Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/D1x-d148xkR4mrhdoYVRTFl5EMc.roa
File: D1x-d148xkR4mrhdoYVRTFl5EMc.roa (raw, json)
Hash identifier: T4pMvwAj3EePRS+kQJ5wXcHEGbGk4B2kLieivVxWrCs=
Subject key identifier: 0F:5C:7E:77:5E:3C:C6:44:78:9A:B8:5D:A1:85:51:4C:59:79:10:C7
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 14
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/D1x-d148xkR4mrhdoYVRTFl5EMc.roa
Signing time: Tue 30 Mar 2021 01:13:23 +0000
ROA not before: Tue 30 Mar 2021 01:13:23 +0000
ROA not after: Tue 15 Mar 2022 01:30:01 +0000
asID: 10011
IP address blocks: 61.121.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Mar 30 01:13:23 2021 GMT
Not After : Mar 15 01:30:01 2022 GMT
Subject: CN=0F5C7E775E3CC644789AB85DA185514C597910C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:49:db:4e:60:ea:cd:b9:c6:99:8b:db:83:5d:
c1:e9:e1:f8:82:45:b4:68:0d:82:2e:94:6c:54:38:
3c:72:17:87:8a:86:d1:21:29:2b:41:5e:dc:df:4e:
5e:77:d0:4a:48:66:fb:ac:ec:4c:04:f9:db:d0:83:
25:54:ac:2e:ae:4e:72:ff:ce:ff:02:52:b6:7b:07:
ae:61:e0:4e:2e:b0:ee:de:e8:be:8b:e8:80:12:78:
92:06:7c:4a:da:9f:7b:12:d5:22:b4:9b:fd:95:9f:
83:31:4f:73:74:8e:48:fb:40:9e:4e:15:1e:3c:ba:
4a:32:47:cb:84:d3:d8:38:6e:fd:8a:27:4e:77:0b:
2e:c3:6a:0e:b7:f6:63:aa:c2:22:f3:32:f3:01:f6:
77:18:d6:f3:83:5d:fc:15:00:6c:84:a7:b5:59:84:
6a:b2:0b:f6:ff:02:6e:cc:73:65:0e:7c:7e:53:6f:
2d:1f:c6:72:ed:81:c4:22:1b:15:46:3f:cc:20:fc:
5e:a0:b4:c3:ba:71:aa:32:dc:a3:82:9b:20:7b:27:
bf:f6:88:62:66:3e:99:93:9e:8f:7e:79:e4:92:ae:
1f:5c:a0:67:6b:a1:99:1b:31:96:f4:7b:e1:05:61:
04:6e:dd:4f:65:bc:5a:e3:69:b2:26:70:24:f6:af:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:7E:77:5E:3C:C6:44:78:9A:B8:5D:A1:85:51:4C:59:79:10:C7
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/D1x-d148xkR4mrhdoYVRTFl5EMc.roa
sbgp-ipAddrBlock: critical
IPv4:
61.121.224.0/20
Signature Algorithm: sha256WithRSAEncryption
86:5b:46:16:35:e2:c3:64:53:c4:64:01:28:b4:24:8a:b4:d8:
05:df:30:78:fd:8a:22:07:2c:73:68:82:27:9b:e7:75:09:41:
20:2f:c0:86:8c:ed:44:3d:26:d8:e2:b7:fa:f8:c9:dc:0b:09:
b8:aa:4f:5d:f3:a7:40:9d:f8:54:08:c0:31:a1:6c:d3:46:4f:
b3:cd:cd:ec:6f:b8:9f:41:44:5f:cc:0a:4d:d5:31:af:37:9b:
58:12:bd:0d:84:e1:e5:46:72:65:69:b4:66:cf:02:14:65:36:
5a:27:b9:88:14:05:b2:0a:c0:f5:a5:1e:30:67:c5:7a:60:66:
0f:22:d4:c3:a8:47:8a:d9:cf:4b:01:49:b8:6e:ee:3a:69:16:
4b:91:98:90:d1:37:ba:5c:58:8d:8e:c0:65:f9:be:da:5f:50:
a2:e8:4b:b9:35:c8:3e:67:d7:24:ed:a7:7b:22:46:92:b6:86:
0b:6e:54:6e:21:f4:c3:ed:02:ed:33:17:ff:11:07:7f:77:60:
3d:43:24:a3:d2:7e:ad:78:75:4c:81:cc:67:26:71:f8:65:93:
f5:90:5d:cc:6b:ba:72:db:ab:5d:87:9a:b3:71:d5:d2:bf:41:
47:2b:5f:80:21:96:99:93:e4:5a:f9:5b:10:c2:85:9f:27:29:
63:d9:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org