Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/lFfmGo5Tlrnt0_Lrn6Fks73WGK4.roa
File: lFfmGo5Tlrnt0_Lrn6Fks73WGK4.roa (raw, json)
Hash identifier: DlC0C2ajx2ijhuUHXXPEKihwUbFvfFb0gOHjg0JIWi0=
Subject key identifier: 94:57:E6:1A:8E:53:96:B9:ED:D3:F2:EB:9F:A1:64:B3:BD:D6:18:AE
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 35
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/lFfmGo5Tlrnt0_Lrn6Fks73WGK4.roa
Signing time: Tue 25 May 2021 02:46:50 +0000
ROA not before: Tue 25 May 2021 02:46:50 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 7671
IP address blocks: 219.111.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: May 25 02:46:50 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=9457E61A8E5396B9EDD3F2EB9FA164B3BDD618AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:4d:08:47:45:25:e4:44:77:d2:29:45:c9:
a9:6a:d5:06:5e:3f:f3:d9:c3:0f:f5:97:5d:1c:92:
15:84:ca:e3:60:09:a6:c8:83:7b:cb:3b:cd:e2:e0:
ce:18:6e:19:b4:97:9c:de:16:4f:c5:7c:02:b1:42:
50:a0:e8:a8:42:ea:a2:c3:01:ed:75:eb:4d:e3:ed:
f6:aa:6f:36:75:44:b4:32:2d:22:51:30:c4:09:de:
41:a5:d4:6d:c6:73:14:d8:db:23:51:cb:e7:99:30:
88:6f:5d:bf:c4:e8:b0:33:c7:fc:ce:8a:ec:30:54:
ba:50:31:cd:bf:02:b8:a9:55:c2:ee:9a:0f:87:b0:
01:45:31:e6:91:42:5b:b4:92:a6:14:7a:20:04:33:
4a:09:1f:d1:7c:78:c1:7f:fe:5f:49:7f:28:af:f0:
79:ff:42:b4:76:ac:32:54:29:1b:3a:4c:70:4d:3e:
ee:55:81:34:a3:9a:cf:df:0d:6c:09:9f:58:5d:bc:
f0:8f:f2:64:27:3c:d2:69:0b:1c:c3:c2:5c:5a:2c:
ab:f3:d6:28:37:92:d7:a1:76:a3:66:66:3d:3f:43:
93:8b:f6:48:6a:16:27:c5:b5:31:60:aa:64:f7:36:
1b:88:67:84:42:2a:f8:40:91:48:a3:51:23:56:23:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:E6:1A:8E:53:96:B9:ED:D3:F2:EB:9F:A1:64:B3:BD:D6:18:AE
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/lFfmGo5Tlrnt0_Lrn6Fks73WGK4.roa
sbgp-ipAddrBlock: critical
IPv4:
219.111.224.0/20
Signature Algorithm: sha256WithRSAEncryption
34:b2:c5:7d:a2:af:59:6c:4a:b1:a1:ad:ef:24:19:e0:70:3b:
4b:3a:19:14:08:e1:a5:f8:48:e3:6e:fc:7b:1b:30:fc:6a:d8:
81:dc:e0:09:e3:c7:85:d7:7d:13:4c:dd:a5:ac:28:89:9e:b6:
1d:2a:44:21:d8:22:1c:aa:db:52:04:48:1e:73:5b:0f:6e:81:
05:e9:44:af:73:d4:3a:61:be:fb:38:ae:f9:c1:bf:5f:8d:94:
0d:cd:d0:43:33:91:fd:3a:cd:80:9d:8a:c8:96:88:eb:c4:07:
51:81:0b:ab:9f:ed:35:80:cd:f4:88:3d:1b:bd:a0:ff:54:c8:
f0:1b:e1:34:89:dd:03:e2:d2:3c:72:af:80:72:16:8d:a9:47:
74:07:ff:d3:d9:a0:85:bd:e6:96:89:54:6e:1a:3b:8e:66:ff:
43:31:b7:a8:f1:f0:07:b8:d8:f4:3d:7e:bd:cb:79:d7:f1:b1:
ba:1e:b3:dd:1e:f8:35:c5:e7:51:3c:20:f0:a5:66:fd:ae:1c:
ea:0f:9a:d6:5b:e7:8d:e0:48:87:3b:81:a3:9c:65:1a:35:18:
cd:92:0f:0a:ce:8d:75:7e:64:10:8e:e0:bd:fd:78:28:2c:b5:
ee:eb:d0:ee:1a:03:5e:c6:f2:5d:e2:83:d3:e5:38:53:65:f5:
06:eb:43:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org