Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/gG_vkDI2yJVrnJQp2A5B0YJ2XLU.roa
File: gG_vkDI2yJVrnJQp2A5B0YJ2XLU.roa (raw, json)
Hash identifier: NwYL5RBjyfPMcXeASW3MWGBiehklu6S/46/R3vuk6YM=
Subject key identifier: 80:6F:EF:90:32:36:C8:95:6B:9C:94:29:D8:0E:41:D1:82:76:5C:B5
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: 5D
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gG_vkDI2yJVrnJQp2A5B0YJ2XLU.roa
Signing time: Tue 25 May 2021 02:36:56 +0000
ROA not before: Tue 25 May 2021 02:36:56 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 223.29.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: May 25 02:36:56 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=806FEF903236C8956B9C9429D80E41D182765CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:d0:15:fe:0c:b1:ea:c5:f4:d5:de:d2:b2:
61:3e:d1:59:b2:9f:7d:bf:23:3d:39:b4:5a:92:c8:
d6:c2:e7:60:3b:34:91:81:40:68:11:05:d4:62:68:
f9:bd:b5:45:b6:a6:fb:08:d8:6e:a1:d3:ed:6a:f2:
fc:91:ee:12:c7:d8:16:d4:3c:54:eb:7a:93:ae:79:
9f:d8:27:98:18:18:b0:7f:31:44:78:a9:96:60:5d:
36:d3:3f:cc:94:97:cf:61:13:6f:af:b2:04:10:8d:
59:10:db:8a:59:1b:7b:98:93:a6:44:a8:88:54:5a:
87:ee:2a:f0:ce:c7:cc:ef:2d:34:b5:e8:e2:b4:a8:
6d:5d:8f:ea:29:5e:88:2d:6c:a7:fa:81:fb:dd:83:
6c:79:ad:0c:9c:68:aa:b9:f2:c7:e2:87:9b:1e:65:
8b:c0:cd:cf:22:a6:67:bf:fc:e8:7e:83:79:3b:47:
4e:e2:fb:ee:87:79:3f:79:68:e8:1b:12:63:cb:34:
95:75:e4:08:bf:e4:51:c0:53:3d:65:e7:0d:c8:ba:
42:77:7b:2b:b4:d1:12:9e:84:5c:0c:66:0b:13:76:
36:ac:c8:58:c9:64:f3:a2:35:c2:df:4a:6e:74:9f:
81:07:84:b8:d4:f2:da:28:61:fd:c5:a6:c7:f8:12:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:EF:90:32:36:C8:95:6B:9C:94:29:D8:0E:41:D1:82:76:5C:B5
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/gG_vkDI2yJVrnJQp2A5B0YJ2XLU.roa
sbgp-ipAddrBlock: critical
IPv4:
223.29.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5a:70:0d:a5:d0:3d:bb:90:18:1b:09:fb:53:59:f0:a9:b1:74:
8a:a8:a7:cc:31:d8:f1:d1:58:fd:fe:2b:fe:20:d3:65:cc:60:
0a:0c:bb:ef:78:06:7b:90:5e:c8:b5:b9:b5:7f:bc:4b:45:7e:
65:32:e2:ab:27:bd:71:75:f6:45:fe:08:90:ed:da:67:61:d0:
7b:7f:eb:d0:5f:e5:dc:94:6e:ee:a6:8a:9d:8c:bb:ef:ea:7a:
e6:1c:57:35:5b:b8:6f:f5:75:a5:4b:13:03:d2:7b:1d:e5:54:
63:b9:78:8b:52:2a:19:1c:fc:3b:aa:fb:29:87:bb:a3:45:16:
82:d6:2e:c1:93:a7:05:00:b0:db:bb:4f:b1:5f:82:a3:6b:7f:
f4:8b:5c:f4:f7:13:61:70:33:19:af:ec:7d:38:26:17:b3:88:
e5:af:30:84:b3:56:71:ce:4b:ff:66:b3:3a:7e:28:de:e7:3e:
ca:da:60:26:3f:18:ad:97:80:67:e6:eb:32:7e:09:92:d6:66:
a9:49:b6:e5:b1:af:95:c0:4f:dc:cf:04:9b:64:22:7c:f3:09:
55:98:aa:4a:ec:a3:4f:c1:a9:d4:66:db:7d:c9:6a:87:30:4d:
76:87:9e:1a:10:e9:78:b7:fc:14:bf:23:11:be:d4:91:7d:e5:
41:0d:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org