Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/dOfX2fnExwQKGSIew2vi7XKSf0k.roa
File: dOfX2fnExwQKGSIew2vi7XKSf0k.roa (raw, json)
Hash identifier: eWNWCZK8yYesVHtnvfn2WIpOsgZ1ETHTSYpoMzIi+mQ=
Subject key identifier: 74:E7:D7:D9:F9:C4:C7:04:0A:19:22:1E:C3:6B:E2:ED:72:92:7F:49
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 07
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/dOfX2fnExwQKGSIew2vi7XKSf0k.roa
Signing time: Tue 16 Mar 2021 04:45:37 +0000
ROA not before: Tue 16 Mar 2021 04:45:37 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 61.198.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:37 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=74E7D7D9F9C4C7040A19221EC36BE2ED72927F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:39:a2:2d:c4:43:ea:a8:70:4b:75:ea:b4:
1e:05:10:9d:81:f5:1b:49:2d:99:a0:79:93:0a:09:
73:b3:6e:5d:29:13:c8:ae:f1:44:95:e7:11:55:80:
46:5f:46:39:1e:c0:fb:8b:ec:f2:53:d9:bc:88:9f:
cd:e9:aa:a8:41:6a:a5:c5:dd:c5:5f:bf:4d:d0:0a:
58:be:31:3c:39:8f:d5:a3:d7:99:95:3e:9b:ff:e2:
e9:1e:ba:8c:63:ac:6e:48:2d:f4:a0:11:09:22:38:
f4:0a:a2:7d:8d:30:f6:bf:57:34:5c:f3:36:1b:74:
59:f5:94:e8:d3:30:f9:19:9a:4d:a1:3f:79:e3:65:
33:d6:c6:f0:04:6a:10:75:3b:76:67:30:2c:e5:8e:
0e:e8:2b:8a:b9:ad:5a:b3:0b:8e:50:fa:bb:08:cc:
39:bd:87:0c:f1:f3:6b:52:14:72:c8:88:e0:59:c8:
69:9f:91:28:3d:7d:97:1a:a1:5b:f6:db:eb:ae:43:
df:0a:75:4b:11:10:7b:a0:63:5b:cf:bc:93:f3:d3:
3f:7d:42:84:27:e1:05:81:f4:f3:82:75:b2:00:32:
7b:96:c2:b2:b6:c3:b9:90:be:b9:2b:01:28:aa:e6:
f8:99:50:c3:99:4d:f0:1b:3c:e1:df:90:46:c5:84:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:D7:D9:F9:C4:C7:04:0A:19:22:1E:C3:6B:E2:ED:72:92:7F:49
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/dOfX2fnExwQKGSIew2vi7XKSf0k.roa
sbgp-ipAddrBlock: critical
IPv4:
61.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c4:a2:d7:53:8d:9f:12:a7:50:e5:08:fb:0c:1b:2b:53:25:dc:
28:70:18:f9:b1:7d:e8:f9:c8:1f:f7:b2:7b:cd:87:48:16:a5:
a1:56:df:ac:85:f6:0a:a7:4c:16:b0:67:c4:86:3e:b9:d4:9b:
aa:a8:8e:23:6b:82:5e:c3:ff:8c:b8:8f:10:84:39:1f:52:b9:
7d:13:30:f1:0e:ee:ff:27:ae:3a:91:29:88:ab:13:60:55:10:
31:7c:6b:e3:ee:5f:df:78:2b:18:d9:da:3a:06:ba:88:f0:38:
2b:33:de:b8:49:7a:da:e7:36:db:a0:79:7f:17:27:5b:ae:33:
16:ed:32:b0:b4:f6:37:8d:59:24:47:af:42:13:ba:1c:42:0e:
a3:0c:fb:46:56:d6:fd:2e:6a:8c:bd:9c:60:e2:d7:a7:0a:5b:
e7:aa:ba:dd:6e:ef:69:fd:4e:cd:f0:9c:ee:e9:ae:fb:28:f8:
5a:29:3b:0b:c1:17:09:6e:21:1a:73:fd:9c:bb:cf:05:88:98:
a0:17:e1:28:a1:23:13:7b:d2:58:65:81:05:0a:b0:6d:3b:94:
20:23:8c:a4:a1:a1:bf:99:63:ce:52:2a:bd:69:ff:4c:bc:d5:
37:e9:a4:09:1f:92:91:7d:97:b6:fd:75:10:b3:d3:f6:96:41:
5e:c8:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org