Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rfshBOIlf3IHIw6xLWQtjD79b3E.roa
File: rfshBOIlf3IHIw6xLWQtjD79b3E.roa (raw, json)
Hash identifier: Y4RsOZB/28VPPu3wsXEKzwzVxBrSLcLMEMsByczWFX8=
Subject key identifier: AD:FB:21:04:E2:25:7F:72:07:23:0E:B1:2D:64:2D:8C:3E:FD:6F:71
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 02E4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rfshBOIlf3IHIw6xLWQtjD79b3E.roa
Signing time: Tue 25 May 2021 02:41:51 +0000
ROA not before: Tue 25 May 2021 02:41:51 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 210.171.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:41:51 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=ADFB2104E2257F7207230EB12D642D8C3EFD6F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:52:51:46:46:a5:f2:06:db:ff:c3:d9:cc:
d4:93:cb:f9:5c:34:48:39:8a:82:ed:3b:78:45:17:
73:d3:09:3f:80:72:3c:e6:f9:38:5c:b2:c2:ef:be:
67:bc:68:a1:8e:ed:5a:8d:fd:2d:a8:af:50:8f:37:
93:4e:c7:18:78:e8:f4:9b:79:10:e9:99:02:b7:94:
10:df:78:87:f4:10:5b:a6:03:01:cb:19:26:28:ea:
3c:e9:f0:74:d9:ee:91:92:c2:3d:7c:0a:94:08:34:
40:40:e2:cf:a9:d0:a5:44:86:35:1e:fa:b3:fe:64:
23:6f:24:09:fc:3f:13:c9:02:70:f0:49:cc:94:10:
9c:d8:39:ec:a7:76:c6:f8:84:4a:16:7f:89:ab:ea:
c6:66:33:58:7a:d8:da:d4:79:37:27:7e:ec:fc:2d:
92:11:75:6c:3a:df:83:db:48:90:c5:00:c1:5c:3b:
6d:66:03:f6:96:4e:8c:0f:a4:73:af:98:ca:01:f1:
64:f9:71:30:ac:6e:8a:2c:68:55:40:31:58:8e:a7:
1f:ad:ed:a1:f9:f6:d3:61:3a:ba:39:73:75:64:72:
63:1e:a4:17:a4:09:ea:df:c1:61:c0:87:95:24:cc:
47:cd:d6:16:61:c7:6b:92:e7:b2:44:d3:c3:ee:4a:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FB:21:04:E2:25:7F:72:07:23:0E:B1:2D:64:2D:8C:3E:FD:6F:71
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rfshBOIlf3IHIw6xLWQtjD79b3E.roa
sbgp-ipAddrBlock: critical
IPv4:
210.171.240.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:5d:3c:50:41:7e:44:fc:33:8c:56:3f:57:03:dd:21:3c:eb:
16:80:8c:cc:19:58:a5:37:02:7d:b8:c0:7e:c3:24:33:88:1e:
5f:49:cc:bf:03:80:ba:f7:b4:6a:6a:ca:4a:9e:0e:2f:e1:32:
b2:ff:2f:68:5a:84:b3:6a:ba:7b:79:53:1c:d3:a0:49:f9:21:
16:a2:f9:c2:d0:e9:a4:ee:73:7a:db:60:48:af:47:0a:0a:73:
cc:09:5c:ee:d0:ed:9f:d3:7d:49:45:c9:d3:5a:ad:34:80:5b:
28:34:76:9f:7f:87:65:f3:8a:7b:26:91:72:89:55:76:1b:48:
2d:bf:50:e9:20:63:03:ea:ed:ba:ff:63:27:4b:97:2c:33:64:
15:6e:1f:e6:28:85:94:96:55:59:6c:12:03:76:53:a7:ec:94:
b1:bc:39:c6:aa:f6:81:56:a2:ea:45:10:05:73:10:47:c4:71:
8d:41:48:35:ea:69:ad:ca:83:a7:71:f2:2e:ba:72:d4:a9:25:
83:ae:f1:2c:46:b4:36:2c:3d:e1:3d:ba:b5:0d:64:b0:e8:99:
e7:22:22:95:79:d4:11:4b:03:e7:26:d8:ca:b4:5c:a0:28:54:
92:ad:b8:cb:bf:8d:a8:55:fa:32:66:5c:f7:f0:2f:2e:b2:9e:
e3:47:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org