Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/nfEkwfN5uZivQZTuyLhkoMNjXm0.roa
File: nfEkwfN5uZivQZTuyLhkoMNjXm0.roa (raw, json)
Hash identifier: oYHTINXpDm2F3Al6iCuhiHdB0wnslvnLqdhRvNkQiuU=
Subject key identifier: 9D:F1:24:C1:F3:79:B9:98:AF:41:94:EE:C8:B8:64:A0:C3:63:5E:6D
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 78
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nfEkwfN5uZivQZTuyLhkoMNjXm0.roa
Signing time: Wed 01 Sep 2021 01:30:27 +0000
ROA not before: Wed 01 Sep 2021 01:30:27 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 210.188.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:27 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=9DF124C1F379B998AF4194EEC8B864A0C3635E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:66:2f:e7:e0:aa:ba:c9:de:9b:b1:f4:2e:
69:b0:16:f5:61:1d:e4:b2:2d:4d:fd:6f:5f:bb:5e:
43:a8:e4:45:35:25:2c:d1:a8:11:5d:e3:e8:b2:e2:
5e:81:b9:da:ea:04:ad:c2:65:e6:fd:fb:36:04:c5:
86:d4:37:3a:5f:5b:c6:10:12:3f:cb:ba:eb:34:a7:
6f:5f:86:bf:3d:50:55:aa:15:64:26:a1:a8:d5:cf:
28:f7:5a:fa:dd:d5:bf:8f:c0:24:33:c6:ad:2d:33:
3b:8b:38:3a:de:75:69:fd:34:e4:bb:b4:06:39:bb:
00:9f:0d:58:43:1f:1d:fc:82:d7:46:4c:b3:c7:fb:
d5:9a:ef:7d:36:fd:3d:69:be:c6:25:68:60:db:27:
97:02:34:27:2e:c8:46:a2:0d:15:fd:0b:52:f9:36:
54:04:06:44:e7:1a:fe:e1:c4:46:2f:bb:dd:e5:83:
06:65:a8:99:69:fb:c6:ea:fd:f1:2e:a5:27:43:4e:
71:8b:93:dd:8c:49:6d:29:c5:ef:8c:fe:44:a4:0a:
2b:92:77:a1:8b:ed:3a:81:04:13:e7:cf:18:10:74:
d8:4d:55:a5:73:34:fe:bf:13:3e:9c:a8:41:6e:56:
0c:f9:8b:13:af:75:83:cb:f8:e6:0e:42:98:91:eb:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:24:C1:F3:79:B9:98:AF:41:94:EE:C8:B8:64:A0:C3:63:5E:6D
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nfEkwfN5uZivQZTuyLhkoMNjXm0.roa
sbgp-ipAddrBlock: critical
IPv4:
210.188.224.0/19
Signature Algorithm: sha256WithRSAEncryption
45:4c:0e:f9:e7:b5:49:8d:a7:fc:3e:51:f9:f9:bb:a1:2e:7d:
e4:bb:70:66:b3:af:bb:91:22:d1:01:23:79:d4:64:d7:5e:2d:
46:cf:e3:50:29:61:29:46:cf:90:4c:66:b5:d1:8c:cf:ad:8a:
73:85:c2:aa:14:ae:1e:8d:5b:51:84:5a:f2:db:57:25:31:40:
7b:ae:e1:33:9c:62:07:65:f8:3e:ed:14:d9:1d:f8:d7:00:a2:
e2:65:ed:a1:22:47:42:15:08:05:d8:ab:07:de:1a:02:42:4a:
e2:a2:ab:54:35:9e:60:f0:ce:09:a0:22:16:c7:6a:56:fe:25:
b2:e7:5a:24:58:3a:25:7f:4d:cb:71:b6:c8:28:2f:12:72:75:
96:4e:29:79:c3:71:00:1a:16:c6:a9:54:e9:a2:d6:d8:92:56:
84:73:87:b2:f5:7d:d8:6b:31:96:c3:40:60:8a:8f:08:bc:96:
1e:b9:b1:97:be:56:d3:12:e0:1a:b3:00:35:6f:35:e2:da:dc:
56:96:01:68:4f:80:57:ba:3a:30:b2:6f:23:82:7e:90:41:cb:
b7:f5:0f:88:9c:76:40:e3:0d:74:75:f9:d7:6f:8e:3a:54:de:
d8:65:ff:a7:5d:ff:29:74:40:46:3a:77:e7:93:a2:33:44:5d:
4f:7e:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:12 2023 by rpki-client on console-ams.rpki-client.org