Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/P5l8T946ftknImpC5t1TBA7-DVc.roa
File: P5l8T946ftknImpC5t1TBA7-DVc.roa (raw, json)
Hash identifier: NxjtJ5Jg2eEICMhlb9LTm67VtZvsogk6Qnq8SouMPaY=
Subject key identifier: 3F:99:7C:4F:DE:3A:7E:D9:27:22:6A:42:E6:DD:53:04:0E:FE:0D:57
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 2A
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/P5l8T946ftknImpC5t1TBA7-DVc.roa
Signing time: Tue 01 Mar 2022 08:33:58 +0000
ROA not before: Tue 01 Mar 2022 08:33:58 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 61.206.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:33:58 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=3F997C4FDE3A7ED927226A42E6DD53040EFE0D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:4f:8a:28:cc:bb:e9:ec:0e:fe:ff:0b:d1:
a1:6a:f7:00:31:05:b3:30:bd:bb:9f:43:a7:d5:a3:
97:44:84:94:dd:24:5a:fa:9a:20:d0:f1:67:14:d7:
3a:cb:77:1e:6a:de:62:0c:ab:ac:59:ce:7f:78:46:
c5:f2:fb:f3:04:57:e3:58:58:52:a1:7d:b1:76:2f:
82:9e:57:56:8a:96:94:34:5a:73:e7:88:72:26:c3:
59:d4:6d:0b:23:3b:79:e6:91:a6:48:46:b2:c0:48:
9a:a6:36:09:2b:6a:5c:e3:8b:d3:bd:ba:7c:58:5f:
9e:d3:47:b0:e3:9c:39:3e:e2:f6:c9:41:96:b1:1b:
da:c3:55:de:5d:36:f3:34:03:0c:8a:31:f4:57:e9:
33:30:6c:ae:d5:b4:ad:b0:b2:43:b7:23:f1:e6:a7:
fc:0f:f7:94:1d:7f:7b:b7:f2:5e:d9:ce:55:76:81:
47:54:7d:72:c8:71:70:d7:c8:92:7a:9d:4d:c4:c7:
0a:26:5c:64:64:08:41:ca:2e:92:37:f2:75:ee:6e:
ad:ca:8c:b4:21:a9:a7:1d:92:c8:38:32:ee:c3:80:
fe:4a:ad:1f:c5:18:be:01:6b:e0:95:76:2c:2b:e1:
cc:8e:7f:22:44:06:6b:6f:cd:c8:15:97:87:31:93:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:7C:4F:DE:3A:7E:D9:27:22:6A:42:E6:DD:53:04:0E:FE:0D:57
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/P5l8T946ftknImpC5t1TBA7-DVc.roa
sbgp-ipAddrBlock: critical
IPv4:
61.206.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:ab:43:3b:a1:81:9b:fa:87:51:99:32:2b:4b:0d:4c:98:47:
97:24:b0:1c:12:19:a0:e2:98:73:a8:fc:f2:2b:ca:03:28:dc:
6c:da:8b:3e:91:84:1c:7f:55:0c:21:34:94:75:59:9f:d8:89:
4a:b3:20:e8:7f:ee:ec:b2:2e:a4:0b:fd:e7:e9:60:ef:62:52:
26:ad:eb:41:b4:0c:cb:c6:03:6b:c8:8a:ae:c9:13:5a:1e:52:
d9:7e:d2:2b:fe:32:98:75:e1:e6:b6:dc:3a:8d:62:b4:39:6f:
17:70:46:b6:77:91:23:07:f7:3e:7b:1b:ab:ee:c6:7c:bb:70:
70:ae:05:0e:d0:8c:c6:66:7b:1f:98:24:2b:d3:f8:1e:ed:e9:
39:bf:5f:76:fe:a0:41:1e:a9:74:db:0e:f3:e0:dd:e9:22:8a:
3b:8c:26:76:99:66:d0:d5:16:87:46:ba:b9:ab:aa:a5:98:b6:
4d:22:11:da:03:be:79:42:53:3d:56:ff:76:64:9b:f9:14:92:
6e:6c:79:82:5a:af:35:19:d8:8e:b2:22:5c:ca:c1:16:49:1f:
fd:07:e0:41:78:94:85:41:38:c1:f8:8d:d6:10:1d:62:1a:b5:
6b:cd:2b:2a:1f:30:b9:a7:6b:1b:5e:38:2c:c2:3f:d6:a8:b0:
75:22:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org