Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/CVx1TuW9Gsg2xFZD6tVnR9MD_cI.roa
File: CVx1TuW9Gsg2xFZD6tVnR9MD_cI.roa (raw, json)
Hash identifier: kB5Ba6j5VMirF63V/deCdWqrtDuBY8kBmfl7M3zdnf4=
Subject key identifier: 09:5C:75:4E:E5:BD:1A:C8:36:C4:56:43:EA:D5:67:47:D3:03:FD:C2
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 11
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/CVx1TuW9Gsg2xFZD6tVnR9MD_cI.roa
Signing time: Tue 16 Mar 2021 04:50:32 +0000
ROA not before: Tue 16 Mar 2021 04:50:32 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 210.236.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:50:32 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=095C754EE5BD1AC836C45643EAD56747D303FDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:ab:f1:42:29:f8:24:26:3a:e8:72:d7:dd:
ba:d9:38:e0:63:9d:2a:51:6e:cf:d8:fa:e4:64:c2:
a2:dd:13:97:a7:78:3f:0d:3e:8d:5d:d8:cf:a8:15:
ee:03:9a:64:21:d0:6f:70:16:52:82:55:15:b7:1a:
c0:bb:c0:0e:6c:44:15:3f:6a:e6:98:22:84:42:3d:
d5:d2:37:de:3b:25:50:f2:60:82:ef:c6:10:f6:e3:
3b:12:63:61:2e:5b:ce:4c:98:22:c8:15:d5:4b:3d:
cd:90:05:0d:33:d9:01:7e:81:12:78:87:5c:3b:8d:
fa:80:9b:e0:8a:be:44:0f:bf:04:75:d9:6d:d9:ce:
69:2e:2e:78:b0:06:8b:c3:48:06:07:3c:0b:1a:4f:
1f:cc:7c:89:8b:ea:46:16:c4:38:c3:bc:16:84:9b:
ed:fd:55:c0:82:22:d8:4c:50:6c:08:21:27:b1:9f:
60:2b:3f:89:97:49:6d:c0:c4:6d:e2:24:d6:a0:fb:
90:75:a9:ef:dd:ae:ee:c3:ae:10:02:48:81:0a:d4:
9a:8c:9d:30:c2:9e:2b:c8:0c:f3:db:4d:47:7d:d9:
ac:14:f5:bf:7f:a6:fd:ff:2c:70:28:97:a4:5b:c0:
26:cc:7a:ba:64:27:5c:75:9c:bb:7f:49:ac:3b:2d:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:75:4E:E5:BD:1A:C8:36:C4:56:43:EA:D5:67:47:D3:03:FD:C2
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/CVx1TuW9Gsg2xFZD6tVnR9MD_cI.roa
sbgp-ipAddrBlock: critical
IPv4:
210.236.160.0/19
Signature Algorithm: sha256WithRSAEncryption
33:ad:2a:33:cd:2b:18:bb:14:77:8a:f8:fd:c2:34:c5:1f:45:
8e:9a:11:2d:31:70:50:eb:bd:30:89:f9:d2:1f:00:af:67:1f:
af:e9:e6:bb:cf:1e:cc:b2:d4:fa:60:2f:0d:56:b3:2b:ee:eb:
78:64:20:ec:e2:b9:cb:0a:77:12:58:cd:15:fa:1a:6c:08:35:
22:ec:75:44:56:6b:45:0f:d0:a2:c8:42:92:90:29:1d:67:ea:
42:df:e8:4a:33:53:3d:52:29:93:ab:96:88:fe:c0:7b:c8:17:
1c:49:45:d5:db:97:e6:d6:1e:a6:99:63:bd:29:92:2b:00:0d:
fc:4d:d0:e3:db:26:ad:9c:bf:ff:a7:87:2a:73:99:83:68:8c:
67:84:63:b0:eb:22:eb:e6:c0:06:60:2f:88:8e:c0:bc:77:d5:
c6:83:45:ca:8e:2b:55:66:df:9d:60:97:4a:58:87:2c:e4:63:
eb:06:a1:0a:07:44:b1:fb:dd:64:0b:2c:96:ca:2a:9e:9a:72:
d4:ea:78:5f:ae:3d:43:c9:27:68:52:57:ed:7e:1e:a2:a6:4f:
23:bb:fd:98:10:cb:77:15:ce:c9:28:04:4d:86:1a:5e:c4:92:
25:12:9c:86:5e:ac:f6:95:b7:a8:c3:8d:90:3d:27:de:fb:2c:
f8:de:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org