Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30058/bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa
File: bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa (raw, json)
Hash identifier: +fvhQ2f2shP1lqd6ifMF32/LbCHhw3BmFGNyMYDId+o=
Subject key identifier: 6D:FC:5F:B1:12:CC:97:14:18:A9:2F:F7:2D:70:B1:23:30:31:01:66
Certificate issuer: /CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Certificate serial: 1A
Authority key identifier: A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa
Signing time: Tue 25 May 2021 02:36:52 +0000
ROA not before: Tue 25 May 2021 02:36:52 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 18126
IP address blocks: 2001:f58::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Validity
Not Before: May 25 02:36:52 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=6DFC5FB112CC971418A92FF72D70B12330310166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:ec:23:fb:e8:ea:15:fa:57:32:a2:2f:e7:
61:b6:65:61:6a:76:a5:22:92:72:89:b1:5e:4d:5b:
a6:6d:41:be:4f:16:99:32:40:9a:87:29:cd:f0:e0:
ce:fb:5e:d8:ea:73:f1:a1:10:63:2f:bd:18:43:fc:
e9:54:ab:65:16:2c:da:96:a3:dc:bd:91:31:1a:17:
9a:fc:18:70:a6:8a:24:ab:32:7b:1a:32:d1:4b:09:
75:72:60:4a:41:09:be:5b:e3:3b:c5:23:c4:b7:0e:
06:ef:0b:54:fb:f3:c7:d5:ca:be:c3:ff:08:42:ed:
e4:30:3d:35:d2:84:3d:88:a4:00:16:30:8c:cb:90:
5b:76:f8:83:e7:3c:38:4a:a5:0c:03:d8:cc:1c:0f:
44:83:a4:5b:0e:a0:e6:d0:21:89:c0:6d:95:44:d3:
d1:9f:b6:51:dc:29:02:21:49:b3:79:49:2d:ac:d3:
03:2a:eb:3c:fe:1d:7d:81:24:64:b5:fa:3b:f1:a3:
4e:ca:1c:46:57:d9:87:22:7f:32:72:23:15:21:f5:
0e:ff:e8:b9:a8:ff:46:52:4a:ad:9d:f6:b9:45:4b:
fe:91:06:76:25:ba:bb:42:fe:aa:16:6e:5f:e7:19:
d4:3b:a1:f6:8c:13:a4:c0:17:61:9e:bc:94:a5:53:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FC:5F:B1:12:CC:97:14:18:A9:2F:F7:2D:70:B1:23:30:31:01:66
X509v3 Authority Key Identifier:
keyid:A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:f58::/32
Signature Algorithm: sha256WithRSAEncryption
38:29:ad:a4:89:fd:fb:e3:48:2c:f7:e2:a0:13:45:6f:bc:5d:
9e:66:47:b0:71:07:c1:61:e5:e5:8e:16:eb:6c:a6:53:aa:d6:
c3:47:06:59:07:99:de:60:bf:fa:84:08:45:a0:35:c8:dd:d4:
91:79:80:f4:7a:75:4c:48:31:19:31:51:4c:ca:03:0e:c2:ad:
e3:31:20:9f:84:67:34:fa:9e:d2:fc:3e:14:3f:d0:45:6e:85:
83:ff:78:ea:db:0a:d1:13:81:76:bf:84:36:99:cd:8a:5b:cf:
e4:b2:60:80:73:db:42:33:b1:10:c8:14:f1:6c:cf:97:b0:5d:
a2:53:04:42:cf:66:44:9e:20:88:90:d0:1e:75:4c:f1:16:ef:
c7:82:cd:ac:8e:27:4d:1a:fa:90:e9:88:2a:6a:74:cc:30:e5:
31:41:ad:c6:1e:a7:cd:d6:8d:8e:9e:60:d2:d7:3c:28:76:4a:
6d:a1:12:74:5a:4b:91:4a:36:43:0e:6a:32:c0:0c:7a:fc:f6:
b6:2b:2a:c1:b3:1f:47:b9:67:8c:53:3a:76:11:f7:c1:cb:fd:
f8:35:f1:7d:b2:cb:d4:12:b9:30:9b:10:46:b3:b4:b2:3a:86:
43:59:57:08:8b:67:09:f0:52:7f:a3:e8:7d:81:9c:f1:68:23:
ca:c4:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:25 2025 by rpki-client