Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30162/mf9ZcAD1xIlZcI6nE-pH-8yMXe0.roa
File: mf9ZcAD1xIlZcI6nE-pH-8yMXe0.roa (raw, json)
Hash identifier: XWkUqRQYx9sIlQzhqP8fMw1ufyYQD+ANDF2i5k+QqnE=
Subject key identifier: 99:FF:59:70:00:F5:C4:89:59:70:8E:A7:13:EA:47:FB:CC:8C:5D:ED
Certificate issuer: /CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
Certificate serial: 02
Authority key identifier: 7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/mf9ZcAD1xIlZcI6nE-pH-8yMXe0.roa
Signing time: Thu 21 Oct 2021 07:04:23 +0000
ROA not before: Thu 21 Oct 2021 07:04:23 +0000
ROA not after: Fri 21 Oct 2022 06:56:43 +0000
asID: 24295
IP address blocks: 2404:ca00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
Validity
Not Before: Oct 21 07:04:23 2021 GMT
Not After : Oct 21 06:56:43 2022 GMT
Subject: CN=99FF597000F5C48959708EA713EA47FBCC8C5DED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:ac:99:9f:4d:99:dc:45:10:f8:fc:41:1b:
4e:a6:11:a3:0a:9c:7b:b1:06:40:ca:61:6c:4f:f7:
a8:7e:a5:5e:67:5e:d1:ca:4f:34:04:ee:81:c1:7f:
2b:e9:94:f9:0a:ef:91:dc:6e:45:ac:d2:ef:ca:c0:
ae:3f:fd:14:0e:2e:bd:f4:60:b5:50:41:23:e5:5e:
31:03:81:74:9d:b7:ec:ba:44:66:e5:7d:57:90:28:
50:b8:69:b9:7b:f0:55:39:26:0a:59:ea:74:4e:28:
e5:50:00:20:72:5e:e3:14:64:70:2d:01:86:7f:d9:
bd:43:14:27:59:16:f8:52:e5:0b:8e:50:f4:c7:e9:
51:3e:b4:f9:9a:81:44:44:77:85:70:69:f5:07:af:
62:9f:7e:6d:71:d7:be:63:88:d6:66:a8:a1:ff:92:
3f:da:8b:20:5e:89:7a:cd:39:fc:78:39:c4:89:bf:
ee:4a:6a:59:b5:3f:0a:1d:60:71:da:f2:dc:e8:73:
28:f3:a2:b1:ad:a4:9b:5d:06:bd:aa:0f:6e:81:54:
d2:0f:93:b2:3d:22:76:58:8f:d2:bc:1f:dc:c8:55:
e8:6a:6f:b2:f5:42:ee:30:d9:bb:cc:77:9a:b6:02:
a4:3a:0e:fd:cf:ce:df:17:73:ef:8f:1f:e6:49:d7:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:59:70:00:F5:C4:89:59:70:8E:A7:13:EA:47:FB:CC:8C:5D:ED
X509v3 Authority Key Identifier:
keyid:7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/mf9ZcAD1xIlZcI6nE-pH-8yMXe0.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:ca00::/32
Signature Algorithm: sha256WithRSAEncryption
4c:81:d9:f0:aa:fd:2e:94:02:70:7a:d6:cc:1d:a3:44:77:6c:
9b:0a:b2:33:13:c0:6f:8a:48:b7:74:56:5b:0b:6e:b1:df:4d:
95:84:8c:a4:ef:29:8a:bd:6f:bd:88:57:7c:92:84:fd:43:63:
ba:10:77:15:65:5b:1e:41:9d:44:92:41:3a:34:0c:0c:10:a9:
33:63:43:41:b0:bc:ed:0e:34:01:fc:21:fb:5b:84:34:9a:9e:
0f:92:de:e8:7e:2c:45:3b:f9:0b:02:1d:2d:2d:70:11:46:c3:
34:64:68:17:d0:b3:b7:33:61:b6:69:e5:a3:5e:82:a9:db:1d:
27:97:9a:ee:be:96:ff:63:2f:78:77:7c:89:64:11:aa:6f:22:
5f:f3:d1:6e:da:4f:7a:c3:b4:3e:77:63:48:6b:18:fd:02:3a:
4d:06:ac:2e:b7:c9:30:21:cb:5a:a4:6e:48:5f:0e:ad:5a:d4:
dc:89:33:11:4f:84:f8:cc:1f:11:5f:5a:25:81:4b:f2:a1:2e:
b9:ca:94:36:36:fe:e7:84:59:ff:30:64:ca:03:2f:c5:8e:a4:
7b:1a:89:72:5a:53:57:70:7f:c6:33:92:9f:07:f3:01:99:b3:
11:91:ef:8f:cc:c5:2c:a7:c9:e3:1e:ba:b1:f0:ad:56:1c:d0:
d3:3c:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org