Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/xX-7WWGFEbar2C7MK2Ao45F-8uo.roa
File: xX-7WWGFEbar2C7MK2Ao45F-8uo.roa (raw, json)
Hash identifier: XnDswGgb2/kuB16PR2VKBDnHnXnKRqxCn6WgdlTeorw=
Subject key identifier: C5:7F:BB:59:61:85:11:B6:AB:D8:2E:CC:2B:60:28:E3:91:7E:F2:EA
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 02
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/xX-7WWGFEbar2C7MK2Ao45F-8uo.roa
Signing time: Thu 13 Oct 2022 06:44:05 +0000
ROA not before: Thu 13 Oct 2022 06:44:05 +0000
ROA not after: Fri 13 Oct 2023 06:37:32 +0000
asID: 10000
IP address blocks: 14.1.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Oct 13 06:44:05 2022 GMT
Not After : Oct 13 06:37:32 2023 GMT
Subject: CN=C57FBB59618511B6ABD82ECC2B6028E3917EF2EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:04:56:33:f9:d4:e0:ef:21:d0:99:8c:2d:
4e:d1:23:18:58:48:44:7d:0d:35:ad:5b:f2:3f:4c:
fb:cc:f7:66:53:2c:4a:d5:f6:f0:9e:cf:95:d4:0f:
6d:74:cd:7e:27:c9:97:22:74:c3:bb:67:ba:80:a6:
a6:76:62:91:6e:f0:13:07:c8:6d:0f:fa:63:a4:5a:
57:35:95:6b:30:19:1e:e0:8e:a8:16:d9:07:94:32:
fb:7d:50:4d:a2:62:24:55:8c:ee:d1:8e:4e:28:00:
27:db:48:09:a2:68:20:91:b0:b4:a8:6b:90:40:a0:
d6:48:20:5b:a3:74:55:d4:29:e7:ec:6d:3d:a5:cd:
a5:7c:3a:df:06:1c:5c:e2:4b:8b:72:9d:30:1a:38:
e7:42:ae:7a:ae:7c:93:68:20:d6:39:9a:48:e3:2d:
f6:92:be:2c:e2:e2:fe:fc:db:28:f4:9d:71:55:3b:
84:76:ab:d4:7d:26:72:db:1b:f1:9d:13:f5:20:58:
bd:ac:84:48:36:2a:3c:5d:be:81:74:ca:b3:3e:2d:
76:cb:2f:25:ec:4c:c6:11:cd:d1:4a:6b:07:ab:eb:
02:32:e6:0a:af:3d:1d:44:38:1f:74:2e:98:78:53:
1a:bb:76:cb:60:eb:da:b8:db:c3:ef:ce:a0:4a:5d:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:BB:59:61:85:11:B6:AB:D8:2E:CC:2B:60:28:E3:91:7E:F2:EA
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/xX-7WWGFEbar2C7MK2Ao45F-8uo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:f6:ea:6d:46:64:72:6d:cb:09:32:ba:dd:8d:91:94:29:d4:
df:33:8c:b2:95:8f:b1:47:80:41:ea:3e:86:85:74:66:4c:e6:
54:a2:87:0b:2c:23:31:6d:74:15:bf:6d:a3:6c:04:46:ce:c6:
76:36:7a:19:de:f5:55:ac:f6:f7:47:d6:ef:64:d7:9b:89:c4:
d3:88:7d:0c:21:5a:12:33:0a:ae:a0:06:1a:a7:24:fc:40:75:
49:43:5a:df:4f:1e:76:4f:26:a6:00:af:c3:b0:3e:f8:bc:32:
53:6a:7f:29:b0:d5:a5:47:4b:d1:d5:15:ab:bb:ce:0a:b5:3c:
82:74:f5:bf:5c:79:2b:06:e4:e8:07:e1:39:31:8d:0a:70:41:
34:3e:97:b3:fb:23:b1:1a:8a:3c:1d:65:2b:5c:a5:1c:96:5b:
3e:88:1c:d6:8f:df:5d:05:01:68:35:0c:d6:d5:ac:af:2c:bd:
8f:d5:72:a1:5f:79:b5:63:3f:07:54:ec:d2:e4:49:d1:d7:e1:
13:a8:31:b3:0b:cc:07:7c:7d:31:e6:7b:f9:0a:e4:95:34:73:
bc:14:27:47:4e:4d:2b:62:a8:87:2d:c6:e1:00:38:35:07:27:
24:f4:4f:da:be:de:d5:24:de:15:97:3f:64:57:72:58:7f:c7:
0c:97:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org