Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/iNPU93jXnjFGEk7iXIEki5__D2c.roa
File: iNPU93jXnjFGEk7iXIEki5__D2c.roa (raw, json)
Hash identifier: zLWJblRV/Fn8PH4emkeLicpqGQhEDc1S79lQuMCeP9M=
Subject key identifier: 88:D3:D4:F7:78:D7:9E:31:46:12:4E:E2:5C:81:24:8B:9F:FF:0F:67
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 68
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/iNPU93jXnjFGEk7iXIEki5__D2c.roa
Signing time: Sat 18 Sep 2021 06:37:56 +0000
ROA not before: Sat 18 Sep 2021 06:37:56 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 7530
IP address blocks: 210.231.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 18 06:37:56 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=88D3D4F778D79E3146124EE25C81248B9FFF0F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:ba:19:de:d9:c8:d2:8e:7c:91:94:e2:98:
17:74:c2:94:f2:86:b8:47:32:bf:7d:a1:03:3b:b7:
25:5a:c1:97:b2:43:19:36:59:66:80:9d:d3:95:d5:
f1:ca:ea:6f:ce:b9:c4:99:54:25:f2:c3:07:d4:72:
a1:6f:c2:e0:ef:26:fa:4f:e8:96:08:b7:88:21:5e:
68:d0:0d:ed:bd:96:4c:ab:5d:03:8b:d6:f7:7e:92:
86:a9:74:88:4d:a1:55:a4:76:db:37:4d:96:3d:d2:
48:2e:bf:d9:99:b7:cd:ee:4c:85:7f:18:49:ea:f1:
5a:7e:74:54:72:a7:a8:90:30:22:ad:03:5a:17:a9:
e9:40:fb:e8:67:3b:86:59:8b:90:1c:4d:4d:79:76:
3c:ab:c0:d8:db:b4:90:6e:75:a0:fa:69:d5:3a:9f:
a4:e7:84:90:13:c5:12:a7:36:a3:6e:b7:b2:61:93:
44:66:58:38:e3:3b:60:0c:29:9c:7d:43:2a:66:8c:
d4:65:60:cc:a9:2e:6a:5c:bf:00:32:7c:93:2b:73:
f8:30:e7:90:c3:df:3f:90:3c:8c:8d:73:b9:85:39:
b8:ad:0e:70:53:6c:b8:b5:0d:92:60:a0:f5:ef:d4:
0e:9a:cf:3b:95:92:45:da:9f:da:0e:11:11:f2:4d:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:D4:F7:78:D7:9E:31:46:12:4E:E2:5C:81:24:8B:9F:FF:0F:67
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/iNPU93jXnjFGEk7iXIEki5__D2c.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.216.0/21
Signature Algorithm: sha256WithRSAEncryption
41:b5:e7:ae:de:b3:08:31:f7:1d:ed:39:9f:ad:e6:cc:5c:1e:
be:f1:93:a9:7e:f7:cc:6a:be:85:ea:d9:3d:5f:9e:3c:90:6d:
21:c8:67:50:9d:59:68:5c:9a:a8:f2:67:2b:4d:2d:c8:c4:f5:
12:20:98:6f:f3:c9:93:8e:98:fc:6e:d8:f9:ba:0a:6b:8e:38:
aa:13:55:6e:e5:ed:85:ba:3e:16:88:12:69:c0:52:95:ad:e6:
67:99:ac:98:e4:bf:a4:05:f7:85:67:9d:1b:68:f1:e0:96:50:
4d:86:77:28:81:5a:10:c4:51:7c:c3:1f:8d:86:d5:2e:e4:34:
0d:fb:6b:ba:89:23:72:0c:c9:13:95:5c:26:31:2c:2d:db:b3:
dd:c2:51:bf:f2:61:19:19:96:6e:19:1d:f9:f4:70:62:a3:10:
31:4f:d3:d8:62:9f:da:6f:c7:be:75:d3:70:1b:d8:ac:bb:a2:
36:5c:dd:cd:ce:a7:91:64:3b:f3:b8:ce:05:25:1e:4e:0a:8c:
35:9a:d1:24:6b:b9:87:bd:50:ae:b8:6e:ed:47:3a:7b:85:a2:
de:56:f3:36:5a:2c:98:04:14:27:20:8b:b4:9c:da:e6:af:4a:
7e:97:60:4b:03:58:72:17:1b:f1:75:d5:bb:d2:c9:58:a5:da:
91:26:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org