9c:05:5a:2b:df:9a:bb:1d:91:38:f6:c3:d1:
74:83:8b:68:d1:db:83:53:09:61:20:a9:71:4c:fa:56:18:0a:
bb:f2:0e:dc:a5:8f:e4:00:52:bb:fe:fd:ab:39:fd:1c:70:d7:
8c:f0:77:90:db:62:64:62:dd:6b:58:3f:da:e8:57:4a:75:5b:
5b:ea:17:34:b9:51:b6:6d:0d:20:d0:3c:f0:e1:bf:10:2a:a2:
af:84:a3:bd:32:e4:9e:9a:67:9e:35:30:0e:ac:3d:88:0b:c4:
25:18:3c:3e:06:79:bc:31:59:d9:c1:9e:19:5c:18:0f:9d:27:
f6:07:b3:d1:cc:5a:ec:e1:8f:af:fd:1d:7f:42:f8:4f:57:95:
cb:a8:35:56:4e:74:86:ce:55:02:b7:7f:87:3b:13:a3:9b:9f:
21:6e:e5:e9:aa:7c:87:80:64:7b:5a:eb:77:3a:8e:20:88:61:
b7:32:58:0c:5e:0b:bb:ce:0f:d6:9e:33:34:c6:61:76:7f:7e:
80:01:60:e5:95:3c:56:54:7f:a3:c8:72:17:58:95:82:40:78:
dc:73:87:82:f5:a5:1c:a1:32:9f:b7:8a:f5:bf:d3:d5:92:44:
6a:90:7e:b7:af:64:b3:96:0f:ea:1c:a2:2e:b8:5c:d0:7f:2d:
99:76:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org