Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa
File: li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa (raw, json)
Hash identifier: Up+15mmCWCj1MZuAAelFL13+ea5AUyzpntsGgoEzQWE=
Subject key identifier: 96:2E:64:46:45:61:22:5D:29:1E:B9:83:6D:65:1E:1B:75:9C:E2:D6
Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial: 13
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa
Signing time: Thu 25 Nov 2021 08:38:18 +0000
ROA not before: Thu 25 Nov 2021 08:38:18 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 23805
IP address blocks: 103.42.168.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Validity
Not Before: Nov 25 08:38:18 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=962E64464561225D291EB9836D651E1B759CE2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:47:eb:91:60:aa:94:8b:ea:bf:17:e1:38:
39:19:74:2b:b2:53:80:f7:08:be:39:bf:db:21:5d:
b2:10:bf:0a:69:90:9d:46:99:60:ac:94:fa:50:94:
c8:4d:30:06:c2:2c:63:3c:5f:d9:ff:66:a6:8f:da:
ce:59:77:8c:7d:b0:9a:48:cb:70:e4:23:db:42:05:
ae:da:e1:20:a9:19:1f:97:86:9a:01:24:e2:93:ad:
e4:86:8f:b9:71:8b:b2:8c:92:66:36:d7:f3:25:f4:
44:87:e7:eb:74:95:85:79:c3:fe:1e:63:ba:3f:30:
1f:df:e0:fa:8c:0c:6d:d2:02:fc:cc:a7:97:ba:4a:
47:89:0f:95:ef:e0:42:62:11:f7:e1:0e:ac:0c:c0:
17:00:82:57:6f:f7:e5:4f:81:94:e6:fc:55:96:0d:
f5:c9:48:d0:45:54:9a:1a:64:a9:21:4e:e8:87:ec:
8b:76:cd:50:a3:75:54:c0:f0:09:79:a2:75:88:6f:
52:08:8f:fb:e4:a8:6b:f9:72:b8:08:80:d1:0b:5f:
13:da:ab:d0:f4:dc:8f:31:62:09:c3:5f:f9:60:c6:
f8:c8:5c:6e:8f:fb:24:dc:39:b2:fc:a3:87:f1:19:
1d:e6:05:e5:6d:2b:37:11:40:b3:ce:4b:37:0b:8e:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:64:46:45:61:22:5D:29:1E:B9:83:6D:65:1E:1B:75:9C:E2:D6
X509v3 Authority Key Identifier:
keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:92:f8:e9:ab:d5:34:20:47:3e:1e:57:b2:0f:c3:66:6f:4c:
98:5d:9b:82:21:50:59:f8:a8:19:cb:d7:91:a7:d2:d6:ee:d5:
d8:e6:ab:ae:bf:90:73:a3:20:ae:5b:94:6f:9a:83:12:b6:13:
00:be:68:4e:1a:72:5a:10:1b:f5:eb:0e:43:bb:0d:0c:96:3c:
5a:39:f8:e0:70:30:c5:10:62:9e:bf:cd:9a:9f:6f:32:aa:ca:
52:67:f4:a2:3e:ad:9e:f3:9c:85:27:45:51:27:11:05:db:8c:
dc:0c:a5:35:81:39:0a:d4:2c:5b:ae:7d:da:05:77:3e:c5:ce:
d6:a4:35:05:fc:7f:b3:81:92:39:c3:ad:a6:78:a1:96:68:fe:
c3:6c:ba:6f:c1:0c:65:a7:62:6d:e5:5b:a3:5d:11:3d:e5:ba:
17:cd:93:39:29:6f:92:82:51:00:c6:b3:75:55:53:58:04:d8:
45:06:16:92:5f:cb:3c:e6:b8:7f:47:ee:91:51:13:19:f5:5c:
69:9b:f8:ba:f4:0e:9b:8a:4e:48:f5:0b:fd:26:f2:97:f6:6d:
07:88:85:f1:38:6e:b7:32:79:a2:88:e5:3a:8a:d4:48:ae:79:
26:ec:5d:b7:e3:3b:8c:12:73:a7:75:42:df:d5:c5:c2:60:30:
85:c0:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org