Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/GjmT_VDTpF-fI4AVobO1p3SjYd4.roa
File: GjmT_VDTpF-fI4AVobO1p3SjYd4.roa (raw, json)
Hash identifier: Rv7aL2znNslbbECZVqSqcSKnqpXhTioOqvNf1rPmelU=
Subject key identifier: 1A:39:93:FD:50:D3:A4:5F:9F:23:80:15:A1:B3:B5:A7:74:A3:61:DE
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 27
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GjmT_VDTpF-fI4AVobO1p3SjYd4.roa
Signing time: Tue 01 Mar 2022 08:33:57 +0000
ROA not before: Tue 01 Mar 2022 08:33:57 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 117.18.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:57 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=1A3993FD50D3A45F9F238015A1B3B5A774A361DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:9f:82:f1:21:0e:87:f3:ce:67:30:3b:3a:
25:e2:48:45:35:b2:69:1e:b6:21:19:c1:30:1b:f2:
43:08:70:20:d1:f0:93:5a:ce:dc:af:bc:35:d4:e2:
19:79:59:09:94:87:d8:a0:fb:9f:4b:59:0c:c9:de:
d4:1d:87:9c:1c:a9:b3:2c:a8:7a:e1:2c:44:26:b2:
98:5b:4a:1f:21:09:77:34:b3:7d:57:76:ca:90:10:
8b:77:9a:30:c6:e9:33:41:6f:ee:b3:76:d7:a3:51:
06:7b:b1:79:2f:52:3f:1f:5a:e3:34:e5:f7:31:68:
88:21:f0:5a:d8:93:2d:46:56:62:69:88:de:9a:a2:
a3:ea:4c:d3:29:8d:99:7c:e0:70:46:a7:68:75:75:
d7:b7:e5:06:81:f5:e4:d2:39:26:1e:50:34:99:b8:
76:89:d9:92:06:36:b6:51:b6:bf:8d:47:e3:5a:ea:
c1:90:ca:f0:d9:f8:fe:93:72:a5:d1:ca:b9:13:45:
b7:05:21:07:b8:43:01:a7:70:5f:fc:b5:33:d3:f1:
48:7b:f6:08:4b:6c:9c:da:37:87:a6:68:01:19:83:
ac:08:45:47:8e:75:0f:d5:fc:79:51:6f:1b:6a:36:
e3:6f:30:a6:58:6a:4c:74:fa:0f:41:9e:4d:2d:a6:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:93:FD:50:D3:A4:5F:9F:23:80:15:A1:B3:B5:A7:74:A3:61:DE
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GjmT_VDTpF-fI4AVobO1p3SjYd4.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.128.0/18
Signature Algorithm: sha256WithRSAEncryption
75:8b:8e:12:35:b9:c4:55:ec:23:e2:cf:bf:11:35:0d:45:f9:
95:51:fb:07:9a:cc:e7:00:c9:40:5f:09:19:4d:64:74:c4:97:
51:95:f4:79:16:a0:02:91:cf:03:59:d7:f6:21:a6:e1:b9:8f:
1b:76:30:24:46:04:da:12:42:5d:5c:6d:fc:dc:6a:f9:a5:c6:
05:9b:43:c6:75:ed:ce:4a:a3:48:33:a5:60:de:10:7e:df:b4:
1c:19:c1:5f:92:ae:99:c5:85:b1:58:b6:ad:0b:ff:60:e0:b1:
fa:b6:27:bd:39:96:2d:45:44:0b:13:54:08:1d:a8:ab:c1:f1:
01:d7:f0:9e:fc:1f:ca:f5:25:ea:c3:d3:5c:8d:bd:49:fa:0d:
02:37:66:e5:bc:a7:01:a2:b2:8d:73:43:74:fd:b9:a6:35:cb:
9b:51:b0:e2:dc:eb:49:31:43:76:d2:07:5a:fc:c8:df:81:ed:
2c:3a:0a:55:f3:8e:9c:93:3b:72:9d:c0:4b:45:cb:d3:34:35:
24:4b:d8:78:e1:2e:5a:72:7b:2e:e7:74:e7:d9:b3:f8:a8:a0:
2c:8b:ce:a9:8d:39:39:08:32:e0:f1:16:40:91:53:99:2f:74:
60:1d:d7:37:03:56:b8:e7:fc:48:bc:64:3a:fc:cd:5f:97:48:
a7:d8:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org