Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/G7hsco3VDbiCTTY4wv1G-KcyAnU.roa
File: G7hsco3VDbiCTTY4wv1G-KcyAnU.roa (raw, json)
Hash identifier: 6yqzmvRp4N4VaHS89ZGtpAr6dUzl5yoWKxEgdWzan6s=
Subject key identifier: 1B:B8:6C:72:8D:D5:0D:B8:82:4D:36:38:C2:FD:46:F8:A7:32:02:75
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 10
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/G7hsco3VDbiCTTY4wv1G-KcyAnU.roa
Signing time: Tue 30 Mar 2021 01:13:22 +0000
ROA not before: Tue 30 Mar 2021 01:13:22 +0000
ROA not after: Tue 15 Mar 2022 01:30:01 +0000
asID: 10011
IP address blocks: 124.108.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Mar 30 01:13:22 2021 GMT
Not After : Mar 15 01:30:01 2022 GMT
Subject: CN=1BB86C728DD50DB8824D3638C2FD46F8A7320275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:14:55:9b:4b:3b:ff:c0:81:90:14:6e:15:
84:9a:50:bf:84:5c:64:20:12:df:7d:f2:27:81:f9:
a9:25:c4:c9:e0:f7:71:70:fc:b1:62:55:87:e4:49:
9a:d9:df:da:b5:ba:b7:17:72:71:8e:77:b8:2d:14:
d3:e8:77:57:54:b2:1b:b6:f9:b4:0f:30:d1:26:95:
84:b9:e0:d5:b1:92:22:8b:79:7b:46:57:1f:70:d7:
5f:6a:1e:bf:8f:92:2b:46:2e:5b:1e:72:af:ef:dc:
22:77:78:91:1a:9f:ff:2c:81:23:61:cf:1d:d3:95:
ba:37:53:df:0a:d2:d6:ea:5e:59:ef:6b:d2:11:6f:
69:bf:65:48:ab:41:0b:fd:96:9f:dd:4b:80:d1:fd:
d9:56:bb:63:52:92:71:cf:4c:a0:8f:25:b9:99:0f:
89:52:6e:eb:03:5e:69:25:68:5d:b1:71:2c:56:0b:
6e:08:9e:7a:00:a2:52:c5:a8:a7:f8:09:2f:79:78:
65:2e:29:a9:5a:80:e4:52:a8:0c:ac:bd:e9:40:c4:
8e:fb:27:ab:60:47:b1:0f:35:3e:33:3f:5f:09:c1:
86:66:01:4a:88:95:68:be:64:9e:eb:04:47:d7:b3:
30:52:8a:da:e1:eb:c3:2d:73:06:d2:38:48:35:f4:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:6C:72:8D:D5:0D:B8:82:4D:36:38:C2:FD:46:F8:A7:32:02:75
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/G7hsco3VDbiCTTY4wv1G-KcyAnU.roa
sbgp-ipAddrBlock: critical
IPv4:
124.108.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:8a:4a:de:76:42:75:e7:89:34:4a:b0:3b:7e:63:24:28:d0:
dc:4c:47:8f:c7:e1:3a:de:59:9f:62:f4:55:03:a2:d1:02:bd:
a8:24:f0:3a:38:d0:a2:0e:43:7a:43:d9:48:43:82:d0:43:fd:
33:33:c8:f0:d2:70:f5:00:4d:ff:ab:af:be:12:99:a9:ec:62:
94:bd:30:7e:c3:fd:2e:af:d7:57:9a:f7:8a:e4:4f:4f:15:e5:
79:ff:ca:f1:93:31:78:e2:33:86:87:3e:9e:2c:cd:36:30:d6:
ed:b1:32:8a:e6:8d:e4:9a:9d:87:d1:ac:a4:5e:c5:b3:a7:99:
7c:eb:25:36:cf:12:75:e7:da:99:69:de:de:25:82:ff:14:f6:
44:8e:13:31:e2:6e:73:1d:d6:f4:a7:c4:15:2e:32:11:ef:1e:
32:ce:df:7b:33:a5:71:9b:f5:07:bf:92:19:b3:a4:61:6b:05:
72:55:ab:e2:94:a1:05:9d:94:0d:1a:ca:a3:af:1b:ed:a0:9f:
4d:7e:e4:65:45:e5:ee:43:05:29:e3:38:5c:bd:e3:25:00:f6:
10:a0:8b:4b:5e:02:6e:96:13:51:b7:b0:98:ee:9f:37:81:78:
99:7b:86:81:aa:6b:46:05:63:cd:66:0b:d4:f8:c9:f7:66:ea:
5c:14:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org