Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20157/bLEKl2JstUOW4v4NVzUN3n7xaOk.roa
File: bLEKl2JstUOW4v4NVzUN3n7xaOk.roa (raw, json)
Hash identifier: OuXqXuAqRv0q/M6+NeJRQYRjVQORwHAxKtE/Z2w5IjI=
Subject key identifier: 6C:B1:0A:97:62:6C:B5:43:96:E2:FE:0D:57:35:0D:DE:7E:F1:68:E9
Certificate issuer: /CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
Certificate serial: 02
Authority key identifier: 18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/bLEKl2JstUOW4v4NVzUN3n7xaOk.roa
Signing time: Thu 29 Jul 2021 09:42:23 +0000
ROA not before: Thu 29 Jul 2021 09:42:23 +0000
ROA not after: Fri 29 Jul 2022 09:27:26 +0000
asID: 63791
IP address blocks: 103.169.144.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18F238733A76CE92ED3860F2CCB688D8AD2BDF8C
Validity
Not Before: Jul 29 09:42:23 2021 GMT
Not After : Jul 29 09:27:26 2022 GMT
Subject: CN=6CB10A97626CB54396E2FE0D57350DDE7EF168E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:23:0f:29:9d:b3:df:76:c5:c5:71:cd:80:
7d:3d:fa:66:c5:ca:5a:82:4b:1f:40:8f:4c:55:47:
df:8b:be:05:9c:f7:0d:06:4c:f9:ae:fc:05:d1:8e:
72:79:6b:15:f1:9f:af:d6:11:0d:1e:2f:27:a5:d7:
11:49:f9:a0:5c:79:1b:0b:b1:41:40:9e:c1:b6:ab:
a1:d2:77:36:54:55:ef:10:38:b6:fd:62:05:5e:56:
9c:19:c2:79:31:98:ed:a4:09:1b:d0:c7:06:a3:46:
20:8d:06:cf:bc:5d:a3:93:5e:7b:aa:52:46:a5:9c:
83:2c:97:b2:6d:e1:29:72:45:33:97:5c:4d:37:41:
1f:ca:f7:ff:67:08:55:65:5a:e8:79:1a:de:78:ae:
7f:73:55:b3:be:a0:37:af:86:f6:d9:c2:0e:33:54:
5b:0d:be:7b:7c:c7:7e:f9:a9:2e:ec:e3:27:47:5a:
b8:5b:6a:22:63:55:9e:55:eb:64:22:2d:fd:fc:f8:
71:b3:c9:bf:d8:78:e4:d5:1a:cf:30:70:b7:d8:9e:
62:6b:40:01:78:a3:b9:95:37:8e:df:d2:4d:2c:39:
61:84:d4:c7:6a:c5:48:89:32:0a:64:74:ec:fa:bf:
1b:eb:be:e9:2e:1c:96:f9:cb:cc:9f:b7:9e:c8:ac:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:0A:97:62:6C:B5:43:96:E2:FE:0D:57:35:0D:DE:7E:F1:68:E9
X509v3 Authority Key Identifier:
keyid:18:F2:38:73:3A:76:CE:92:ED:38:60:F2:CC:B6:88:D8:AD:2B:DF:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/GPI4czp2zpLtOGDyzLaI2K0r34w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GPI4czp2zpLtOGDyzLaI2K0r34w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20157/bLEKl2JstUOW4v4NVzUN3n7xaOk.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.144.0/23
Signature Algorithm: sha256WithRSAEncryption
55:98:22:d3:03:ba:7d:f6:64:6f:7f:b9:7a:81:33:a9:5e:c1:
8f:08:23:0f:8f:44:c8:cb:85:51:1b:9c:1b:4f:a1:cc:f0:ff:
23:4e:ba:38:b0:6e:f0:fb:a6:e5:f2:e9:25:5b:79:3d:16:b9:
c6:93:da:24:03:4e:a7:51:8f:6d:02:c5:ba:20:1e:be:1f:f2:
15:87:dc:e4:9b:b1:aa:39:f8:38:0e:2f:92:e0:0b:53:1c:d4:
2c:a8:37:b3:68:33:80:5a:2b:e7:70:95:0a:34:7c:31:87:53:
57:06:96:fe:cd:24:ef:91:54:82:7c:75:29:86:e5:1d:00:0c:
d8:a5:fe:2d:5c:0c:e7:52:33:c3:9e:f4:41:f0:2b:04:96:f4:
2c:a7:38:87:36:14:30:18:27:f1:9e:8b:77:77:eb:1e:6c:63:
75:5f:66:08:60:97:5f:1c:2c:be:9b:11:b8:5a:8f:e3:40:90:
74:45:34:dc:af:c6:3f:ff:14:36:06:77:aa:ad:23:23:64:b4:
ad:55:64:91:10:63:84:b0:43:5b:ab:dc:b6:96:4d:c1:f8:35:
d6:8c:c9:1a:41:19:c2:f3:e4:09:97:74:6b:95:35:32:0c:fe:
13:12:ed:f5:e7:b6:81:a7:5f:10:f3:31:d2:c0:28:8e:1e:ca:
0f:28:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org