Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39054/2bMAvhJhIHWE0ER3EMfzqNUpBz0.roa
File: 2bMAvhJhIHWE0ER3EMfzqNUpBz0.roa (raw, json)
Hash identifier: HGouPOWGmAxdekUYGVp47I4PklRZPScgh3qSFyDlvNM=
Subject key identifier: D9:B3:00:BE:12:61:20:75:84:D0:44:77:10:C7:F3:A8:D5:29:07:3D
Certificate issuer: /CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
Certificate serial: 0E
Authority key identifier: 99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/2bMAvhJhIHWE0ER3EMfzqNUpBz0.roa
Signing time: Wed 23 Jun 2021 08:43:11 +0000
ROA not before: Wed 23 Jun 2021 08:43:11 +0000
ROA not after: Wed 15 Jun 2022 01:30:03 +0000
asID: 18131
IP address blocks: 2001:df4:1f80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
Validity
Not Before: Jun 23 08:43:11 2021 GMT
Not After : Jun 15 01:30:03 2022 GMT
Subject: CN=D9B300BE1261207584D0447710C7F3A8D529073D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:84:d3:a0:a3:26:4b:c5:e7:11:dc:c1:24:
79:8e:f3:3d:0e:fe:3b:b9:b4:52:4a:fb:93:d5:c0:
99:9c:5a:1a:59:f3:bf:90:c3:91:e9:f9:e3:ce:61:
c1:24:b1:36:9b:d4:1b:b5:25:67:a5:41:6f:f5:9d:
22:42:e7:db:fb:64:5b:6f:8d:ae:06:61:f8:96:d7:
28:d8:33:30:db:74:df:b4:7f:ae:b1:8d:84:7b:15:
51:4a:d5:f1:a6:27:19:18:13:4a:7b:6c:6a:c5:9d:
fe:20:59:3b:de:7d:7e:f5:46:32:8d:eb:e7:bf:20:
1a:38:d4:6e:7d:e4:90:b4:ac:a1:a9:c5:c2:b3:cc:
aa:0b:59:42:d9:f5:ff:6c:a7:34:d7:6b:94:dd:5a:
3e:12:19:fa:27:df:5f:ba:86:26:f5:c8:56:1b:fa:
15:8f:f3:29:4b:a4:e8:4a:1a:55:a2:3f:cf:e4:b4:
c3:a6:66:28:4e:4e:3c:b7:95:d7:1c:66:fc:1d:a3:
e6:98:ce:dd:b1:81:5e:39:33:9d:da:91:9f:e4:cb:
0c:0e:d5:68:1d:53:34:6e:a8:75:1d:73:cc:20:57:
c6:42:99:f6:86:3f:0a:30:ff:c1:f6:43:7b:be:9e:
38:09:c8:3b:d6:1d:84:05:67:c2:bf:77:6c:a2:59:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:00:BE:12:61:20:75:84:D0:44:77:10:C7:F3:A8:D5:29:07:3D
X509v3 Authority Key Identifier:
keyid:99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/2bMAvhJhIHWE0ER3EMfzqNUpBz0.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:1f80::/48
Signature Algorithm: sha256WithRSAEncryption
bd:ac:d0:de:17:cd:08:60:85:66:a4:47:60:86:21:60:1c:4b:
2b:84:2b:b1:3b:18:5e:19:a3:40:23:82:a1:5b:96:95:b0:96:
ca:e9:30:ea:5c:57:37:7d:c9:77:4e:bc:2d:72:ad:50:e5:22:
8c:da:4a:10:b8:24:65:5e:04:6f:61:2c:b8:07:c6:ac:ad:47:
c4:ca:50:bb:ca:34:4c:5b:2b:e5:ae:1c:39:21:52:f4:5a:4d:
24:9f:11:e0:e4:2d:0e:66:26:03:18:4e:17:05:00:6d:ae:3c:
47:b0:a9:f5:92:99:b4:c0:88:60:e4:24:90:2b:f2:39:1f:73:
47:2d:0c:38:10:56:06:8c:8a:68:0a:f3:f1:fe:14:6d:32:1e:
48:90:1f:ce:94:71:56:d3:3f:e7:31:bc:79:a6:0e:7d:4a:41:
ab:e8:87:a7:e0:be:3b:c9:50:dd:2d:69:2d:15:45:66:c5:16:
39:a7:36:e6:0a:f6:27:d8:c6:6f:83:6b:8f:d9:02:61:a7:51:
00:07:85:92:6e:27:1e:30:8b:c1:39:b4:f6:f6:7b:24:ad:44:
21:0a:c6:d2:2d:53:2c:86:65:0d:09:b7:be:cb:3f:d1:62:f7:
6e:e3:23:52:20:c2:8c:4a:4d:78:bb:1b:3b:0e:68:65:7e:57:
e5:5c:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org