Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30197/_NRiBhImBBMJCED3bTXPVX-2Y3o.roa
File: _NRiBhImBBMJCED3bTXPVX-2Y3o.roa (raw, json)
Hash identifier: vvOxesFvodXmXqtRsqok5aZlqCr1nhbLZzC5Wya9Og0=
Subject key identifier: FC:D4:62:06:12:26:04:13:09:08:40:F7:6D:35:CF:55:7F:B6:63:7A
Certificate issuer: /CN=B5792779A712895887166267C4BD9E7A7D84C816
Certificate serial: 02
Authority key identifier: B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/_NRiBhImBBMJCED3bTXPVX-2Y3o.roa
Signing time: Tue 29 Mar 2022 04:55:53 +0000
ROA not before: Tue 29 Mar 2022 04:55:53 +0000
ROA not after: Wed 29 Mar 2023 04:40:19 +0000
asID: 55385
IP address blocks: 2401:8b00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5792779A712895887166267C4BD9E7A7D84C816
Validity
Not Before: Mar 29 04:55:53 2022 GMT
Not After : Mar 29 04:40:19 2023 GMT
Subject: CN=FCD4620612260413090840F76D35CF557FB6637A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:21:af:a6:b2:7f:25:ff:1c:a3:a7:e0:6f:
34:18:0d:12:59:f4:6a:ff:fe:a4:5f:30:86:48:98:
ce:b0:e9:ba:ae:6b:a7:47:1d:29:78:8a:42:48:6a:
8e:ea:59:8e:26:ad:da:dd:eb:98:67:2f:e4:28:b4:
0c:4a:24:00:80:d5:1b:4c:a9:24:ed:06:33:e5:bf:
b6:d7:e9:f3:16:37:fa:ea:a6:43:63:e7:10:11:a8:
f8:24:29:27:76:cc:7d:26:8c:96:3a:df:8e:f0:83:
03:42:00:42:77:f3:74:72:c2:e0:76:45:30:22:e3:
ec:c7:0b:b2:c3:22:26:67:9f:a7:60:fb:9c:ca:15:
a7:d2:70:f5:54:23:06:71:52:54:61:cb:31:5b:00:
a7:54:69:e7:08:23:e9:86:68:7c:82:6a:9e:a4:f7:
50:1b:ff:e7:0a:97:44:7b:0d:45:18:c4:12:cd:57:
2c:c5:5a:5f:44:e4:21:0d:6a:b3:9a:cb:95:b0:74:
b8:47:8d:e2:36:ff:1f:29:d8:65:47:7e:5d:8d:92:
46:b3:a1:2d:ac:30:18:61:be:20:4e:7d:28:bd:2e:
1d:34:20:14:f8:9a:3d:f9:4c:bd:c6:62:8a:49:64:
49:f2:ab:28:13:47:d7:2a:0a:a2:d0:8f:ca:69:56:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:62:06:12:26:04:13:09:08:40:F7:6D:35:CF:55:7F:B6:63:7A
X509v3 Authority Key Identifier:
keyid:B5:79:27:79:A7:12:89:58:87:16:62:67:C4:BD:9E:7A:7D:84:C8:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/tXkneacSiViHFmJnxL2een2EyBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tXkneacSiViHFmJnxL2een2EyBY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30197/_NRiBhImBBMJCED3bTXPVX-2Y3o.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:8b00::/32
Signature Algorithm: sha256WithRSAEncryption
a8:5d:ba:b7:cf:11:6a:ce:34:63:ea:78:6b:b2:c8:0f:b7:2c:
61:a0:98:32:23:5e:fb:73:e7:12:75:3f:66:bc:58:94:84:a4:
21:b0:e1:2d:4b:7a:0f:51:51:0e:1a:c9:e2:1b:7d:f3:cf:00:
44:ae:df:90:cb:e2:60:a2:c4:94:c5:e4:c9:ce:5c:39:ca:3b:
3f:77:a4:82:2a:b7:c9:0c:ae:48:41:bf:5c:c2:8e:8a:b4:fe:
f9:49:93:59:d5:b1:7b:86:a9:b9:ac:3b:c8:49:95:17:d2:93:
00:22:30:fe:35:81:97:c0:10:a1:f6:2f:53:7e:88:a6:ac:39:
95:34:1e:55:cf:58:d1:ee:3d:9b:78:dc:15:26:23:87:0c:05:
94:6e:28:aa:ef:c8:5b:a2:df:d4:0f:4a:91:83:10:1e:ca:33:
5b:a1:54:8c:ce:37:f0:d2:de:ed:76:6d:92:29:95:4d:10:3c:
0d:c8:bf:6d:c0:3d:3c:a2:a5:15:14:a8:99:cf:37:e9:79:74:
fa:e6:26:7c:71:46:fd:46:06:4a:b2:58:04:2a:72:08:ef:29:
28:24:0d:3d:8a:94:0b:d3:e8:74:24:b5:6b:29:be:72:9e:54:
56:bd:46:db:40:c0:40:da:06:56:e0:1c:5d:85:67:67:f5:01:
6b:5e:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org