Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/pnLjGb6FpFYjnlHmdlr9weBY7Mw.roa
File: pnLjGb6FpFYjnlHmdlr9weBY7Mw.roa (raw, json)
Hash identifier: 1Cn8mWB27NWICLJ856TBYQxFJjFnnzne+K47XXs7fRI=
Subject key identifier: A6:72:E3:19:BE:85:A4:56:23:9E:51:E6:76:5A:FD:C1:E0:58:EC:CC
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 0E
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/pnLjGb6FpFYjnlHmdlr9weBY7Mw.roa
Signing time: Tue 16 Mar 2021 04:45:39 +0000
ROA not before: Tue 16 Mar 2021 04:45:39 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 202.60.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:39 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=A672E319BE85A456239E51E6765AFDC1E058ECCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:5b:fd:07:fa:59:a9:9c:6a:72:01:e3:81:
59:3a:b2:d7:e0:7f:23:aa:72:c4:01:c9:81:70:69:
f3:b0:f7:df:5d:c3:c9:02:09:18:2c:df:94:65:1a:
13:a4:03:6f:d2:1f:88:53:0e:16:c5:d4:0f:b0:c9:
6f:d8:97:f1:88:53:51:c0:ae:61:bd:05:14:15:eb:
8a:60:af:d6:05:d1:95:9f:15:55:53:5f:70:e2:ef:
f8:f5:8b:08:3f:6f:ff:ed:97:de:64:6d:e6:9a:d7:
bb:73:e0:9e:b3:e5:5e:44:9b:de:0e:8a:64:98:23:
e4:80:d6:a8:29:71:34:0e:25:8e:f6:a4:a9:da:b1:
92:7c:64:e7:14:2c:89:be:20:f1:12:19:e5:ed:94:
a4:17:12:b5:ac:fc:f4:03:18:27:93:69:44:f5:3a:
b2:3e:d7:d5:3d:5a:8c:2a:93:9d:f3:cf:fa:b3:8a:
72:e3:2a:fc:05:5b:af:72:c2:9a:39:36:47:fa:41:
b0:19:3e:dc:de:20:7f:ac:c6:ef:3c:7f:58:cc:39:
ee:25:49:22:82:67:1b:aa:aa:6d:13:1e:2f:f5:e9:
92:04:7a:b8:47:79:2d:09:b9:cd:6c:7f:72:45:f5:
a3:8a:a8:f1:60:d3:50:3a:67:cc:2e:6a:82:2e:96:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:E3:19:BE:85:A4:56:23:9E:51:E6:76:5A:FD:C1:E0:58:EC:CC
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/pnLjGb6FpFYjnlHmdlr9weBY7Mw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.60.160.0/19
Signature Algorithm: sha256WithRSAEncryption
85:75:2d:17:2f:44:25:dd:b3:b3:9f:49:7c:9f:d6:0c:8d:f7:
00:53:dd:dd:71:c9:d8:5d:da:37:19:a5:64:f7:77:f4:85:47:
58:b6:b6:8d:53:27:45:b7:07:2c:10:ed:31:70:97:cd:f3:ad:
12:cf:b1:fc:88:a9:00:36:8e:3e:4e:8e:b3:26:7c:19:0d:4b:
91:a0:f8:f8:10:0a:2e:bc:57:30:f8:4a:d4:47:c9:49:4d:5e:
d5:14:dd:7e:b4:0c:1c:a2:f5:08:e2:dc:9f:1e:16:90:66:ee:
48:2a:ab:7a:6b:8b:2b:cd:3e:eb:e8:a4:ee:ec:88:d8:b5:1c:
6d:46:88:9c:c4:f6:df:f9:f8:6b:9e:10:6f:29:6b:e9:63:67:
bb:16:f0:e6:30:65:0a:61:03:26:8d:0b:22:f0:46:61:79:82:
1d:2c:96:a2:30:52:f2:2c:63:8f:d5:5b:ab:e5:90:8d:72:e1:
36:b9:63:3e:33:7b:b3:44:94:04:f8:4e:81:a9:dc:c7:6f:9b:
f9:39:0c:4c:45:8f:2e:ab:29:89:50:1a:ca:7a:79:4c:58:d5:
3b:29:ad:e7:b7:73:57:5b:c0:9b:30:52:21:6e:f0:1e:4a:89:
e5:e4:3b:0f:b2:c6:20:40:58:82:a1:70:84:c6:98:77:90:4b:
c4:3a:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org