Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/39J_q__-yz5QlfBwGF3DFG8Jxk8.roa
File: 39J_q__-yz5QlfBwGF3DFG8Jxk8.roa (raw, json)
Hash identifier: k+PFdqFeNjq5N7WsilZBvGULlypESEeyYTeMxeN9WUA=
Subject key identifier: DF:D2:7F:AB:FF:FE:CB:3E:50:95:F0:70:18:5D:C3:14:6F:09:C6:4F
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 11
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/39J_q__-yz5QlfBwGF3DFG8Jxk8.roa
Signing time: Tue 30 Mar 2021 01:13:23 +0000
ROA not before: Tue 30 Mar 2021 01:13:23 +0000
ROA not after: Tue 15 Mar 2022 01:30:01 +0000
asID: 10011
IP address blocks: 219.100.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Mar 30 01:13:23 2021 GMT
Not After : Mar 15 01:30:01 2022 GMT
Subject: CN=DFD27FABFFFECB3E5095F070185DC3146F09C64F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:1d:ba:dc:8b:a4:c6:d1:b4:b8:47:c1:49:
42:b6:56:8d:a0:81:2b:d9:63:7a:5e:14:4a:95:25:
a3:72:8f:e0:2e:3b:50:e7:fb:ec:26:2f:6e:15:12:
7d:bc:4d:49:98:03:e5:08:60:c3:c7:1d:2b:00:c0:
d0:1a:2c:fc:37:aa:22:5f:38:ee:d6:fe:73:28:0a:
ca:c0:1a:46:83:7a:24:ae:dc:46:e0:da:70:bd:37:
4b:a6:00:5e:63:10:08:ea:ac:36:ca:27:a2:d7:93:
4c:8e:2d:6f:4f:d7:21:b0:7a:84:a2:75:b3:1d:6b:
dc:91:e8:e8:ad:2c:1e:22:8e:aa:51:f6:ae:cc:5e:
d2:06:c8:e1:f4:af:29:e5:0e:63:b8:f0:76:99:7e:
a9:5c:ea:9f:61:3c:ba:2c:74:72:b2:9c:ef:79:6b:
4c:50:12:14:1a:08:ab:dd:fc:58:3f:f8:ef:85:0f:
f3:c9:21:45:9a:e4:48:15:01:94:20:d9:bf:89:c9:
27:45:f8:95:09:53:cd:ad:13:9a:4f:94:f0:7a:93:
b9:f9:b4:c4:5d:5c:ba:3b:b4:bf:80:b1:91:10:9f:
1f:e9:1b:5b:ac:ce:3f:a4:97:3e:44:a3:97:db:36:
47:25:c8:72:2f:5f:d7:84:6b:6b:9c:60:28:cb:54:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:7F:AB:FF:FE:CB:3E:50:95:F0:70:18:5D:C3:14:6F:09:C6:4F
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/39J_q__-yz5QlfBwGF3DFG8Jxk8.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f1:73:53:14:9c:07:2a:d4:bd:1c:da:85:77:ab:c2:eb:96:
7a:4f:13:43:0c:1e:aa:aa:69:0e:64:ca:79:9f:f9:54:86:66:
34:5d:09:89:9f:4d:99:03:2d:b9:84:5e:28:04:27:e8:5d:4d:
2c:46:46:aa:dd:37:aa:5d:be:c2:15:f6:6a:02:34:a8:91:0b:
9c:e9:5f:18:fc:b7:2a:ad:84:7a:f3:c0:06:86:60:b8:5c:43:
6a:3d:0f:48:6c:f1:b4:0e:49:ae:af:22:db:b6:d7:d8:8f:2f:
b4:e0:00:d1:bf:75:23:67:79:dc:04:a3:a5:a0:dc:4a:a0:60:
80:8a:5a:b4:22:9e:8e:a6:18:61:e8:74:3f:4b:45:84:f6:ba:
86:b3:05:a6:f7:0a:7f:f8:2e:ba:ea:c7:7e:80:ff:52:e2:93:
90:0a:5c:76:86:fd:5a:3c:1c:16:79:ab:b9:f9:da:c7:ca:28:
b8:90:e0:bd:14:fe:dc:44:11:ce:e6:e8:76:61:69:ff:c1:ef:
2e:49:94:57:2f:6f:a5:1d:57:70:af:49:dd:2c:11:1f:1d:02:
75:8f:7f:1d:39:82:4e:40:4e:7f:06:fb:84:24:19:21:ea:de:
97:76:d7:47:c3:c4:9f:7c:25:25:39:84:c2:60:eb:b4:49:70:
37:56:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org