Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/sp9bf2uBbZ6fWmAL5eGuqZiDlbo.roa
File: sp9bf2uBbZ6fWmAL5eGuqZiDlbo.roa (raw, json)
Hash identifier: GX1jg7zzGrOOozjZnrmq2neP5+y+37dxReE29UipYXA=
Subject key identifier: B2:9F:5B:7F:6B:81:6D:9E:9F:5A:60:0B:E5:E1:AE:A9:98:83:95:BA
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 08
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/sp9bf2uBbZ6fWmAL5eGuqZiDlbo.roa
Signing time: Mon 05 Jul 2021 08:50:55 +0000
ROA not before: Mon 05 Jul 2021 08:50:55 +0000
ROA not after: Wed 15 Jun 2022 01:30:03 +0000
asID: 63789
IP address blocks: 202.9.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Jul 5 08:50:55 2021 GMT
Not After : Jun 15 01:30:03 2022 GMT
Subject: CN=B29F5B7F6B816D9E9F5A600BE5E1AEA9988395BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:d3:27:61:b9:17:a2:fa:cc:1c:92:57:6a:
c8:18:d7:da:9d:ca:2b:6f:cf:c9:f1:31:51:18:ef:
b5:c3:32:f6:06:9b:c9:1b:78:cd:88:89:93:2b:66:
df:78:52:6b:e3:41:2b:a3:01:32:b0:25:f2:1d:ea:
2d:2d:08:5a:70:bd:34:fc:d4:69:41:20:05:eb:47:
2e:8d:14:8b:59:68:c1:a5:70:6d:88:e4:d8:85:eb:
38:57:5e:19:68:a6:e4:c6:15:5b:da:03:3c:75:75:
a8:f1:fd:3e:86:0a:ca:14:dc:64:7e:a9:fa:d5:ed:
d0:fe:fa:9a:a2:59:4f:38:ef:e1:b4:30:55:b8:ec:
ce:d0:52:f9:02:e6:56:6b:fa:4b:43:77:91:7d:77:
c7:d2:32:b6:68:e4:68:40:1e:37:88:83:66:5e:14:
ac:39:d9:ef:2b:8c:fe:21:ad:be:51:ab:cb:06:85:
50:62:2a:4f:f3:c2:8f:e1:e7:3b:74:a1:ca:a0:2d:
ae:da:55:08:48:6a:13:56:b6:44:0d:28:ac:e7:c3:
d1:fb:9f:72:cd:ef:93:09:ea:d2:36:a9:cc:6c:df:
e6:35:d9:04:2b:44:bd:90:ea:7a:ff:90:3f:f8:8e:
ff:03:a7:23:05:32:14:24:82:1d:24:b1:e9:3e:51:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:5B:7F:6B:81:6D:9E:9F:5A:60:0B:E5:E1:AE:A9:98:83:95:BA
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/sp9bf2uBbZ6fWmAL5eGuqZiDlbo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.210.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2d:62:8c:08:bc:1d:b8:06:34:7a:1e:33:18:a7:11:1e:3a:
ca:c1:f1:7f:67:e1:a1:2d:31:b0:2c:f7:7c:d4:3d:1e:37:a4:
eb:48:9b:97:f5:27:83:e5:47:38:9b:5a:55:34:94:de:7b:30:
62:1f:90:75:ea:81:6d:0c:58:f7:b0:57:87:e1:a7:7d:06:de:
ac:14:08:24:51:34:08:25:71:d7:08:1a:52:24:f2:5f:41:c2:
f4:ff:3f:58:4e:b9:d6:6d:7f:dc:89:53:59:65:91:c0:d4:25:
41:28:28:ff:17:1b:4d:f2:bb:ef:05:fd:0f:fa:ab:9d:8a:05:
10:7d:55:11:23:67:cf:69:a4:b2:96:f2:63:cc:a8:0c:be:f6:
f6:d4:6a:57:7a:9f:8b:70:d2:a6:eb:61:87:b5:74:c3:a3:fe:
93:b4:29:70:20:cc:aa:6a:54:91:c7:81:9e:8c:95:4a:90:b7:
db:cd:e5:c0:c1:98:31:50:22:b9:be:05:e3:1c:08:24:11:c5:
bb:39:92:e5:a9:4d:88:80:07:9e:ad:c2:31:ea:b3:78:31:fd:
3a:85:45:69:b5:21:1f:25:c9:8d:bc:fb:c9:4f:51:f3:a2:34:
e1:69:62:67:65:90:7d:0a:9f:07:27:26:46:56:59:23:a0:49:
8b:cb:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org