Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/7r3s3VJVuxD3te0MOREiz5HDL0M.roa
File: 7r3s3VJVuxD3te0MOREiz5HDL0M.roa (raw, json)
Hash identifier: qdJ3i715KsGL1EhJ8dM4f72rn07l/2//yLe+HmsWj4o=
Subject key identifier: EE:BD:EC:DD:52:55:BB:10:F7:B5:ED:0C:39:11:22:CF:91:C3:2F:43
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 02FF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7r3s3VJVuxD3te0MOREiz5HDL0M.roa
Signing time: Tue 25 May 2021 02:42:00 +0000
ROA not before: Tue 25 May 2021 02:42:00 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 42.125.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:00 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=EEBDECDD5255BB10F7B5ED0C391122CF91C32F43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:bd:45:cf:3b:4e:05:6e:0e:94:31:3a:bf:
11:0d:02:74:a9:7d:31:5c:5e:e6:1d:8b:ac:e3:00:
64:2d:4c:a7:8d:d0:26:af:7d:d9:1a:cb:6a:7b:02:
a5:49:71:75:3e:84:ae:f9:9e:9d:da:0b:75:c4:dd:
56:dc:2e:7c:7d:99:53:42:fc:af:b5:ba:77:5c:6e:
5e:9f:6f:bb:bd:e9:df:18:5e:6c:3e:d1:40:1b:8a:
7b:a9:1f:d6:9a:e2:ab:ef:85:34:20:fd:9a:b0:a6:
7a:98:dd:bb:4b:4b:02:28:37:89:8b:ba:b7:ef:c0:
96:67:0f:dc:14:ad:1d:8a:51:01:eb:ac:9a:b7:e1:
fe:94:46:1e:37:c3:aa:22:75:dc:d9:1a:54:fa:c2:
6d:67:a9:8b:0a:0c:8d:37:df:50:d4:37:53:06:fb:
21:96:bc:29:22:f8:25:43:e3:94:bf:ec:37:c6:87:
c2:99:d5:11:75:69:fd:0b:e1:7c:2b:08:ac:6e:4d:
c9:75:f2:da:c2:50:89:80:e1:66:d8:c1:f8:c9:68:
9b:4d:f3:e2:82:ea:3c:65:bb:c9:dc:ab:13:0a:cd:
ef:b0:a4:b6:8e:f4:1c:57:a3:26:dd:bb:a2:eb:b3:
02:37:d6:79:f2:e3:26:1c:39:1d:5f:7e:8a:16:4c:
ed:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:EC:DD:52:55:BB:10:F7:B5:ED:0C:39:11:22:CF:91:C3:2F:43
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7r3s3VJVuxD3te0MOREiz5HDL0M.roa
sbgp-ipAddrBlock: critical
IPv4:
42.125.128.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:2a:f9:95:f6:95:44:54:60:41:15:ad:06:8b:57:d4:e7:51:
f0:f5:f4:c7:39:4a:05:a8:7d:bb:6c:50:bb:93:d1:12:0e:62:
ca:1d:f3:94:ec:b3:ba:37:b9:63:81:43:a6:0e:18:ba:fc:3b:
36:ab:2f:b4:91:ed:d7:d8:cf:1c:7e:45:22:eb:b6:c8:fa:90:
d4:e0:d7:3c:3c:a2:42:90:72:4f:9a:42:8f:5a:f9:6c:20:d2:
47:66:76:11:2b:de:16:8e:73:d8:fb:b3:cd:cc:ea:50:54:10:
41:be:38:16:72:a9:2b:4f:1d:ee:04:6a:39:aa:d2:81:72:99:
bd:ef:ea:9f:54:80:e8:04:79:b7:82:ef:79:19:63:5e:51:31:
e8:d1:c7:8b:9d:23:a9:00:03:d0:6e:91:50:1a:72:0c:4c:43:
2d:54:6e:ac:4a:0c:a6:a5:b8:fd:31:ef:16:26:be:a6:79:89:
1d:c5:3e:f0:6f:0e:da:f9:fb:e4:8e:3a:5d:06:6b:67:4e:99:
5b:d3:3b:0f:5d:1f:5c:cc:da:23:46:a0:bb:bf:ca:fb:81:92:
bd:20:01:87:67:51:1b:6d:18:22:0d:81:7d:03:f2:11:e9:13:
ab:02:de:bf:1c:07:80:6d:58:b8:f1:d8:8a:d5:be:c0:30:8a:
71:d4:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org