Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa
File: rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa (raw, json)
Hash identifier: E4S9ekt8dif74ThDDQSdiBzhYVtnrT9Ld/g6K11J7x8=
Subject key identifier: AC:B6:90:F5:07:90:26:35:BC:86:F8:C1:70:55:41:79:E1:1B:5C:29
Certificate issuer: /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial: 28
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa
Signing time: Fri 01 Oct 2021 01:28:26 +0000
ROA not before: Fri 01 Oct 2021 01:28:26 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 55900
IP address blocks: 27.0.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Validity
Not Before: Oct 1 01:28:26 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=ACB690F507902635BC86F8C170554179E11B5C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:de:1e:46:e3:0b:74:bb:d8:fb:27:32:31:
5e:a4:5c:29:ba:c8:17:4f:de:82:e8:5c:5d:20:0d:
04:e9:dc:20:fe:ce:6f:70:f9:45:c1:90:35:f4:8e:
75:74:e7:4d:53:60:00:aa:d9:5b:0b:b1:ed:6f:ea:
91:16:9a:9f:e1:7d:26:22:2c:aa:51:dc:55:34:b6:
4e:5c:20:a1:5e:ad:47:4a:d4:47:2b:3c:bc:2b:04:
b4:ca:a7:89:5d:d9:03:97:f7:f5:8a:2f:fb:f4:f4:
3b:8b:84:ae:43:f6:c6:59:43:1c:22:fc:65:1d:bb:
00:ae:46:7b:60:41:39:20:54:d8:1a:f9:15:76:e7:
1b:ab:40:b4:80:dc:07:f3:cc:56:72:a4:ca:be:ee:
7c:d7:bc:b6:f7:ad:15:24:fa:79:17:37:cd:7d:cc:
d2:16:5d:a9:60:17:37:fd:1e:61:0d:ee:33:34:86:
d3:89:b0:98:cc:0e:df:5a:c8:13:94:85:40:c0:da:
61:39:c2:d0:0e:3b:f5:5f:c8:f3:d8:fa:51:90:1b:
ed:b2:dc:1e:f9:1b:4a:58:72:3c:48:79:a0:39:a6:
c5:68:ef:dc:5c:e5:9c:fb:0a:71:5e:28:38:5f:ed:
c4:4e:2d:d5:4b:c7:4f:66:d0:5e:d4:cb:2c:f8:8f:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B6:90:F5:07:90:26:35:BC:86:F8:C1:70:55:41:79:E1:1B:5C:29
X509v3 Authority Key Identifier:
keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:e8:59:05:87:c1:4f:0d:03:4e:28:00:5e:98:b7:25:74:9f:
d9:17:66:71:cb:55:d2:4e:e5:c8:71:fc:60:38:77:26:39:fc:
9f:17:95:cd:78:ce:b2:8c:c2:2a:56:50:8a:c1:90:0f:34:2e:
cb:3c:ea:4c:b5:86:a5:68:16:8f:4f:0f:59:ed:ce:84:48:7b:
f9:7a:01:3f:ae:eb:4a:a7:34:c7:20:5a:55:2e:02:e5:e7:8c:
52:90:22:84:0c:e2:b3:d6:60:1b:ba:27:66:71:69:8b:22:8d:
95:65:77:6d:18:5e:2e:59:21:dd:8d:cf:95:ac:ae:f2:85:07:
e1:dc:01:72:be:b0:65:92:98:37:68:b3:97:59:00:7f:cc:f0:
25:76:b3:fd:9d:23:61:49:1e:25:d4:24:de:b7:1a:cd:65:35:
12:21:d7:c9:17:7f:57:9c:4e:86:2e:5b:fe:8c:96:a8:31:20:
dc:0e:ee:fb:ff:e6:ac:30:7c:71:f6:ea:ca:c3:36:7c:64:99:
1c:df:73:cd:ce:8d:26:34:3b:3c:44:bd:b9:f4:72:51:a1:c1:
c6:2b:b8:c0:3c:09:85:c8:77:d2:35:c2:b7:02:60:1c:54:5f:
d7:e7:5f:d7:ee:db:ab:98:9c:36:e6:3d:1d:3b:09:aa:bc:49:
8f:8b:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org