Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/zYXWmKDFdz2sXIgxVQIv-XP5P64.roa
File: zYXWmKDFdz2sXIgxVQIv-XP5P64.roa (raw, json)
Hash identifier: hJI+G/UNHczQ6+HWZT30L1oMOdWYbWgNtAWyKl5ew2Y=
Subject key identifier: CD:85:D6:98:A0:C5:77:3D:AC:5C:88:31:55:02:2F:F9:73:F9:3F:AE
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 71
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zYXWmKDFdz2sXIgxVQIv-XP5P64.roa
Signing time: Mon 01 Nov 2021 01:28:38 +0000
ROA not before: Mon 01 Nov 2021 01:28:38 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 2497
IP address blocks: 218.228.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Nov 1 01:28:38 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=CD85D698A0C5773DAC5C883155022FF973F93FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:2e:cf:7a:f4:e6:a5:6f:32:c2:0d:67:5d:
73:09:9f:c7:31:c7:04:54:b7:bc:ce:09:c4:0e:f1:
1f:bb:01:70:06:f0:dc:b6:a6:5a:86:75:85:4b:90:
3a:fe:97:d0:3a:f2:87:7c:22:fb:fb:5d:02:28:06:
84:7a:cc:06:35:a9:7b:7f:c8:1c:7a:f8:ce:19:d7:
f3:f6:1d:14:fc:a6:fd:0c:ec:b6:17:68:e3:14:f4:
ed:c2:09:84:4a:d1:b2:0f:b5:24:72:65:6c:3b:4d:
6d:9e:64:90:e9:ea:eb:fa:c6:62:5f:30:00:aa:bb:
84:98:61:a0:05:b0:25:f8:6e:56:01:26:71:4a:5c:
f6:6f:6e:e7:a1:0a:99:c2:12:bc:e2:1e:70:3f:0b:
06:5c:75:77:b0:38:6d:03:1a:27:34:fc:b8:69:43:
35:0f:3c:22:d3:1a:f2:52:52:79:e8:b6:86:00:b8:
ed:aa:fc:bd:a3:d6:70:2e:55:d5:4c:b9:52:cf:d2:
7f:60:82:79:e8:f6:4a:11:79:10:0b:62:ac:a4:d7:
52:dd:d4:47:64:78:c7:5b:8b:ae:63:fa:87:8e:74:
8c:bc:0c:58:6d:c1:c4:ea:3c:c9:7b:92:47:a6:68:
84:b8:58:e2:bf:e8:2b:e7:e8:bc:f2:43:91:49:d9:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:D6:98:A0:C5:77:3D:AC:5C:88:31:55:02:2F:F9:73:F9:3F:AE
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zYXWmKDFdz2sXIgxVQIv-XP5P64.roa
sbgp-ipAddrBlock: critical
IPv4:
218.228.96.0/19
Signature Algorithm: sha256WithRSAEncryption
51:6a:7f:c4:87:cf:fb:2e:95:9d:a9:f9:3f:1b:54:27:44:3a:
34:e0:54:55:ec:81:a1:fd:26:9d:10:9f:56:24:5b:b4:2c:0e:
64:3a:28:fb:7c:fc:e7:6b:99:f0:21:4f:ca:5e:48:ea:33:28:
60:69:dc:30:ae:6b:73:10:6e:d6:2a:b4:9c:e4:10:06:c4:f3:
2c:ca:01:bf:d1:f5:76:87:bb:c9:f5:f2:dc:18:d6:7e:b8:21:
e6:ad:0d:b8:69:89:64:31:3c:80:80:d3:6e:2a:e6:d4:14:b8:
fe:6e:71:c5:53:f0:bb:93:4e:19:10:9c:51:d9:63:cd:83:76:
fd:f6:ad:5e:94:c7:f6:88:c2:d0:c7:82:e6:35:d0:f1:b1:3f:
04:38:c6:79:0c:be:ab:93:a7:8d:63:96:71:69:ee:4d:dc:4c:
77:70:dd:6e:c3:96:aa:09:ca:d7:45:29:26:c7:79:9d:02:0b:
84:c1:b5:d1:7f:19:59:da:df:cb:b9:f3:32:05:15:af:06:18:
a1:dc:ad:9f:cc:ca:73:af:79:87:77:41:e3:e0:f5:ae:2f:73:
57:2f:1b:98:2b:40:27:e6:de:de:a2:49:15:f5:15:1c:a7:15:
5c:75:27:39:44:fd:dd:d3:a7:2a:be:f6:67:d3:16:82:3b:9b:
5b:2f:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org