Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/XgiAf6jbyKUr5f67vbP3ua4gJb8.roa
File: XgiAf6jbyKUr5f67vbP3ua4gJb8.roa (raw, json)
Hash identifier: HXAk82U56Iq1noIF7gKbg5OszLMzKdBkylwhnZpoLFw=
Subject key identifier: 5E:08:80:7F:A8:DB:C8:A5:2B:E5:FE:BB:BD:B3:F7:B9:AE:20:25:BF
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 15
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/XgiAf6jbyKUr5f67vbP3ua4gJb8.roa
Signing time: Tue 16 Mar 2021 04:50:33 +0000
ROA not before: Tue 16 Mar 2021 04:50:33 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 219.103.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:50:33 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=5E08807FA8DBC8A52BE5FEBBBDB3F7B9AE2025BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:83:62:51:f0:55:fe:39:2d:0f:ca:96:8e:
03:7c:38:ae:40:3c:56:30:86:63:df:6b:22:ba:3d:
3a:aa:65:9d:72:f2:32:2c:d6:6e:1a:87:bb:e0:c4:
a2:94:8c:4a:1a:45:38:e9:45:54:18:54:1e:8a:45:
ff:78:1c:64:34:10:6e:b7:9b:17:60:f3:6c:1e:bc:
63:34:ce:93:9b:fb:6a:53:d2:ea:89:f6:23:91:13:
06:ab:3c:69:2f:0f:7f:5e:3e:55:9a:11:da:6a:37:
3b:de:94:51:c1:2b:31:53:46:4f:af:91:9e:b7:d6:
6c:42:a3:18:91:8b:7a:54:dd:a8:ad:e9:d9:65:a0:
cc:67:b1:f1:db:2b:0f:82:7d:b3:88:21:73:47:e4:
04:0f:2f:3a:ec:6d:97:20:4c:d5:bb:6a:e0:b6:ff:
c2:87:5d:c0:bf:71:98:5c:29:f4:b6:c2:a1:9b:05:
80:81:e7:af:5c:fd:cd:d5:27:68:90:66:8a:03:06:
73:46:a6:82:8c:10:37:e3:17:29:d9:88:d4:51:9b:
4a:8d:98:f5:39:9d:d0:1f:37:ab:c5:70:09:f7:ad:
f5:6f:5a:e3:4b:43:7f:11:0d:20:df:e3:3b:9b:20:
6b:09:03:bf:03:6c:cb:38:62:98:17:8a:5d:b2:8b:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:08:80:7F:A8:DB:C8:A5:2B:E5:FE:BB:BD:B3:F7:B9:AE:20:25:BF
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/XgiAf6jbyKUr5f67vbP3ua4gJb8.roa
sbgp-ipAddrBlock: critical
IPv4:
219.103.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:59:4e:9d:cc:aa:00:0e:9c:2a:a4:fc:89:fa:65:95:b9:e1:
76:6d:14:6d:9d:bc:ab:ff:2a:79:6f:67:46:4d:36:64:27:b4:
97:0c:67:3a:47:61:fe:ea:99:f6:f6:92:d1:eb:77:e5:41:69:
45:33:b7:de:fe:ad:6a:13:7b:67:e7:b9:dd:f7:97:c1:0e:39:
88:a7:f7:5b:0e:55:a5:30:19:42:ca:d6:e8:41:d7:ed:a7:c9:
9f:60:de:63:de:4a:28:15:6a:bd:1c:a0:21:6d:e4:8d:b9:f9:
19:02:c6:a5:be:d2:13:66:0a:4e:b5:22:95:1a:a4:61:87:94:
13:64:8d:7b:a5:cd:59:01:ee:e8:70:28:a3:5f:e3:3a:4a:8c:
d2:19:98:dd:7d:cb:90:f7:3b:22:37:89:73:c8:ff:1f:2f:61:
0e:12:a9:ee:a1:c6:26:9c:81:93:f8:9f:c1:28:e1:17:0b:03:
27:1f:61:06:d1:ed:b7:9e:60:ff:e4:c4:36:86:c1:85:ab:0b:
f9:eb:30:ee:b4:12:a9:f8:56:a6:7f:3a:24:63:34:db:65:4e:
40:d8:05:ed:91:28:53:98:cc:ff:96:3f:76:49:72:79:ab:09:
44:c9:2d:46:66:ee:6d:1a:6e:ab:88:d3:c7:5d:15:c8:47:a3:
7e:03:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org