Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/Cajbz-Qte8M1Ok3R4SVV023HH3g.roa
File: Cajbz-Qte8M1Ok3R4SVV023HH3g.roa (raw, json)
Hash identifier: kJO3QPUcxIumZI6aUGwtytFrbWq3Z1WXH1OveWsjEOI=
Subject key identifier: 09:A8:DB:CF:E4:2D:7B:C3:35:3A:4D:D1:E1:25:55:D3:6D:C7:1F:78
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 53
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Cajbz-Qte8M1Ok3R4SVV023HH3g.roa
Signing time: Tue 25 May 2021 02:42:13 +0000
ROA not before: Tue 25 May 2021 02:42:13 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 25 02:42:13 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=09A8DBCFE42D7BC3353A4DD1E12555D36DC71F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:bf:de:0b:49:24:48:8a:3a:87:24:dc:93:
ad:a7:bc:51:d5:0f:ee:d3:4d:77:cf:ae:3a:d7:72:
58:c4:07:92:62:26:0a:6a:4d:98:64:b3:d4:05:df:
67:a6:76:b8:ba:8d:11:22:84:20:e5:f9:77:8b:8d:
d7:46:b0:0a:ca:ea:8d:d2:dc:ba:8a:5d:87:f0:cd:
37:5b:49:aa:a9:f9:dc:f6:ac:03:08:c3:96:68:7e:
d7:3a:b9:76:c6:35:32:04:39:21:d1:08:b0:cf:0a:
81:8a:b4:c0:34:92:4c:08:23:1d:56:2a:24:0c:d2:
8f:b4:b9:93:cc:d5:25:75:ad:c6:2d:15:97:e0:fd:
0b:e2:e4:c2:12:50:01:64:13:49:90:88:76:25:78:
1f:f4:f7:98:ee:a9:f2:41:b3:f5:f6:09:91:07:ff:
7f:be:e3:18:f3:f8:b3:9e:2d:78:1d:b6:b4:e4:b4:
2d:9f:36:b1:8e:51:ca:1c:9f:5b:be:1e:45:28:7d:
ac:59:c5:96:a6:c7:e0:dd:e1:88:72:0d:cc:92:49:
87:12:d4:eb:b8:64:64:cd:2a:e4:e5:b9:01:5a:c2:
9a:8a:fc:ac:73:52:b3:1f:e7:34:58:2f:23:fa:b0:
4c:9c:14:6b:83:a6:98:be:b3:56:98:03:01:4e:17:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:DB:CF:E4:2D:7B:C3:35:3A:4D:D1:E1:25:55:D3:6D:C7:1F:78
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Cajbz-Qte8M1Ok3R4SVV023HH3g.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:28:b4:99:bd:a6:33:a2:5f:8b:ed:a5:6b:5d:8f:0c:a6:a9:
6d:7c:a4:59:b8:14:41:bc:13:5a:89:8a:36:9e:5b:5e:92:92:
9d:8f:02:2e:93:93:99:18:14:21:a6:ec:6c:8b:76:89:7a:e4:
b3:73:83:76:10:9c:ee:03:bf:6c:6e:27:4c:c8:ef:3e:c6:89:
f8:1f:65:a7:20:1a:ff:22:ae:41:bd:a2:38:ca:20:d2:c9:18:
a8:20:8f:c8:ea:05:5c:07:7d:5d:18:96:14:db:25:90:40:67:
27:46:48:ae:de:75:f1:11:45:5c:d3:49:69:a8:20:3f:4e:54:
aa:d9:18:90:0c:d6:5a:9d:60:3a:5f:54:81:aa:dc:7d:41:10:
12:21:b2:6f:06:0b:e4:d8:2c:ad:ae:dd:fb:cf:65:79:53:5d:
e8:21:47:e8:28:5e:2a:66:f1:0e:f9:fd:3a:19:7b:60:f2:ec:
93:09:79:aa:3e:09:eb:6f:44:80:73:b3:79:6b:03:e0:c4:bf:
ab:f3:aa:52:fb:f7:04:7f:bc:08:e0:72:70:d9:3c:19:94:37:
01:80:e9:db:e7:1c:8a:59:e1:e4:99:cf:74:df:79:a5:57:25:
ee:84:ce:f0:0d:bb:01:0a:fa:6f:4b:72:0e:63:22:96:a9:a2:
c5:97:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org