Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/CsG1MQZBv3htlm6lHImgKPCzYl8.roa
File: CsG1MQZBv3htlm6lHImgKPCzYl8.roa (raw, json)
Hash identifier: QThwx+C00ngtCXrg1Kk1tcZuyXiWglC5rnHenGYJT1k=
Subject key identifier: 0A:C1:B5:31:06:41:BF:78:6D:96:6E:A5:1C:89:A0:28:F0:B3:62:5F
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 321E
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/CsG1MQZBv3htlm6lHImgKPCzYl8.roa
Signing time: Thu 13 Apr 2023 09:53:07 +0000
ROA not before: Thu 13 Apr 2023 09:53:07 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 7671
IP address blocks: 210.233.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12830 (0x321e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Apr 13 09:53:07 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=0AC1B5310641BF786D966EA51C89A028F0B3625F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:94:e3:23:5d:e9:ec:03:02:5f:d8:26:e7:
62:58:95:a8:08:68:bd:35:5d:3e:cd:45:f9:e6:fb:
d8:18:7f:5b:fd:23:b9:4c:8f:46:9a:4f:3b:02:80:
73:6c:d5:45:f4:35:93:8b:d4:43:db:7e:1a:6d:26:
66:e6:29:8a:28:e2:fa:e9:66:bd:1d:1c:04:62:52:
49:07:22:58:14:a0:04:c2:17:63:c0:58:10:1f:49:
02:bd:e2:cf:9c:0a:56:94:2c:7b:a1:55:fd:42:2e:
9c:10:ef:20:d4:af:74:fd:c4:58:7f:fb:15:d8:2a:
d5:ac:06:30:be:38:a1:d3:07:3b:db:bd:3d:ea:20:
e0:7c:4f:be:cb:e3:67:10:3a:22:da:c6:05:23:e9:
61:b0:07:c5:fc:e3:af:50:8d:5f:28:b9:6b:8d:6d:
b6:fe:a3:00:2b:bc:19:8c:90:84:ee:8b:6b:1a:40:
05:35:93:99:ef:e0:7b:36:62:9b:1f:6d:17:5e:ce:
a7:81:4b:c5:20:96:08:30:54:89:0b:68:20:ed:bb:
d1:d5:14:40:da:58:47:d8:58:93:4b:11:db:eb:69:
f2:d0:8b:e2:3a:03:f1:62:7c:52:dc:24:28:7c:3d:
9e:44:c4:a1:87:7e:86:d3:81:b6:0e:76:ca:e1:d5:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:B5:31:06:41:BF:78:6D:96:6E:A5:1C:89:A0:28:F0:B3:62:5F
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/CsG1MQZBv3htlm6lHImgKPCzYl8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.233.240.0/20
Signature Algorithm: sha256WithRSAEncryption
33:9c:50:39:d9:8b:dc:f1:cb:a2:65:31:13:2f:af:96:4e:f8:
33:f6:21:03:c7:21:43:46:fa:45:d1:72:e3:e7:f7:20:7d:77:
28:2e:17:30:67:e8:54:11:45:b3:b0:25:51:f0:85:5c:3d:bf:
e4:e8:3d:20:a0:cf:6f:3c:11:18:2d:13:3c:52:0c:d8:9d:33:
40:08:1e:d5:3d:9a:5a:41:b7:2c:66:4e:04:ff:36:d1:da:d1:
a0:02:dd:db:36:d1:21:6b:0a:cc:c2:b9:82:f5:97:21:24:3f:
d2:3f:ae:36:dd:a6:e5:11:78:c2:91:32:10:25:c0:2e:34:e2:
d5:87:37:41:2d:95:45:33:47:4d:05:66:42:f0:a4:db:95:13:
a2:ea:e3:4f:ea:45:df:47:fe:88:28:7e:fb:1d:fa:d0:20:a3:
87:a7:0d:d9:74:ee:c9:fd:c1:c7:d0:a9:9c:56:ed:2f:b4:55:
93:c8:48:19:79:6f:ab:ac:ae:24:f4:a4:d4:ea:25:c7:5b:7d:
04:25:8a:58:95:5d:b8:0b:d0:ef:1e:18:59:5d:88:f0:19:0f:
16:95:2c:bd:69:cd:ac:c2:b0:a3:aa:c3:81:8f:a7:59:ad:23:
3c:9b:1e:dd:e5:88:17:41:f6:71:a9:cb:6a:85:22:a2:21:cf:
35:29:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org