Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/g-9GlG492WB0THCC29UfpkPydjg.roa
File: g-9GlG492WB0THCC29UfpkPydjg.roa (raw, json)
Hash identifier: PgtGAV0p0PfAYKv31EXKf69BFl5vm5yC+4kAAPaP4nw=
Subject key identifier: 83:EF:46:94:6E:3D:D9:60:74:4C:70:82:DB:D5:1F:A6:43:F2:76:38
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 66
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/g-9GlG492WB0THCC29UfpkPydjg.roa
Signing time: Tue 25 May 2021 02:36:58 +0000
ROA not before: Tue 25 May 2021 02:36:58 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 202.124.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: May 25 02:36:58 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=83EF46946E3DD960744C7082DBD51FA643F27638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:5e:28:f2:ad:bd:14:25:e9:42:8d:c8:93:
cb:85:ec:0d:87:c6:ff:dd:8c:8c:65:1e:00:85:34:
c7:20:98:ba:62:d3:f0:5e:c2:e8:7c:eb:04:31:e8:
df:af:07:6a:f3:97:65:59:fe:02:4c:98:ca:36:44:
3a:7f:ab:f3:d9:1c:9a:5d:a0:84:67:5c:a4:31:5e:
e0:2b:f6:12:b6:3a:a0:e3:5e:76:7f:4e:29:d3:bf:
ca:61:e5:c3:71:ca:77:53:5e:af:5c:fc:51:15:46:
61:5e:01:b1:23:a4:10:d1:5c:64:78:0f:31:9e:40:
3e:c4:ff:7e:8f:b1:4e:3c:fe:80:96:91:a5:64:97:
7f:0b:d2:57:89:73:60:ab:da:fe:f1:c9:aa:6b:ca:
cb:a8:87:bd:5c:99:70:f6:c2:4b:1d:07:a8:53:51:
10:83:09:2b:ab:70:17:7e:2e:12:96:3f:c4:1f:74:
d3:fa:3e:bc:83:83:67:d3:91:ca:c9:d9:21:1b:3a:
a5:eb:4b:9c:7f:d3:24:e5:d0:b2:fc:93:5a:87:f0:
ef:0e:1d:ea:df:30:37:1e:02:32:18:e8:20:c1:ce:
f1:8f:f7:bf:15:65:2a:11:59:79:c6:73:70:a3:54:
3b:8c:d9:74:fa:da:40:90:a4:48:1d:f8:96:dc:c5:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:46:94:6E:3D:D9:60:74:4C:70:82:DB:D5:1F:A6:43:F2:76:38
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/g-9GlG492WB0THCC29UfpkPydjg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.124.0.0/20
Signature Algorithm: sha256WithRSAEncryption
72:5e:6e:96:3d:76:0b:90:bf:49:0c:5c:f7:cf:0a:33:bf:4e:
d0:48:76:98:e1:28:4e:6c:67:3f:55:5f:b3:38:de:b5:7e:e2:
32:cf:65:de:34:f0:9e:36:d3:7e:56:b9:1b:85:e5:08:93:3e:
9c:36:21:29:97:3b:66:15:a0:57:e8:dd:32:fc:f0:e2:d3:b3:
20:81:30:41:24:ad:5a:7b:3d:fc:be:a7:aa:b6:38:fc:3e:d9:
30:e8:18:7e:96:aa:a9:68:92:b4:43:d8:e9:d3:d2:35:54:fe:
a1:7d:f6:b7:2d:69:79:00:66:78:5b:22:67:62:eb:a7:81:9e:
4e:2f:a6:1b:5a:d6:0d:a7:9b:8e:d0:13:f7:64:7c:31:f3:b5:
18:fc:cf:d5:09:ca:79:9f:d3:13:87:23:8b:ac:49:21:96:77:
c7:37:ef:f0:9d:e5:53:96:bf:71:cb:3c:bc:be:64:59:ed:7d:
61:40:23:42:89:81:88:a9:55:47:9d:63:6a:b6:e4:47:b5:44:
2a:9c:e9:ea:55:0b:5f:33:f4:b7:e3:ab:f3:2f:f4:9d:6c:f1:
e2:7f:6b:c1:e1:83:6a:66:b4:23:b0:3a:75:48:a0:09:4f:c4:
21:9e:be:9d:84:74:f7:d3:22:31:34:a9:42:e9:d2:13:b7:6d:
80:78:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org