Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/fCb-Ui4CbYsSfwsZ-n0ng_p4aM0.roa
File: fCb-Ui4CbYsSfwsZ-n0ng_p4aM0.roa (raw, json)
Hash identifier: 9HazT3Eem+kTB0X5XZY+JvoL7WYlak0Q9YK3Mu9da5c=
Subject key identifier: 7C:26:FE:52:2E:02:6D:8B:12:7F:0B:19:FA:7D:27:83:FA:78:68:CD
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 06
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/fCb-Ui4CbYsSfwsZ-n0ng_p4aM0.roa
Signing time: Tue 16 Mar 2021 04:45:37 +0000
ROA not before: Tue 16 Mar 2021 04:45:37 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 61.125.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:37 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=7C26FE522E026D8B127F0B19FA7D2783FA7868CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:d4:d4:14:2e:1f:d6:c1:a8:0c:30:8b:25:
a0:c5:3e:22:4d:ea:9e:cd:a3:0e:ce:ee:f9:3b:38:
88:db:98:40:f0:e1:f5:fb:65:c7:e5:f8:73:71:b8:
c3:bc:78:41:b1:29:95:96:a9:27:6a:f7:d7:d0:93:
e3:02:69:f1:07:6f:2b:7b:4c:33:7b:15:d8:d5:c3:
ba:d0:30:6e:99:78:77:c3:5e:a9:c9:36:11:78:3e:
40:07:ce:4a:ed:fa:9f:a0:82:57:d1:52:04:84:58:
ec:f1:68:55:ef:95:79:fe:0b:df:e4:f7:3c:17:9f:
39:f0:04:4d:d4:a8:5a:c5:4d:7a:91:1f:ff:97:53:
9d:7e:82:ed:8a:60:5e:78:eb:e1:06:41:1d:32:05:
ed:69:a0:b0:15:97:60:a0:74:31:0c:a7:55:cc:63:
14:66:a9:29:30:28:da:86:8b:a9:cc:b8:7c:86:60:
8c:ea:d3:97:ae:55:78:4c:7b:bd:60:7e:ad:0e:99:
b2:99:68:60:ec:ef:52:36:ba:05:52:09:a5:6e:1a:
59:b5:67:80:d3:77:67:4b:6d:bb:d9:0b:b9:7e:0e:
08:dd:35:76:a2:ac:10:81:29:db:36:86:f9:ce:27:
ea:07:9d:34:75:c4:e3:e9:67:e8:ca:06:3a:f0:75:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:FE:52:2E:02:6D:8B:12:7F:0B:19:FA:7D:27:83:FA:78:68:CD
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/fCb-Ui4CbYsSfwsZ-n0ng_p4aM0.roa
sbgp-ipAddrBlock: critical
IPv4:
61.125.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:85:c5:3f:70:65:d4:d7:7b:91:7a:cb:99:7f:15:9f:d3:43:
bd:3e:0e:6c:59:3a:bd:2e:69:46:7f:13:82:48:50:c1:dd:aa:
8a:c0:63:e4:a6:8b:7c:bb:f3:97:ac:ad:fb:16:a0:66:3d:17:
5e:d1:8c:42:32:52:23:76:f2:b6:f3:9c:8e:aa:27:37:c2:a1:
f7:c8:fc:df:99:18:88:12:a8:85:d5:ce:55:90:ac:65:60:a2:
4e:35:db:06:00:95:86:c8:51:1e:ae:56:5f:b9:fd:75:cd:68:
47:94:c3:24:5c:a7:cb:38:53:c0:1a:0a:8d:a6:e8:56:ce:db:
e0:65:f3:6a:a9:48:90:2e:b3:da:53:b7:86:d3:b0:61:d8:e3:
56:a0:c0:52:55:79:28:2b:7f:2e:da:dc:0b:a6:7a:0b:90:68:
4c:2b:6a:e0:41:b1:04:5e:f8:12:8a:70:c7:08:f6:1a:43:6b:
a4:83:9f:cd:47:90:0c:dd:4f:c3:cd:64:a3:e6:95:44:f0:92:
bb:bc:54:0d:d1:0b:1a:19:d7:f4:c9:c4:f8:9a:35:f3:56:50:
19:9e:ce:96:e0:7d:d7:18:8a:c0:87:35:ae:3c:65:08:56:9c:
2a:52:c7:21:31:f2:a0:b4:b4:65:51:de:a3:dd:64:ba:6e:07:
6b:03:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org