Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/48RY6GPGac8gGbfrxAGEXQOb3os.roa
File: 48RY6GPGac8gGbfrxAGEXQOb3os.roa (raw, json)
Hash identifier: KyO7gGTpbhrwM54sAymr0QOH5H+cYSdb/newQH9Th80=
Subject key identifier: E3:C4:58:E8:63:C6:69:CF:20:19:B7:EB:C4:01:84:5D:03:9B:DE:8B
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 51
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/48RY6GPGac8gGbfrxAGEXQOb3os.roa
Signing time: Mon 23 Aug 2021 06:22:50 +0000
ROA not before: Mon 23 Aug 2021 06:22:50 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2497
IP address blocks: 203.180.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Aug 23 06:22:50 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=E3C458E863C669CF2019B7EBC401845D039BDE8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:9d:51:9c:df:31:46:11:92:27:04:fd:b3:
f3:5e:e4:af:62:8e:93:35:f4:c2:ce:d2:b3:c3:d5:
e5:2e:e2:a3:5c:3f:ae:95:f4:8c:41:94:d2:b1:8c:
72:1f:4d:64:cb:1b:27:90:37:3b:14:7f:53:da:9d:
02:bd:82:54:6c:a9:91:ee:87:14:f7:45:5e:b3:93:
8f:d1:76:e9:f5:70:50:a5:72:78:a7:bd:16:9d:b3:
3b:3f:a5:4e:2a:0d:56:96:8d:79:fc:58:9f:0e:1c:
c7:81:49:0d:0a:98:56:c2:bf:d9:cb:9a:a7:16:67:
ed:4a:09:85:61:2f:6c:8b:f1:0e:2a:4a:bc:0e:49:
c5:a5:1b:62:82:25:c5:33:64:ea:a7:0c:ba:17:1b:
d5:37:d2:3d:42:f2:29:47:48:f2:ef:9b:ff:bc:cb:
d6:af:6e:2f:fd:15:17:04:5a:6a:a5:c8:94:ef:10:
ba:e4:bc:a0:4f:9a:5c:fa:92:90:c4:2c:22:ba:a9:
f6:13:4a:aa:6e:5c:7b:94:d5:67:13:9b:03:f6:f7:
28:30:3e:0c:aa:cd:38:0f:e0:a7:82:35:a8:4f:82:
67:18:c5:8e:73:6b:55:ad:f4:22:ff:00:93:08:21:
5e:b7:dc:17:c7:1c:91:4e:80:b3:e0:89:1e:98:7c:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:58:E8:63:C6:69:CF:20:19:B7:EB:C4:01:84:5D:03:9B:DE:8B
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/48RY6GPGac8gGbfrxAGEXQOb3os.roa
sbgp-ipAddrBlock: critical
IPv4:
203.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:03:69:f0:8c:a0:43:84:73:a4:f5:a9:ac:92:0a:d0:6b:df:
f8:15:16:e0:3b:e3:c6:1b:fe:14:20:66:5e:31:40:16:dc:67:
5c:f9:f9:eb:16:b7:41:1f:45:27:48:8b:a0:2d:5e:7a:43:e3:
77:f5:2f:fd:e1:bf:8f:d3:c2:4c:2d:d4:7c:be:8e:f2:6f:47:
c8:a5:35:53:e2:f9:f1:27:bb:47:b5:d1:34:b4:e1:b2:38:dd:
74:4f:c4:84:ab:aa:39:16:fe:95:96:51:0f:71:c0:6f:73:4e:
1e:98:4a:bc:da:ef:9f:f4:6e:1c:4b:30:92:e6:fe:f2:ad:72:
60:9c:c5:ca:57:f8:38:1c:a6:f0:6a:3d:d0:59:61:da:a7:3e:
9c:43:70:b2:ff:08:55:e7:73:f9:d1:eb:31:1b:e3:cd:87:f3:
2c:6b:5c:f3:5f:c9:76:d8:a3:79:85:74:aa:0f:8c:63:da:5c:
48:11:a1:c0:6d:82:02:be:8d:ec:54:5e:d8:be:4a:20:51:47:
87:c8:01:89:4f:07:96:a3:84:8f:97:e3:7e:1a:a4:06:90:5c:
b0:20:2b:f8:2f:6f:d2:ca:60:2f:f9:4a:6f:4d:52:f0:e3:12:
cc:0d:01:b7:73:5e:18:4c:23:f3:97:57:b9:28:d0:ac:85:14:
63:ed:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org