Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/H6wfIoDxFvSI2R-y16PKDb5vg78.roa
File: H6wfIoDxFvSI2R-y16PKDb5vg78.roa (raw, json)
Hash identifier: RSGuOm7EDDJ7Ca98bqRePUXQCcwt226Zg3P2NaSYqRM=
Subject key identifier: 1F:AC:1F:22:80:F1:16:F4:88:D9:1F:B2:D7:A3:CA:0D:BE:6F:83:BF
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 14
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/H6wfIoDxFvSI2R-y16PKDb5vg78.roa
Signing time: Thu 25 Nov 2021 08:38:19 +0000
ROA not before: Thu 25 Nov 2021 08:38:19 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 23805
IP address blocks: 202.76.192.0/19 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Nov 25 08:38:19 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=1FAC1F2280F116F488D91FB2D7A3CA0DBE6F83BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:0f:78:d8:99:33:25:e0:48:87:e5:c0:2d:
6f:5b:df:04:e2:ad:2d:88:10:89:cd:5d:72:d0:46:
4e:72:f1:03:cc:db:d5:30:b9:51:8f:92:bf:59:48:
84:2c:4e:ca:10:88:3a:b7:99:16:77:cc:cd:77:63:
b9:55:8c:77:53:3f:06:11:a0:98:ae:27:7b:7c:02:
e4:ef:a5:ff:a9:33:bb:3e:6b:7e:69:c3:23:92:4c:
f9:94:b2:77:de:82:bd:ed:ce:8b:0e:0e:ff:d4:fe:
70:78:bb:8d:4b:e8:df:38:3f:48:c6:99:ac:6f:82:
d0:cc:cb:41:35:6c:37:a9:f9:9e:d2:a7:0f:b3:0a:
e2:55:fd:cc:91:e0:bc:7e:a7:18:88:b0:be:5c:1a:
09:69:c9:c4:04:59:07:38:28:78:c2:89:18:71:f2:
a0:c3:22:28:40:e7:76:43:62:7c:fd:1b:1d:84:13:
c7:4d:42:56:c1:85:64:e6:41:1c:b1:b1:84:1b:b3:
2c:2d:9e:62:8b:78:a4:43:5f:0b:a2:0a:c1:08:73:
92:03:09:b0:de:81:92:73:68:66:4e:0f:89:33:4a:
e5:6c:56:f4:55:2b:e1:65:64:84:4a:b1:62:43:78:
66:72:68:e7:e2:92:a5:41:4f:5c:82:2d:37:44:32:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:1F:22:80:F1:16:F4:88:D9:1F:B2:D7:A3:CA:0D:BE:6F:83:BF
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/H6wfIoDxFvSI2R-y16PKDb5vg78.roa
sbgp-ipAddrBlock: critical
IPv4:
202.76.192.0/19
Signature Algorithm: sha256WithRSAEncryption
63:17:cb:33:a0:ae:3c:c6:b7:15:04:b2:d8:43:65:df:96:ae:
35:89:d7:93:a0:6d:03:03:8e:00:83:1e:fd:5c:96:d8:3b:e5:
28:37:f9:17:a9:08:fa:2b:5e:06:9c:f1:bd:26:35:db:dc:66:
7d:1a:24:d1:f7:b1:90:ad:55:6b:d4:e8:01:be:c8:c6:e8:43:
5e:79:15:9f:67:be:be:ff:88:14:7b:74:87:b1:fc:f0:e7:77:
0a:61:81:2f:d6:83:ad:2a:88:ab:7a:72:9e:b1:77:3a:c7:91:
7a:ec:1c:d5:26:77:a5:27:dd:f5:97:f6:0c:aa:8b:ab:74:39:
0b:d4:50:a2:af:12:01:23:ae:1e:8f:2a:33:66:d1:7a:c5:ab:
ad:9b:ca:b7:e5:ad:33:47:16:0c:b5:df:0a:8f:07:27:1f:a9:
23:52:91:3f:73:ee:1b:0a:ce:ff:a5:3c:41:5d:fa:37:f1:38:
49:8a:44:ea:65:8c:9b:fb:58:ba:77:7e:56:b8:23:9b:c1:de:
5f:f1:a8:2b:53:f6:e1:d6:c6:d5:10:f0:da:e0:e9:d6:0f:c0:
d3:2c:5a:95:0a:6c:7e:50:1a:d6:00:ab:d4:eb:51:5e:1e:3f:
9a:98:fa:cf:65:d2:cf:2a:8d:ef:75:04:d8:17:1c:a0:5d:c9:
d8:4e:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org