Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/IDJUL4G-mJ8MfiqwdBFs8r8ezOc.roa
File: IDJUL4G-mJ8MfiqwdBFs8r8ezOc.roa (raw, json)
Hash identifier: WspWBLGXd4IJHik8zmrw6j+v3nmGc0LhkkoT1A6YMfM=
Subject key identifier: 20:32:54:2F:81:BE:98:9F:0C:7E:2A:B0:74:11:6C:F2:BF:1E:CC:E7
Certificate issuer: /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial: 10
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/IDJUL4G-mJ8MfiqwdBFs8r8ezOc.roa
Signing time: Wed 09 Jun 2021 01:23:36 +0000
ROA not before: Wed 09 Jun 2021 01:23:36 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 17948
IP address blocks: 203.145.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Validity
Not Before: Jun 9 01:23:36 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=2032542F81BE989F0C7E2AB074116CF2BF1ECCE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:db:93:d1:e8:0d:f8:1d:cd:26:27:bb:54:
c4:9a:d4:2f:4c:f4:c6:a1:ce:3d:75:cc:01:86:eb:
c7:16:14:f0:c9:2c:e6:36:bb:d9:31:15:b6:c2:2b:
b2:8c:ef:d7:8f:02:ff:33:5b:46:f1:a6:86:16:f7:
b8:ce:34:96:44:64:cd:31:28:56:05:40:48:73:ea:
fc:25:12:cc:68:21:52:8d:ed:f0:76:63:0e:da:7b:
9b:2a:59:84:1f:99:f2:29:7a:7e:56:18:f6:98:d5:
79:7f:1a:28:84:06:f5:20:2e:c7:c5:68:30:c1:2d:
f3:37:29:71:28:0f:a4:d2:dd:34:c3:4b:cb:38:86:
94:54:91:c5:24:ac:07:05:61:13:d5:42:4a:47:31:
f3:56:b6:30:c1:78:b0:ff:06:5f:52:a7:ba:6c:b1:
90:74:87:f3:fe:5d:0f:5f:d8:8c:df:2d:3a:82:44:
af:cb:cf:99:4f:3b:04:a8:d2:bd:28:af:10:37:df:
06:6c:94:78:15:87:00:9a:72:6e:4f:aa:90:bc:d4:
ae:4f:98:c3:d2:b1:ea:39:48:44:1e:01:90:2b:9b:
10:11:46:32:b0:4e:13:8f:83:d0:a7:bf:2d:7b:81:
31:4c:77:26:07:08:29:f3:0e:1e:5c:6a:82:21:fc:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:54:2F:81:BE:98:9F:0C:7E:2A:B0:74:11:6C:F2:BF:1E:CC:E7
X509v3 Authority Key Identifier:
keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/IDJUL4G-mJ8MfiqwdBFs8r8ezOc.roa
sbgp-ipAddrBlock: critical
IPv4:
203.145.120.0/21
Signature Algorithm: sha256WithRSAEncryption
82:c4:4c:7f:5e:35:13:fd:5c:eb:8a:c8:f1:a8:a9:dd:f6:71:
e8:5e:f4:5a:bf:40:c3:0e:36:33:f0:e6:39:72:97:14:3d:78:
76:bf:af:be:4d:d3:c6:e0:97:47:6a:ea:f7:36:1d:f4:60:90:
59:12:ff:d4:70:b2:68:ac:be:11:0e:18:16:7f:cb:79:4c:a6:
02:58:c5:76:bd:9d:ca:6d:ca:9f:6e:09:0f:9a:22:b3:5b:c0:
82:58:f4:f2:6a:3d:59:7b:db:71:13:1c:0f:be:9a:c0:fb:ae:
08:f4:96:ce:d6:5a:db:f1:4f:82:f1:79:c8:85:d3:5f:27:6f:
1f:4b:15:e6:4e:2e:e8:e8:f0:8a:fd:09:26:35:1b:5e:d8:43:
0e:6b:7f:03:50:54:3d:6d:aa:0c:fe:60:75:da:9e:2d:86:41:
90:2f:32:3c:6f:3a:99:36:3e:c0:85:44:0a:6b:39:cc:4f:30:
51:55:be:cc:68:28:9a:77:7d:8f:85:a5:36:16:59:49:e0:13:
47:c1:83:24:74:d3:ff:90:13:f5:a6:c5:5d:46:97:cf:e7:cc:
50:90:e1:c7:96:09:bf:72:6a:9f:f6:09:b0:fe:45:f6:c7:1a:
ea:bc:f7:96:c3:0b:ea:e0:fc:f9:69:a2:f9:4e:9f:6b:9e:ac:
b5:0d:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org