Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/E9xYphothjvBau3uSHpYjPHrClg.roa
File: E9xYphothjvBau3uSHpYjPHrClg.roa (raw, json)
Hash identifier: OKA2AursggyfEafa1KgEHvNiLBnt1kuAEqmrECwDBZw=
Subject key identifier: 13:DC:58:A6:1A:2D:86:3B:C1:6A:ED:EE:48:7A:58:8C:F1:EB:0A:58
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 2A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/E9xYphothjvBau3uSHpYjPHrClg.roa
Signing time: Tue 11 Oct 2022 01:46:02 +0000
ROA not before: Tue 11 Oct 2022 01:46:02 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 9824
IP address blocks: 111.125.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 11 01:46:02 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=13DC58A61A2D863BC16AEDEE487A588CF1EB0A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:a6:2a:a6:c9:2a:a7:67:07:81:2e:e2:25:
f6:8f:c0:7d:76:15:a9:bc:ab:14:61:65:97:93:52:
c1:e2:e9:91:c0:e7:67:9f:f1:fb:15:a8:53:48:39:
ed:ca:e2:4a:30:77:fc:22:2e:7a:51:2b:88:46:b1:
f3:40:e6:63:63:f2:ea:8e:a0:c6:2f:b0:7c:44:04:
12:e3:d5:dc:dd:e3:a5:47:a2:8f:99:b8:a8:85:d6:
c1:7e:ee:69:0b:d9:31:dd:26:0f:93:cc:d8:77:e4:
5e:73:07:75:84:06:b9:a4:38:32:c6:cc:0a:8c:ac:
d1:ee:ec:1c:c7:ac:31:06:b1:c6:c8:77:36:52:a7:
2a:11:9c:f4:69:8f:7a:94:68:42:af:a4:0f:be:06:
10:1f:8f:0e:29:3e:aa:ed:3f:ee:57:ec:89:1f:3e:
74:39:35:d8:14:9d:f1:18:c7:c7:6d:f8:95:cc:b1:
5d:08:70:f0:83:b1:90:ec:eb:94:9a:9a:a7:9b:0b:
dc:34:00:30:09:2a:c9:47:16:6a:bf:29:45:ad:28:
3d:83:03:8c:df:0c:06:4b:e7:bd:2e:dc:fc:79:c4:
aa:d1:23:71:a8:19:87:31:bf:81:e9:24:ad:34:4c:
0a:ed:3a:db:0d:a9:31:e6:a9:57:10:a1:62:be:62:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:58:A6:1A:2D:86:3B:C1:6A:ED:EE:48:7A:58:8C:F1:EB:0A:58
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/E9xYphothjvBau3uSHpYjPHrClg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.144.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:65:35:93:fe:0c:5a:b9:76:f3:a0:ec:50:be:13:35:53:3e:
4f:44:ce:04:af:5f:dd:49:53:79:46:6c:87:df:bd:67:27:c3:
86:75:23:c7:d7:98:27:86:f1:08:55:13:21:fd:2c:c5:17:2f:
90:c4:54:d5:ca:d3:d4:b3:3e:49:80:e4:19:3c:80:03:57:7b:
3a:03:27:c4:6f:c6:54:75:03:8a:17:2c:b0:8a:86:9d:58:8b:
0f:a5:f8:08:3e:1c:5c:fe:1a:ff:0f:f6:5a:2a:b0:f5:09:e0:
c6:e5:b1:a1:d4:0f:78:a9:ef:58:a9:94:c2:65:4e:63:ae:ad:
19:10:26:43:e1:6a:d4:e5:44:92:a2:8d:4f:d7:ab:72:34:98:
3a:24:de:29:0a:80:d7:6d:74:05:0f:a0:2d:a5:42:b5:52:d4:
f6:65:d0:3a:72:e1:57:59:08:a4:24:9f:4f:6d:eb:c0:b2:41:
5f:87:b3:11:5a:68:23:76:bb:3d:85:7d:db:62:70:1a:23:f2:
68:e8:74:db:c0:0a:9d:35:55:16:ea:93:0c:93:df:5e:bb:c7:
06:97:a9:44:c3:88:5b:47:d3:00:b2:6c:89:57:cc:ef:fa:b2:
11:c0:ce:f3:1f:e7:56:35:92:0b:e7:74:c8:84:59:65:54:4b:
b1:7b:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org