Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/sbM7w0l2RwEZ1_V9VNpmtcoswT8.roa
File: sbM7w0l2RwEZ1_V9VNpmtcoswT8.roa (raw, json)
Hash identifier: l14eg5kfkZvEqaldf5QbWRfAcL0jkeStNQqEgyVd6SQ=
Subject key identifier: B1:B3:3B:C3:49:76:47:01:19:D7:F5:7D:54:DA:66:B5:CA:2C:C1:3F
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 23
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/sbM7w0l2RwEZ1_V9VNpmtcoswT8.roa
Signing time: Sat 20 Feb 2021 08:03:55 +0000
ROA not before: Sat 20 Feb 2021 08:03:55 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 9621
IP address blocks: 123.108.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Feb 20 08:03:55 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=B1B33BC34976470119D7F57D54DA66B5CA2CC13F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:16:c3:3a:ac:48:12:7c:c9:64:db:d2:d2:
a2:e8:14:6d:5b:91:d1:b6:38:97:6a:37:73:d0:c7:
10:c5:0a:b6:1d:0f:df:94:2e:bf:f0:b5:8b:aa:06:
65:21:01:e2:8e:a2:d3:12:f9:20:1b:f1:18:6e:42:
1e:69:27:a9:f0:c7:eb:31:62:77:c4:10:f9:28:57:
89:a3:04:1e:65:84:b0:46:62:c4:9b:9c:cd:86:de:
0d:a9:27:1d:21:b1:ab:cc:fc:c8:92:6f:e7:82:32:
db:2e:f3:a0:ce:05:91:50:c0:82:90:78:80:30:06:
26:97:57:61:db:19:14:81:70:8e:0c:fe:d9:f8:17:
82:08:82:48:b8:dd:55:8f:84:53:18:f2:9b:03:4a:
81:3f:62:07:81:9e:d5:e3:09:ba:4a:16:f7:da:ed:
c0:16:9a:16:f0:53:13:1a:51:d0:20:77:34:be:65:
f1:3a:4f:bc:a4:49:5d:e4:fe:ac:55:ff:a6:28:98:
60:93:7f:75:32:c6:b2:6f:e7:4e:59:03:81:6a:95:
7b:23:93:96:44:06:83:12:c3:5f:be:f2:42:53:f9:
a9:ff:93:2a:86:5d:f5:45:d6:72:c1:a1:f4:00:b1:
2e:d9:1c:4d:e0:d0:7c:6b:a8:23:8f:c7:97:03:95:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:3B:C3:49:76:47:01:19:D7:F5:7D:54:DA:66:B5:CA:2C:C1:3F
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/sbM7w0l2RwEZ1_V9VNpmtcoswT8.roa
sbgp-ipAddrBlock: critical
IPv4:
123.108.192.0/21
Signature Algorithm: sha256WithRSAEncryption
07:d4:4f:a1:33:df:9f:13:a9:d1:d9:d0:af:b3:9e:f6:c5:02:
b7:a7:16:01:12:49:6c:10:28:76:86:b2:e4:ea:85:92:0f:e9:
82:f6:4f:be:cb:96:dc:de:65:45:90:96:c6:bf:0d:ee:0d:71:
5d:4f:7f:88:26:03:20:bf:b8:6e:5e:2e:26:d8:05:c0:7c:dc:
62:27:a2:52:09:df:95:40:16:69:e2:42:94:7f:85:a9:f0:77:
41:4d:3e:5e:bc:25:e0:ec:28:e8:8e:39:12:42:63:51:a0:73:
88:6e:94:97:01:3e:0e:08:de:0c:fd:34:6b:cd:66:f6:e5:ee:
e8:8e:fc:32:ce:83:62:17:88:1b:3d:e9:fc:92:35:56:d2:d1:
97:7a:f5:03:4b:b7:11:95:37:71:90:81:b8:e7:cb:ce:c9:ad:
8f:78:cc:53:2e:c7:63:dc:78:3c:10:86:38:37:5b:7a:8b:17:
89:32:4b:3e:33:13:56:19:be:27:62:b4:6a:65:2d:ec:75:2a:
90:d6:6a:c9:5e:2c:cf:a5:62:3b:d9:01:6e:4a:e9:f9:4a:86:
82:54:f9:1f:4e:3b:5e:2f:ff:9f:46:55:95:9d:f3:e1:1a:fb:
bb:e1:21:4d:9d:2c:5a:09:26:ec:d6:69:48:f0:fe:b0:f6:d4:
39:e4:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org