Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/O9xXZCtUssGwFCZp3693dKZcjuQ.roa
File: O9xXZCtUssGwFCZp3693dKZcjuQ.roa (raw, json)
Hash identifier: Rq73aof37ZWl+cNMxP3kYkFy5sEPYYH4+wHGYry8O3E=
Subject key identifier: 3B:DC:57:64:2B:54:B2:C1:B0:14:26:69:DF:AF:77:74:A6:5C:8E:E4
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 13
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/O9xXZCtUssGwFCZp3693dKZcjuQ.roa
Signing time: Tue 30 Mar 2021 01:13:23 +0000
ROA not before: Tue 30 Mar 2021 01:13:23 +0000
ROA not after: Tue 15 Mar 2022 01:30:01 +0000
asID: 10011
IP address blocks: 223.27.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Mar 30 01:13:23 2021 GMT
Not After : Mar 15 01:30:01 2022 GMT
Subject: CN=3BDC57642B54B2C1B0142669DFAF7774A65C8EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:09:95:ae:b4:61:68:b0:3e:28:7e:7f:87:
c6:13:21:4a:b0:c6:b0:be:eb:c3:c9:e7:3e:fa:cf:
79:f5:50:b7:6a:7e:a7:6f:e4:dc:3d:bb:3a:54:50:
90:12:a6:a7:a5:d5:07:1e:81:ab:7f:b2:05:b2:16:
91:46:21:6d:f1:35:68:73:47:1c:6d:81:d8:d3:67:
ac:39:ea:ea:b8:25:bc:79:fe:da:58:3e:f1:9a:1e:
f6:fa:31:64:a9:0a:bb:ed:3a:e0:12:88:95:47:e1:
02:38:06:b6:26:d6:be:61:ef:ca:aa:48:0e:b4:99:
f2:14:d8:c3:c7:33:59:71:93:c4:03:7c:f4:94:1b:
4d:d0:6b:ca:a9:41:3a:0c:d1:ab:14:26:d1:1a:56:
48:c7:49:1d:7f:a0:c6:23:96:eb:6a:6e:03:5b:57:
e9:de:27:e1:fd:dc:5f:c3:72:a3:10:9f:e3:51:ec:
68:2a:94:42:5c:d6:b5:ee:4e:5b:a3:18:57:16:07:
e1:3f:b4:d2:30:65:81:eb:78:e6:54:c4:78:f6:4c:
95:66:92:85:ce:f5:06:1d:a9:50:3a:a3:30:78:22:
e9:73:f4:15:bf:5b:fe:0b:7c:27:80:40:ee:28:d6:
7b:10:84:7f:b6:da:3b:55:db:64:91:0b:c8:da:6d:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:57:64:2B:54:B2:C1:B0:14:26:69:DF:AF:77:74:A6:5C:8E:E4
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/O9xXZCtUssGwFCZp3693dKZcjuQ.roa
sbgp-ipAddrBlock: critical
IPv4:
223.27.72.0/21
Signature Algorithm: sha256WithRSAEncryption
23:7f:98:da:32:c4:b4:e9:76:27:3f:fa:17:a0:5e:aa:88:a3:
02:d5:4a:6d:fb:95:27:7a:2c:fe:5e:cd:f8:e3:1f:26:1a:ee:
11:17:13:19:7e:f2:f8:0c:fe:c0:fa:2a:3e:a9:e6:1c:9a:53:
f7:0f:84:fc:1d:40:72:66:98:c1:0a:92:2c:4b:e2:98:05:71:
13:ea:65:6a:e7:14:45:7b:91:08:be:a5:6d:fb:2d:e6:25:ec:
cd:20:3b:f2:8c:60:67:c6:84:be:dc:b0:25:1d:db:19:5b:42:
86:b6:ea:31:84:80:24:66:57:fa:49:34:5d:4a:05:2e:d5:11:
de:27:53:d2:59:2d:ed:74:68:a0:1b:bc:ad:76:c2:a1:8f:b1:
c3:13:55:03:3d:2e:d2:87:72:64:61:53:9b:a5:71:6b:f7:cf:
eb:d6:d4:39:63:f1:d4:bf:e4:b4:32:46:fe:bb:ab:88:fc:aa:
7c:3a:9c:e0:d9:4f:3f:4e:5e:78:66:87:db:7a:a1:1f:78:80:
c6:79:6b:77:35:0c:54:a0:95:13:8f:a0:03:e3:32:33:31:d1:
fa:9e:ad:a7:fa:3b:b7:d6:96:b0:a3:43:d3:a8:84:6b:10:90:
18:26:48:1b:fa:0c:d5:d9:e6:d5:21:cb:60:21:fd:89:f4:b0:
03:da:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org