Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/oh47CdpILgx_g0X2waAimpYjovk.roa
File: oh47CdpILgx_g0X2waAimpYjovk.roa (raw, json)
Hash identifier: YaWLsg8teMdUVPzFhFO+LLfKf7TmaldEUUrbqnUPfbg=
Subject key identifier: A2:1E:3B:09:DA:48:2E:0C:7F:83:45:F6:C1:A0:22:9A:96:23:A2:F9
Certificate issuer: /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial: 04
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/oh47CdpILgx_g0X2waAimpYjovk.roa
Signing time: Tue 29 Mar 2022 07:31:31 +0000
ROA not before: Tue 29 Mar 2022 07:31:31 +0000
ROA not after: Wed 29 Mar 2023 07:22:52 +0000
asID: 17530
IP address blocks: 122.201.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Validity
Not Before: Mar 29 07:31:31 2022 GMT
Not After : Mar 29 07:22:52 2023 GMT
Subject: CN=A21E3B09DA482E0C7F8345F6C1A0229A9623A2F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:2e:dc:d7:5f:6a:59:5e:3b:fa:5a:d0:d0:
3a:b7:93:c4:2c:83:70:f7:3a:8f:57:f1:ba:92:e0:
41:52:aa:e2:0f:4c:c6:3f:ec:a2:ee:bb:fa:39:4b:
9e:80:25:e3:2b:7a:91:ac:b5:8b:13:cf:46:51:e6:
7f:3e:c7:d8:d9:d4:eb:f5:0e:84:ff:9f:85:eb:17:
4f:f8:dd:2b:de:25:8f:f1:c9:04:d8:69:b7:f1:9e:
96:cd:cf:05:8c:29:ae:5f:09:e1:b2:df:df:3f:42:
f4:29:90:c2:49:8e:d2:57:df:53:ff:3e:47:a4:73:
5d:78:a8:20:dd:1d:11:6d:0d:6f:1b:39:fe:91:61:
56:a8:8d:9a:40:9a:31:5f:55:86:36:3f:68:f6:1e:
eb:24:dc:bf:8e:82:6a:1a:c1:89:78:28:24:b1:e1:
7d:11:fb:9a:1a:ef:fb:14:18:7e:3a:60:e9:85:bb:
1d:9c:5c:39:7d:f8:9e:ba:02:0c:b6:9a:23:b3:6a:
a9:75:61:a9:b2:0d:b1:06:27:3d:15:96:c5:57:9d:
48:c1:61:1a:fe:b1:3f:85:b1:b0:e9:77:75:eb:25:
fb:9a:97:b4:0b:01:56:43:f8:1d:53:66:73:42:0e:
9a:c7:e2:67:93:a7:51:0d:6a:34:13:9b:e9:b3:b0:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1E:3B:09:DA:48:2E:0C:7F:83:45:F6:C1:A0:22:9A:96:23:A2:F9
X509v3 Authority Key Identifier:
keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/oh47CdpILgx_g0X2waAimpYjovk.roa
sbgp-ipAddrBlock: critical
IPv4:
122.201.0.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:71:15:19:83:25:05:cd:f7:50:f8:3b:99:62:f9:a9:34:2f:
36:73:be:97:29:9c:c8:c7:78:bf:59:c8:12:e1:ee:d4:07:c5:
d4:b2:a7:30:cd:be:13:4e:4d:af:c6:67:64:37:e8:bb:64:bd:
59:90:0d:0c:d8:67:a1:c6:88:00:ab:44:a4:28:2b:e8:91:38:
49:f6:53:24:46:51:2c:dd:d2:b8:04:a7:93:53:f2:f1:50:b4:
33:25:5f:e7:06:64:6a:bf:17:29:cc:1f:69:d1:c7:6c:80:a4:
89:02:26:e2:0d:37:63:eb:1b:3d:72:8f:ba:e8:5b:9b:6d:56:
0a:19:ce:81:95:e0:63:55:e5:9a:01:ed:da:2b:98:e3:a5:be:
13:40:1b:ce:14:fb:1e:c4:0b:9f:32:1d:bf:2e:42:3a:f1:91:
04:2a:9c:ee:c2:dd:c1:c1:11:f8:5a:13:87:66:c7:f8:c2:09:
6f:7c:13:70:ab:c9:63:69:6a:ae:cc:47:ed:3c:95:68:a2:32:
ae:27:96:f7:ef:28:42:1f:bb:72:5a:80:e8:54:86:e1:65:05:
3e:74:89:a2:52:23:29:f0:c7:8a:e6:d1:8e:17:c8:14:86:bb:
27:0f:be:c9:e5:78:34:09:45:f0:9b:c3:cd:7f:d6:c3:97:13:
64:89:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org