Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZO2NqlhVKMts2R5GHXlMTRPe068.roa
File: ZO2NqlhVKMts2R5GHXlMTRPe068.roa (raw, json)
Hash identifier: CxxHWgVehfwd3JHbMp7SHnAo1f95Ywm7sx28q2N5lJY=
Subject key identifier: 64:ED:8D:AA:58:55:28:CB:6C:D9:1E:46:1D:79:4C:4D:13:DE:D3:AF
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 33
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZO2NqlhVKMts2R5GHXlMTRPe068.roa
Signing time: Tue 25 May 2021 02:46:50 +0000
ROA not before: Tue 25 May 2021 02:46:50 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 7671
IP address blocks: 210.233.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: May 25 02:46:50 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=64ED8DAA585528CB6CD91E461D794C4D13DED3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:cd:cc:69:bb:18:13:49:d4:f0:c1:e6:72:
b2:bb:73:ec:5e:8f:76:f0:a7:6f:af:fa:95:c7:cf:
e2:38:ea:b3:1e:fc:b9:51:f1:71:4f:de:5d:36:98:
fe:68:02:b2:d6:a1:b8:21:92:42:d1:33:93:1a:d6:
cc:3b:7f:41:ca:84:17:1b:aa:dc:0f:a0:17:c9:3b:
02:8d:3e:bd:16:a9:0c:ad:3e:07:c1:5b:38:a1:c5:
33:36:2f:14:e2:0b:39:71:c7:b2:55:25:7a:09:9d:
0e:34:c6:07:96:23:55:15:33:2e:b5:96:dd:41:03:
09:62:61:27:33:ee:cc:48:28:bc:2d:43:66:58:f2:
d9:ca:d8:c1:34:e0:ba:37:b2:d4:7f:db:c6:a1:8c:
b5:86:06:02:e7:e5:27:82:e0:d3:4d:3e:1a:01:35:
8c:be:b9:45:94:7c:b6:70:fe:3e:bc:f9:f8:72:2b:
d6:de:c5:d0:2f:b5:19:95:43:26:e9:49:59:35:4e:
94:30:c3:c3:37:84:67:af:fc:70:16:3a:03:63:c0:
bf:99:10:3a:db:70:77:88:c7:b3:92:0e:2f:44:10:
77:78:32:90:2d:5e:d4:17:99:3e:ee:1c:d4:60:fa:
f3:42:b9:92:ac:33:ee:93:1c:aa:a2:47:d9:46:63:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:8D:AA:58:55:28:CB:6C:D9:1E:46:1D:79:4C:4D:13:DE:D3:AF
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZO2NqlhVKMts2R5GHXlMTRPe068.roa
sbgp-ipAddrBlock: critical
IPv4:
210.233.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:5f:42:79:a3:7e:5a:89:60:29:64:f0:04:95:bb:64:3b:fa:
57:f3:2e:78:85:90:2f:87:ac:c5:c3:b9:ab:fd:77:07:94:43:
bc:88:1e:25:1e:bf:9e:ff:76:5f:5c:54:b8:12:89:db:fc:2a:
33:7a:58:82:fd:d0:1b:30:c2:70:41:7f:14:31:65:ec:9c:33:
2f:6c:84:66:3e:b2:1d:c1:12:27:05:29:53:d2:b2:2d:9a:0a:
ca:ab:df:97:e0:ee:57:40:e6:0f:5f:23:55:f1:69:c2:a3:97:
cb:e8:5b:c8:2b:77:b0:8f:b0:75:59:4d:c4:7c:a5:39:0b:8c:
d3:29:25:8e:12:cb:cf:b9:3b:1d:66:65:32:85:39:53:61:c0:
10:bf:38:7a:4b:8f:fa:bf:3e:0b:96:f5:ba:6d:7d:21:5c:d8:
a8:b9:62:74:b6:7e:ae:45:0a:9d:4f:29:7f:c7:b8:c3:47:31:
d6:c6:b1:ef:07:be:6f:72:b8:19:99:b2:00:c0:42:0f:71:9f:
5f:5d:f9:7f:63:5e:fe:ef:9f:2a:2b:9d:3d:8d:f9:1d:33:07:
61:7c:95:49:15:11:52:72:be:3c:30:9f:82:db:46:d5:26:85:
33:aa:84:b3:12:36:c6:0b:58:8a:9c:62:22:18:2b:e4:9f:9c:
26:29:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org