Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/oMPGUaZabU9-vzXDSnIMFI6M1Mg.roa
File: oMPGUaZabU9-vzXDSnIMFI6M1Mg.roa (raw, json)
Hash identifier: IPtpeQG/ZKrBnwpII5PNOo9zFMuPMGumhkRYZx2E4ms=
Subject key identifier: A0:C3:C6:51:A6:5A:6D:4F:7E:BF:35:C3:4A:72:0C:14:8E:8C:D4:C8
Certificate issuer: /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial: 13
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/oMPGUaZabU9-vzXDSnIMFI6M1Mg.roa
Signing time: Tue 25 May 2021 02:42:29 +0000
ROA not before: Tue 25 May 2021 02:42:29 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 7684
IP address blocks: 2401:2500::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
Validity
Not Before: May 25 02:42:29 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=A0C3C651A65A6D4F7EBF35C34A720C148E8CD4C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:67:e3:25:75:9d:2d:cc:2b:e1:98:ad:13:
45:6c:f9:ee:3d:2b:a4:10:50:68:54:7a:09:1a:39:
ef:f7:57:54:60:73:96:40:fe:f3:87:c3:ef:a9:c0:
b6:cc:89:05:46:f5:6e:26:af:da:34:4f:9b:a0:10:
9e:59:e8:8d:53:44:03:01:23:46:44:18:73:02:b6:
34:29:fa:22:79:1d:39:47:ea:9b:15:24:ad:ab:64:
2d:9f:44:c1:66:35:d3:36:5e:d6:e1:7a:fb:6f:34:
e4:00:6a:09:e4:03:d9:f6:5b:f6:c4:1a:98:8c:aa:
6d:2d:b4:f5:4f:87:cf:5c:50:bb:ab:47:89:13:cd:
e7:e3:fc:70:d6:ae:75:47:37:84:1a:9f:27:89:55:
9a:c8:25:69:57:6f:85:28:c3:c8:99:da:04:f7:73:
f3:80:4b:37:a6:8f:fa:f0:e2:bd:75:18:0b:d8:98:
d4:85:70:f4:42:86:a1:7a:da:9b:4e:ca:90:7e:df:
50:da:1e:41:95:f1:ba:30:bf:77:c1:bb:b7:1c:30:
54:cd:2c:8e:0a:31:16:04:f9:2a:51:fd:ce:24:7b:
71:a7:e6:fb:bf:b8:52:5d:a3:25:92:53:33:ef:3b:
79:52:53:fc:03:c8:73:31:24:ed:36:62:3e:9c:1a:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:C6:51:A6:5A:6D:4F:7E:BF:35:C3:4A:72:0C:14:8E:8C:D4:C8
X509v3 Authority Key Identifier:
keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/oMPGUaZabU9-vzXDSnIMFI6M1Mg.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:2500::/32
Signature Algorithm: sha256WithRSAEncryption
3c:01:16:f5:e0:e1:82:c8:de:c9:05:7a:24:fe:9c:c7:b1:6c:
ed:af:d3:94:3b:33:3a:be:32:20:e8:fa:0f:c5:28:9b:6e:76:
b8:d1:96:e5:89:9e:1f:21:b0:bf:f0:a2:f1:40:8d:2c:d5:ce:
1d:2f:d9:82:67:d0:0a:78:49:0e:c5:77:4d:5d:4d:f9:f5:33:
69:42:d6:e7:0f:2e:9b:64:86:c9:94:48:1d:78:86:e5:1d:19:
73:3f:4c:f4:02:7e:c2:fd:6e:b4:08:2d:3e:c5:4a:d0:ac:39:
b6:f0:0f:78:ec:33:08:0c:66:9e:4c:1b:e5:35:50:c2:8d:d0:
59:59:5d:52:e2:af:6d:72:31:b2:df:66:50:d9:61:5c:23:fb:
25:36:23:7a:f7:8d:46:13:cb:6e:8a:86:20:b3:fe:c1:4b:7b:
60:52:9e:a9:2f:36:2d:c0:ad:81:77:6b:2c:7f:ec:f1:f3:29:
15:65:5a:4d:08:af:b4:68:3b:b6:40:25:95:6e:8b:75:92:61:
8d:b1:5d:8a:f7:61:f8:00:07:a5:36:6c:ab:a0:03:f3:2d:3c:
89:49:0d:bf:8f:89:6d:68:c0:b6:8b:70:2a:48:fe:9f:4a:1a:
0f:d8:07:61:8a:cb:35:3c:67:78:9b:c7:dc:95:b5:5e:9b:95:
15:93:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org