Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/F74GtADN9exkoRxdMzwH3t7XQHc.roa
File: F74GtADN9exkoRxdMzwH3t7XQHc.roa (raw, json)
Hash identifier: o3PM854ZjwcQpeAfQv4TO1MO7TnYb40kd09tpBTwa8I=
Subject key identifier: 17:BE:06:B4:00:CD:F5:EC:64:A1:1C:5D:33:3C:07:DE:DE:D7:40:77
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 6C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/F74GtADN9exkoRxdMzwH3t7XQHc.roa
Signing time: Wed 17 Mar 2021 06:53:14 +0000
ROA not before: Wed 17 Mar 2021 06:53:14 +0000
ROA not after: Tue 15 Mar 2022 01:30:01 +0000
asID: 2527
IP address blocks: 211.2.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 17 06:53:14 2021 GMT
Not After : Mar 15 01:30:01 2022 GMT
Subject: CN=17BE06B400CDF5EC64A11C5D333C07DEDED74077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:02:f7:63:6f:b6:bd:97:7a:18:94:c9:59:02:
46:5a:08:76:9a:7a:f1:d1:30:05:50:be:d5:f5:07:
e2:a4:15:23:29:2a:a2:15:10:f5:25:c4:17:bf:88:
bb:e8:5e:b4:7d:84:ee:5b:44:80:53:90:06:07:09:
ed:3e:c7:f6:f7:11:02:16:10:bb:b9:13:f9:78:fe:
b4:e9:bb:d4:ff:d6:d7:2c:78:fd:35:83:8d:34:00:
a1:06:b6:d1:2b:bb:fa:68:30:72:0e:ec:92:60:b3:
f2:57:f5:01:00:1d:f4:2e:51:35:d0:8f:23:a3:e4:
84:a1:f5:77:a7:04:9b:ce:d2:cc:c0:2a:0f:6d:7a:
5a:87:73:e5:96:36:41:63:3d:0c:0a:fd:c2:03:4b:
1e:79:a0:7a:03:99:b9:ad:e7:e4:a6:3a:d9:b3:3c:
d3:f5:b9:77:f4:35:a3:e1:21:52:f2:0e:11:88:f8:
e0:05:28:b2:bf:41:6c:af:c0:5a:4f:19:77:c5:9d:
b8:f6:9e:4b:e5:32:69:98:58:f6:71:6f:a0:72:62:
7f:6e:86:ce:be:5a:13:39:e0:7f:2b:73:78:66:15:
cd:7f:44:e3:dd:3d:5a:63:5f:15:b2:65:06:e1:e9:
44:38:ed:97:9f:fd:c5:5f:2e:92:94:9d:3f:5d:d2:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:06:B4:00:CD:F5:EC:64:A1:1C:5D:33:3C:07:DE:DE:D7:40:77
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/F74GtADN9exkoRxdMzwH3t7XQHc.roa
sbgp-ipAddrBlock: critical
IPv4:
211.2.0.0/18
Signature Algorithm: sha256WithRSAEncryption
36:0a:61:f3:d3:db:01:16:c3:12:17:87:91:bc:c6:49:e8:8f:
6a:d5:d4:c1:ba:a1:ed:f6:88:ef:67:d2:42:14:30:1a:41:ee:
9d:3f:32:a4:3e:ae:01:5c:76:f0:bc:d0:9b:c3:a4:6b:f3:24:
82:04:52:dd:83:6a:a6:22:a7:85:ef:cd:41:2f:90:b2:21:5a:
ea:12:26:f2:49:a8:ec:0a:54:5e:1c:d9:3f:4c:81:57:42:90:
5d:13:fc:f3:c3:93:3a:80:c2:9b:88:1a:72:f6:43:49:ea:08:
95:a4:dc:28:3c:aa:39:f0:a3:98:e9:bf:e5:ae:45:de:2f:f0:
a9:6e:a6:13:fe:17:02:8d:35:70:21:74:9a:5a:bb:19:60:03:
78:80:e6:af:09:28:a1:6a:d8:c9:04:04:4e:c9:b6:8c:22:32:
79:bc:f3:fe:5b:aa:04:06:bf:60:7e:ea:dc:3a:98:23:79:ad:
a4:a4:b3:76:9b:fb:54:78:2b:c3:4f:f8:40:5d:6a:8f:29:a0:
52:b5:65:b3:62:f8:b1:89:19:d6:54:c7:23:e8:4e:4c:19:c0:
c9:7e:f3:eb:4b:66:d5:fe:47:09:2a:d7:3f:4c:33:8b:7a:7f:
f7:38:96:70:1d:f0:57:03:e0:9a:2c:9c:fa:86:7c:8b:0e:80:
0f:7d:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org