Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/ILuBT7v3B0FDd72ZvksDn_9fRbA.roa
File: ILuBT7v3B0FDd72ZvksDn_9fRbA.roa (raw, json)
Hash identifier: SnjVpC4GS1/pG4bEOCs3cqJnmBTpnD10hFZ5AN/8ayw=
Subject key identifier: 20:BB:81:4F:BB:F7:07:41:43:77:BD:99:BE:4B:03:9F:FF:5F:45:B0
Certificate issuer: /CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
Certificate serial: 02
Authority key identifier: DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/ILuBT7v3B0FDd72ZvksDn_9fRbA.roa
Signing time: Tue 29 Mar 2022 07:31:31 +0000
ROA not before: Tue 29 Mar 2022 07:31:31 +0000
ROA not after: Wed 29 Mar 2023 07:22:52 +0000
asID: 17530
IP address blocks: 64.63.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
Validity
Not Before: Mar 29 07:31:31 2022 GMT
Not After : Mar 29 07:22:52 2023 GMT
Subject: CN=20BB814FBBF707414377BD99BE4B039FFF5F45B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:15:32:0e:54:2c:f8:ce:db:7e:15:f0:37:
51:69:fb:b9:b8:f3:62:ff:04:fc:2e:c6:eb:45:4c:
88:52:ac:16:12:41:38:ae:31:fd:97:e1:44:7e:06:
11:ce:16:3e:a5:27:5d:c1:47:66:a1:38:18:51:78:
21:dc:c8:00:db:23:0f:a8:ce:d3:ac:6a:a5:8a:72:
01:58:73:2f:b9:bd:cd:26:7c:08:50:dc:e8:3b:f9:
31:f4:bf:c8:67:ea:18:51:c2:ee:6a:a9:bf:e6:19:
f4:ab:86:2c:07:55:11:f2:b5:27:84:4b:62:27:b4:
c4:d6:86:ef:72:c0:5f:07:31:ec:9c:6b:04:ab:52:
c4:66:84:4f:23:86:b6:ff:61:1e:71:6f:1c:59:03:
9c:62:20:18:b3:d3:6f:90:34:c3:ca:e1:3c:3a:b0:
cf:4f:78:40:2a:8d:c2:40:cd:4c:0f:a1:55:7c:64:
5c:b0:83:e1:a5:fb:ab:a2:59:a1:66:34:9b:6e:fd:
c1:a1:17:e0:8a:f4:5d:3d:ac:47:69:56:fb:17:8e:
d1:a4:fb:6f:b0:d4:39:f7:d5:c9:7e:50:55:ff:51:
b3:c1:74:07:66:0f:65:15:62:fc:5a:77:ad:66:48:
c1:6c:b1:e1:75:8d:fb:5e:c0:8a:f0:2d:1c:29:8e:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:81:4F:BB:F7:07:41:43:77:BD:99:BE:4B:03:9F:FF:5F:45:B0
X509v3 Authority Key Identifier:
keyid:DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/ILuBT7v3B0FDd72ZvksDn_9fRbA.roa
sbgp-ipAddrBlock: critical
IPv4:
64.63.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:1c:6b:0f:2e:9b:19:55:42:c8:63:dd:b9:c9:0f:5f:99:d1:
2b:24:26:a7:3e:eb:3e:2e:a6:eb:c7:98:3a:44:06:81:77:f8:
60:dc:2d:6f:39:35:26:85:9b:e5:18:dd:af:95:9f:67:0f:4b:
2f:38:d3:22:19:c3:46:d4:95:23:ff:5d:68:97:5a:9e:64:88:
a6:a7:98:da:88:79:ad:a1:57:84:81:cc:fc:58:39:1a:01:37:
ab:a3:bc:ae:83:19:12:b7:66:62:92:1f:c3:1e:d9:3d:1a:74:
b3:fd:22:e4:8f:9d:66:05:c0:4b:cd:86:43:1b:fb:8e:b9:0f:
fb:5f:ad:fb:0d:4a:d6:e7:67:c1:02:7d:bd:77:94:58:96:34:
74:e0:bb:d0:ad:4a:36:36:08:59:e2:41:d9:83:55:83:20:ee:
9a:3d:a7:84:94:ef:3b:0e:c4:c1:8c:ce:24:16:57:04:7a:eb:
91:ec:0d:b2:91:0d:8b:19:c5:19:57:74:3f:9e:54:a7:ed:8a:
a2:95:54:d1:10:96:ea:ff:19:d5:79:72:7a:af:f9:de:81:26:
ce:7e:1c:ca:16:09:20:f9:06:8f:bd:5e:f8:05:12:c9:98:ca:
02:0a:68:17:77:90:9c:69:fa:a9:f2:2b:4d:71:57:6e:23:37:
9f:50:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org