Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/wT7IDAg4bmpnJ3nV1Yfhqfa6O9g.roa
File: wT7IDAg4bmpnJ3nV1Yfhqfa6O9g.roa (raw, json)
Hash identifier: z1rdGv08wVxhX+NG5sd5SWwSZPloDMbL02eAlTtfFr0=
Subject key identifier: C1:3E:C8:0C:08:38:6E:6A:67:27:79:D5:D5:87:E1:A9:F6:BA:3B:D8
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 56
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/wT7IDAg4bmpnJ3nV1Yfhqfa6O9g.roa
Signing time: Tue 25 May 2021 02:42:13 +0000
ROA not before: Tue 25 May 2021 02:42:13 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 9607
IP address blocks: 210.231.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: May 25 02:42:13 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=C13EC80C08386E6A672779D5D587E1A9F6BA3BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:8c:58:48:d6:cf:8a:9e:37:98:eb:de:8f:
0b:49:fe:54:d3:ec:fa:7a:1e:29:6f:d6:9a:13:79:
4d:d7:3a:21:ea:1b:59:00:8e:a5:8a:f9:9c:63:ff:
9c:fb:e0:a2:d5:68:d8:16:a9:7d:68:61:74:4e:d9:
6a:0c:36:cf:9e:f0:88:cd:61:1d:37:4f:cc:8c:e5:
33:d6:91:d2:54:85:f5:b7:ee:32:a5:85:25:46:7f:
1e:4b:de:92:8e:2e:42:55:9b:a7:9e:23:81:42:1e:
19:a9:47:e6:78:98:6d:e5:13:2e:96:5e:6f:e9:c8:
50:36:a6:8e:9a:e6:84:94:35:d4:4b:5e:39:35:b2:
f5:5a:dd:b3:7f:0d:3b:cb:ee:dd:c8:13:f0:e7:36:
59:1f:be:cc:d3:e3:28:a8:c8:dc:95:00:e2:98:f0:
d6:7b:7d:a2:71:d9:e6:d2:80:e2:71:3e:ba:bb:29:
ec:ca:d1:06:ae:6b:f3:cf:fd:d3:a8:c3:8b:70:e9:
56:f3:01:44:3e:bd:31:56:7f:a0:79:cf:f5:33:cc:
b7:1c:cd:1d:17:58:ec:1c:91:aa:52:f7:07:34:9a:
43:85:58:5b:4d:21:3c:32:e3:fa:12:c1:bb:14:43:
5a:e1:f2:d1:4d:a7:07:de:14:42:2e:5d:03:7f:0a:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:C8:0C:08:38:6E:6A:67:27:79:D5:D5:87:E1:A9:F6:BA:3B:D8
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/wT7IDAg4bmpnJ3nV1Yfhqfa6O9g.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.208.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a4:13:ae:ea:66:3f:11:15:34:e5:9b:3d:c6:f7:c3:7f:7b:
61:95:52:98:c0:37:b5:7e:22:24:17:0b:91:39:b8:fe:8e:02:
e8:0a:69:a2:b4:c6:c0:ef:ae:be:e9:72:2d:9e:28:ca:bc:47:
9e:6a:d0:36:16:34:b2:d2:a6:51:bd:1f:20:e6:72:88:3a:72:
bc:30:47:0e:64:6e:90:3d:e9:cc:1b:89:dd:0c:2c:5e:4f:c7:
26:58:82:28:40:c1:23:41:73:30:92:28:9e:16:c3:97:04:33:
91:8e:c6:87:c8:ea:db:0f:e5:49:b5:50:ef:18:8e:c3:e9:3d:
e7:20:6b:0c:88:09:ab:93:ef:ea:d4:86:e5:39:34:64:80:aa:
4a:72:fd:b4:e6:4b:7c:27:ba:7a:bc:b0:bc:05:7a:55:9c:dc:
68:e3:60:1e:bb:c3:2b:18:6a:b3:3b:b3:cb:09:f3:10:df:5f:
98:79:92:d5:49:d0:57:a4:e6:62:4c:10:4e:79:9c:27:a1:e5:
27:57:4a:44:9f:59:55:b3:48:f9:be:42:ef:24:64:6b:72:eb:
db:19:11:57:36:dd:a4:d9:95:26:f8:63:69:00:aa:5b:c0:6e:
db:26:d4:02:9d:9f:85:57:08:51:f8:70:0d:12:a3:cd:27:b0:
88:95:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org