Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/uz3EKpxK1iGazMeTcIDOMc26zuk.roa
File: uz3EKpxK1iGazMeTcIDOMc26zuk.roa (raw, json)
Hash identifier: RbldqKrupPFMRXrkRHCSbNNKKggUFpBBJEAPrdqAkQk=
Subject key identifier: BB:3D:C4:2A:9C:4A:D6:21:9A:CC:C7:93:70:80:CE:31:CD:BA:CE:E9
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 0D
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/uz3EKpxK1iGazMeTcIDOMc26zuk.roa
Signing time: Tue 16 Mar 2021 04:45:39 +0000
ROA not before: Tue 16 Mar 2021 04:45:39 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 202.59.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:39 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=BB3DC42A9C4AD6219ACCC7937080CE31CDBACEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:54:f1:f2:4d:da:77:66:3c:d5:ec:ba:05:
34:6f:c5:45:78:bb:9c:ad:a0:ff:1b:45:38:06:ae:
3d:77:73:76:e1:86:24:5a:8c:34:73:7a:3b:6b:fb:
81:d5:6c:fb:56:d2:20:94:c1:15:3d:3a:6b:d7:62:
2a:a9:74:80:88:c4:d5:66:0d:be:9b:e8:55:f9:99:
dd:4b:45:70:e5:1c:f0:1e:9a:2f:e8:08:00:8a:d9:
22:90:56:90:5a:b0:2a:42:e0:ed:50:11:05:01:48:
12:e2:58:e8:d0:1d:a6:94:92:69:d0:1c:92:3a:0d:
fc:63:ff:59:de:31:89:1d:9a:1c:ef:d3:33:57:8b:
91:71:9a:17:5c:23:58:aa:bf:4e:78:4d:1a:14:a2:
4f:2c:13:25:0f:ad:12:1c:c2:2f:6b:08:79:33:a6:
c1:b1:13:43:e6:d7:5f:fc:9a:4f:56:ef:f9:be:f2:
a6:ff:67:7e:a1:aa:9e:4c:8b:66:29:82:ac:54:37:
61:a5:8f:10:14:29:28:4f:b8:05:09:00:db:23:b4:
3c:57:7a:62:e8:ab:32:70:85:6f:9e:b2:f2:4a:f4:
00:29:17:bb:c2:16:aa:f7:2b:25:cc:09:9c:56:42:
31:0e:1b:f1:d4:d8:34:2c:d4:3a:fd:a2:b8:c7:27:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:C4:2A:9C:4A:D6:21:9A:CC:C7:93:70:80:CE:31:CD:BA:CE:E9
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/uz3EKpxK1iGazMeTcIDOMc26zuk.roa
sbgp-ipAddrBlock: critical
IPv4:
202.59.176.0/20
Signature Algorithm: sha256WithRSAEncryption
70:65:d7:04:8a:05:98:fa:98:30:d3:77:f7:d5:99:28:41:e0:
3b:55:e7:cf:47:c4:a7:99:a7:6a:33:07:16:fb:98:37:6a:3b:
fc:01:86:fa:67:e5:8e:32:07:96:f1:cc:bf:ae:22:96:f0:7e:
85:f6:02:4a:dd:c0:cf:07:a6:97:f4:38:af:df:e2:52:36:c8:
d1:52:ad:1d:5c:eb:87:9f:92:5e:36:28:54:a7:8c:f6:5a:54:
a5:0b:a6:5e:f7:b2:cb:38:bf:5d:5d:3b:a8:e4:a2:30:0b:05:
eb:f4:08:bf:b4:c5:72:f7:d5:a5:8a:54:bf:9b:7b:d0:04:2f:
93:13:ea:70:2b:a4:9d:9c:0b:e7:a3:8f:7c:9c:06:5b:5f:98:
3f:bf:cb:c2:66:80:5a:99:a9:bd:c6:e4:d5:54:ae:88:12:7a:
b1:f7:63:fb:d0:cd:3d:47:3c:a7:95:78:4a:29:73:ab:ed:d4:
43:81:30:45:f7:85:e3:50:ff:a3:bb:18:f5:a5:4f:a3:c4:db:
4f:45:28:3f:6f:a8:e0:02:8e:44:95:16:ed:6f:93:d2:e9:fe:
40:76:0a:29:ef:15:9d:19:11:15:89:64:2f:a0:26:d8:16:a0:
ed:30:c9:a4:d9:ba:c6:36:72:17:68:3f:6e:c7:82:62:df:b1:
8a:16:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org