Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/baBpQwxRsgsOJ6IxIfvP0eDoq54.roa
File: baBpQwxRsgsOJ6IxIfvP0eDoq54.roa (raw, json)
Hash identifier: 7L51Vz2b+d7iuYGUI0Q51gBcDu/46GMV2FqpXwF9MxQ=
Subject key identifier: 6D:A0:69:43:0C:51:B2:0B:0E:27:A2:31:21:FB:CF:D1:E0:E8:AB:9E
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 65
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/baBpQwxRsgsOJ6IxIfvP0eDoq54.roa
Signing time: Tue 25 May 2021 02:36:58 +0000
ROA not before: Tue 25 May 2021 02:36:58 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 218.216.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: May 25 02:36:58 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=6DA069430C51B20B0E27A23121FBCFD1E0E8AB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:ac:f7:00:0f:3b:1d:16:b8:ce:e4:b7:ae:
f1:e2:78:47:2c:51:cc:79:3a:06:20:eb:46:3c:6f:
72:d6:5d:73:b5:c6:6e:68:99:42:68:7b:54:78:f0:
fc:7b:40:74:34:b5:98:9b:2b:c1:f1:13:ef:07:71:
9f:d0:02:05:1b:41:74:95:86:8b:65:0a:e1:d3:54:
00:d3:8f:43:bc:04:66:ec:e3:b6:f0:da:3b:70:ad:
67:e8:84:2f:7f:af:42:a0:39:10:6a:3d:61:3c:2d:
e2:d7:42:54:48:4b:d9:01:9f:11:40:1e:46:54:9e:
54:d1:fb:eb:4d:1f:b2:06:7d:5d:b0:65:a0:cc:64:
7e:50:a7:e6:38:59:8c:79:8d:32:7a:36:b8:ce:49:
1b:a5:f9:7c:00:c6:b6:6c:cf:41:46:cd:7a:53:86:
30:ea:32:ae:69:50:ef:50:d2:c6:11:8f:78:e1:c1:
57:85:89:ec:c1:37:a4:b5:83:d7:82:ec:69:ee:d6:
92:04:89:06:0a:92:4c:28:ff:8d:41:bd:31:d6:3b:
ae:58:fc:ce:91:dc:94:ad:2c:17:28:c1:d5:d5:00:
af:24:f6:10:61:9c:e9:67:48:85:c4:ee:66:1c:98:
d8:83:fd:e0:ca:7d:ca:31:b1:45:1f:17:d5:5b:74:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A0:69:43:0C:51:B2:0B:0E:27:A2:31:21:FB:CF:D1:E0:E8:AB:9E
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/baBpQwxRsgsOJ6IxIfvP0eDoq54.roa
sbgp-ipAddrBlock: critical
IPv4:
218.216.176.0/20
Signature Algorithm: sha256WithRSAEncryption
28:f0:fe:f2:6e:1a:ba:60:3a:9f:88:f6:40:ac:67:33:12:84:
e5:8e:a9:82:cb:b9:7f:2b:25:6f:7d:4a:c9:55:b9:65:07:85:
d8:0b:83:f9:da:67:cb:73:9a:50:66:e4:ca:9a:0f:46:b8:f9:
91:4d:b0:25:b7:38:31:4f:7f:5b:c5:ba:a1:d1:6a:4c:8b:cf:
52:20:18:98:c4:e0:db:25:a8:57:d3:a9:60:05:13:90:7d:f9:
36:ba:56:99:ca:52:10:82:13:ad:ea:a6:5e:c6:79:96:49:22:
95:16:3f:1f:0b:86:68:37:15:e9:5c:bd:dc:4e:6c:43:b4:09:
7f:8b:67:27:8d:62:53:e6:0a:69:3e:f9:ee:3f:b0:5f:9d:4a:
32:cf:8c:a6:6d:ec:d5:c0:20:8d:40:d1:df:e0:4b:20:54:2f:
a5:7b:fa:bb:dd:98:d7:a4:72:09:ec:35:1c:42:2d:e1:df:77:
46:6b:60:ec:2c:88:8d:1e:2a:24:9d:11:c6:49:88:57:83:6e:
eb:8f:8e:ae:93:bd:46:1b:07:8f:68:16:b1:2a:99:68:04:20:
e4:3f:81:db:70:6f:61:c1:b2:25:bd:fe:91:2b:9a:73:4e:95:
9b:c6:9f:9b:a6:52:98:c8:6f:18:21:8f:7d:eb:fc:c6:a9:eb:
00:ed:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org