Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/G8Oos8vtleQ8-NYjeSkcCVtCErk.roa
File: G8Oos8vtleQ8-NYjeSkcCVtCErk.roa (raw, json)
Hash identifier: ABg1ihsvoWiVq/xy3IDH5lFNsgG0DjUtBVvBqA4DThI=
Subject key identifier: 1B:C3:A8:B3:CB:ED:95:E4:3C:F8:D6:23:79:29:1C:09:5B:42:12:B9
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 73
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/G8Oos8vtleQ8-NYjeSkcCVtCErk.roa
Signing time: Wed 01 Sep 2021 01:30:26 +0000
ROA not before: Wed 01 Sep 2021 01:30:26 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 59.106.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:26 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=1BC3A8B3CBED95E43CF8D62379291C095B4212B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:93:90:09:79:9c:4d:49:14:ae:94:86:c4:
4c:64:03:ff:1d:45:61:0c:9e:db:c3:54:e3:dd:6d:
bc:4d:d6:7c:69:a9:a8:2e:31:e6:60:88:53:b8:cf:
ae:c7:e7:44:8a:4f:93:10:65:43:85:f1:a0:dc:f0:
eb:b9:f5:d2:ba:fd:f3:ef:a9:3e:ea:78:3e:e5:2e:
85:0b:56:e6:5c:6d:d1:4d:a3:e1:28:a7:cf:bf:fe:
7c:50:7e:8b:6c:ba:f6:4b:25:38:f9:a6:bb:1a:b6:
a5:de:34:34:83:7b:ac:23:b2:7d:72:cd:67:bb:f2:
74:e0:2e:d9:55:b6:9a:1a:f8:cd:c7:6a:26:94:34:
ee:ea:79:af:eb:44:c8:2b:04:08:1b:5a:5b:84:a5:
3b:45:47:95:99:93:3c:52:4a:1a:7c:a2:61:02:ee:
09:9c:1d:d1:b5:88:c7:fc:fc:af:0e:83:1f:61:bf:
4b:94:aa:75:b8:78:de:e8:6d:77:41:51:8b:7a:09:
f4:1e:ee:82:51:d3:82:65:d4:08:a4:fd:ac:58:a8:
43:f3:7e:e5:9b:95:ba:8a:2f:9e:a2:2f:80:a9:6e:
74:8d:d6:36:41:1c:de:14:db:14:40:79:fa:ae:ad:
0b:87:b8:7b:8a:d8:a8:b7:27:33:59:58:71:61:69:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:A8:B3:CB:ED:95:E4:3C:F8:D6:23:79:29:1C:09:5B:42:12:B9
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/G8Oos8vtleQ8-NYjeSkcCVtCErk.roa
sbgp-ipAddrBlock: critical
IPv4:
59.106.0.0/17
Signature Algorithm: sha256WithRSAEncryption
27:59:e7:24:3e:e0:86:6b:0d:ce:53:f3:13:cc:1f:41:97:b2:
6d:a1:5d:84:48:32:c3:87:6f:72:ab:cd:0b:5d:8a:a7:41:31:
79:84:f3:0a:b1:4f:78:39:d9:f6:60:20:af:9a:fd:0f:69:ef:
40:39:34:b6:93:91:ea:ef:15:12:97:3b:09:06:e5:8d:c1:42:
30:6d:b3:7d:f9:df:7a:0f:15:50:29:ac:50:a9:90:09:af:92:
ec:3a:1c:19:3b:e9:ff:b6:cf:bc:df:4d:d7:eb:88:a6:5a:a4:
97:9e:0e:bc:55:f8:41:9b:d4:a5:39:5e:a8:26:cc:bb:7b:ab:
78:34:30:15:a6:d1:04:fb:2a:73:74:1d:1a:a5:ca:87:38:79:
12:d3:d2:fb:4c:41:5b:ab:c3:3e:68:07:a9:28:61:05:12:e6:
e1:95:28:70:c7:d1:b8:45:ac:e6:f0:9c:ce:58:98:69:7a:e4:
9d:5f:16:c7:4b:98:f4:a8:ab:2a:aa:26:d2:82:f3:4a:2a:80:
5c:94:c2:4e:0e:9f:04:67:81:88:32:25:b8:0e:09:c4:2f:57:
35:30:61:41:4d:ad:eb:92:a7:6c:02:78:c8:80:a0:e0:93:4c:
4a:36:c0:27:86:3c:54:6c:2a:65:24:fd:b8:bf:57:54:c3:6c:
ae:88:2b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org