Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/EA5tZSvDjH_dqK1YK27W8jCvwoI.roa
File: EA5tZSvDjH_dqK1YK27W8jCvwoI.roa (raw, json)
Hash identifier: x5ODOHjYCSgAnx6ZJIV55HwFXoQuqDckXfh6x1pk17Y=
Subject key identifier: 10:0E:6D:65:2B:C3:8C:7F:DD:A8:AD:58:2B:6E:D6:F2:30:AF:C2:82
Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial: 1A
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/EA5tZSvDjH_dqK1YK27W8jCvwoI.roa
Signing time: Tue 01 Feb 2022 01:31:08 +0000
ROA not before: Tue 01 Feb 2022 01:31:08 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 2001:3b8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Validity
Not Before: Feb 1 01:31:08 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=100E6D652BC38C7FDDA8AD582B6ED6F230AFC282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:10:d4:f3:41:7c:d3:08:be:26:74:b4:1a:
e2:63:71:4e:f8:af:64:0f:51:0a:fa:00:ed:40:1a:
1f:6f:5f:7b:a8:74:11:f4:8b:fd:d7:41:79:2e:f0:
a1:64:d4:06:05:c0:54:29:6c:6e:cb:38:2c:1f:f7:
ba:95:fa:e5:66:41:ab:2a:9d:7d:5d:46:9d:33:54:
37:65:a3:9c:26:93:77:a2:65:d8:44:8e:d6:ab:58:
d2:bd:af:8b:c2:15:88:05:f0:04:3a:76:36:7d:ee:
af:6c:20:3d:77:dc:b9:e7:5c:17:d0:f4:58:b2:6a:
83:17:80:96:13:11:3c:62:6b:7e:43:ef:bc:10:53:
5e:34:95:87:a9:fc:db:c1:e8:ab:7a:da:2b:b5:78:
84:56:9b:e7:5e:96:dd:14:fb:59:83:7b:68:d8:76:
2c:ee:b9:00:71:37:c8:14:d4:ea:5c:bb:06:99:cb:
6c:d0:90:d3:45:a1:bd:e4:e1:d5:db:2c:09:51:c8:
51:6f:4f:f9:03:ad:04:c7:67:8d:28:59:4d:07:02:
f1:75:28:be:aa:84:15:c4:65:21:21:9e:7d:6e:7a:
64:99:1a:98:87:8a:1f:2c:0e:df:bc:93:d2:f6:8c:
17:4f:c8:ff:27:09:f4:64:0d:46:3b:b2:5b:3e:c4:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:6D:65:2B:C3:8C:7F:DD:A8:AD:58:2B:6E:D6:F2:30:AF:C2:82
X509v3 Authority Key Identifier:
keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/EA5tZSvDjH_dqK1YK27W8jCvwoI.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
00:44:e1:55:36:f4:10:0b:90:18:c0:59:3c:ab:68:32:4e:ec:
ff:84:24:e4:76:d7:38:fb:d7:20:fd:08:d1:a1:87:4d:0a:c4:
a5:47:ed:ff:64:68:88:e8:27:39:ea:01:7c:2d:d3:b1:0a:d4:
de:79:15:59:bc:b6:6e:35:2e:ec:6a:2d:eb:71:d0:9a:5a:69:
d3:63:ac:4b:cb:07:34:cf:44:1e:1f:17:a7:eb:fd:82:6a:4b:
ae:ce:dd:fb:9c:20:48:cc:d3:f5:1b:0d:76:ae:1f:40:8d:f3:
fc:cd:48:a9:73:6e:9b:88:ee:76:64:9e:42:62:51:be:62:fb:
36:89:17:31:73:d4:4b:08:fe:73:d2:a8:79:ca:fa:a6:9c:5f:
26:6d:af:90:01:44:ba:39:44:b0:8f:0e:0e:e9:64:d8:68:c8:
d0:80:cb:33:44:d7:fd:7c:16:f5:55:15:33:c2:ab:fd:2c:cd:
22:45:5b:fa:d1:3c:6b:e2:e8:48:91:40:74:d7:03:1c:fa:46:
ba:1b:8f:3a:37:dc:9b:0f:24:49:a1:dd:c5:ec:75:f8:ff:81:
8f:bd:71:fb:1e:d0:21:ea:26:8c:f9:96:20:61:96:83:26:44:
69:70:3b:da:75:7e:4d:2b:80:4d:3f:84:5f:42:2f:50:49:58:
96:5f:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org