Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ruMF5Es_dkzliWO5JOwDX_GIa-s.roa
File: ruMF5Es_dkzliWO5JOwDX_GIa-s.roa (raw, json)
Hash identifier: WB/iLC/Tkt6E16Jm/YOXR+WVOirRdCv4FQzPrJD76qQ=
Subject key identifier: AE:E3:05:E4:4B:3F:76:4C:E5:89:63:B9:24:EC:03:5F:F1:88:6B:EB
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 30
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ruMF5Es_dkzliWO5JOwDX_GIa-s.roa
Signing time: Mon 01 Nov 2021 01:28:48 +0000
ROA not before: Mon 01 Nov 2021 01:28:48 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 9621
IP address blocks: 211.120.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Nov 1 01:28:48 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=AEE305E44B3F764CE58963B924EC035FF1886BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:1d:c8:a0:5a:06:c3:d1:da:e0:8e:c0:31:
8b:61:5c:ef:ef:88:37:f9:11:8e:b1:c0:14:35:c9:
76:ad:18:cb:a5:c5:bd:9e:9d:9a:10:f7:9d:0e:81:
9a:96:cf:9d:86:aa:c6:3c:4a:aa:ce:f8:a6:e4:60:
89:21:d2:87:61:e7:23:72:2e:7c:df:8c:60:fe:4c:
bf:8f:e5:d2:e2:f8:74:90:ef:51:ef:5f:3e:d0:a1:
f5:d1:86:e1:60:64:6e:c3:95:75:03:3b:81:18:a4:
5e:2a:c1:b0:cc:ce:b8:07:1a:74:9d:d0:36:47:59:
ed:f2:3e:10:8b:e3:e0:27:4c:37:87:48:7a:85:b6:
38:4b:ae:fe:a1:dc:e7:35:2a:6f:c8:01:a9:8d:4a:
70:69:0a:0f:96:a7:a4:86:cc:0f:be:c3:d1:dc:d0:
bb:cd:c4:1f:d9:e1:7e:a7:b2:9e:a2:6a:72:a6:d4:
58:39:98:66:9f:41:a6:7b:6e:71:e2:13:c1:a9:03:
8f:0b:1f:c0:a2:e4:33:a8:ab:a0:f9:1d:80:05:31:
aa:2b:65:14:bc:89:15:57:ae:e4:3c:3d:f9:4e:1a:
0b:d6:2c:f1:41:34:ca:55:70:5c:4e:dc:1e:58:f9:
61:25:10:87:41:ce:0e:5a:1d:91:42:38:f3:7e:60:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E3:05:E4:4B:3F:76:4C:E5:89:63:B9:24:EC:03:5F:F1:88:6B:EB
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ruMF5Es_dkzliWO5JOwDX_GIa-s.roa
sbgp-ipAddrBlock: critical
IPv4:
211.120.224.0/20
Signature Algorithm: sha256WithRSAEncryption
c4:69:4d:51:2d:4b:7b:ab:84:db:cb:09:ab:fa:11:1d:9b:3e:
25:e0:7d:dc:9c:ab:fc:ea:8c:73:96:d1:d8:5f:ab:d8:4c:ad:
c3:7b:ca:5d:11:14:74:1b:59:8e:4e:9a:d3:d9:cc:f9:b2:f9:
f0:5c:f9:a8:48:7d:64:3c:8c:c4:fa:69:0b:bd:8c:2a:35:c7:
64:b4:39:99:23:c8:3a:37:6d:f1:a9:67:b5:7e:8c:ef:69:a5:
24:be:9b:5c:61:0f:1d:90:94:41:b4:25:7d:1d:e5:ae:cf:59:
5a:87:74:4e:e2:a5:f7:98:b2:4e:ec:ef:01:b6:d0:ef:db:44:
29:36:08:01:07:47:ba:d0:14:72:2f:47:44:0e:38:30:cd:4f:
22:70:d6:de:ed:7d:6c:26:c3:9d:81:b3:0c:93:69:70:28:d0:
71:f7:83:2c:12:56:67:d0:41:ed:c1:e9:1e:2a:ae:3d:98:20:
d1:d8:ea:a8:72:90:e7:95:db:a2:09:3a:be:02:d5:37:c3:d7:
2b:28:75:d8:24:f1:8a:95:8c:71:c3:9e:9f:c7:a8:fa:49:00:
55:d8:34:57:4d:4b:9c:2f:f2:db:8e:7a:01:37:22:06:a2:00:
c6:4c:35:03:6f:4c:9f:0d:b9:10:a9:17:c9:9c:1b:e3:f9:ae:
e7:c4:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org