Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/u9WmGDptEAdpBH_lwsGuLDpseUI.roa
File: u9WmGDptEAdpBH_lwsGuLDpseUI.roa (raw, json)
Hash identifier: CicUq63sEhyfakBbx9PDOmdk+dvP6m/AaDpmiB+yX74=
Subject key identifier: BB:D5:A6:18:3A:6D:10:07:69:04:7F:E5:C2:C1:AE:2C:3A:6C:79:42
Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial: 1D
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/u9WmGDptEAdpBH_lwsGuLDpseUI.roa
Signing time: Tue 07 Dec 2021 03:00:09 +0000
ROA not before: Tue 07 Dec 2021 03:00:09 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 9621
IP address blocks: 157.70.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Validity
Not Before: Dec 7 03:00:09 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=BBD5A6183A6D100769047FE5C2C1AE2C3A6C7942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:9e:a3:74:51:93:30:8a:4b:0b:8a:9d:83:
f0:ea:88:fe:da:d5:41:91:16:49:9a:a6:1f:a0:19:
1c:0a:2b:7f:99:69:e6:bf:0d:ba:b8:88:e0:7e:6b:
a4:f5:14:ca:b4:12:b4:ac:08:1a:34:86:c2:6d:1a:
0c:99:8a:6e:fc:c0:16:9b:64:b3:26:fb:19:ac:7f:
a5:e2:66:2e:8b:25:ab:cb:45:9f:73:60:30:4a:9a:
a7:f4:33:36:f1:82:11:2d:7f:71:59:ee:8b:e9:81:
a4:62:80:9d:92:50:32:ff:96:14:58:24:d2:4c:20:
98:37:3e:30:5e:66:14:97:8f:2c:bc:3c:b7:26:7e:
4b:1b:a3:0e:ab:ad:17:d5:46:51:68:82:4b:ea:53:
08:b5:57:e2:f6:f9:eb:a3:84:cc:38:de:dd:ba:52:
37:01:ab:08:db:9f:c1:6b:c2:72:4c:e4:81:36:23:
ed:c5:f6:ea:c8:37:ff:66:76:83:6c:d3:31:10:99:
a5:60:00:40:b7:39:35:a0:bd:95:27:ec:1e:49:87:
eb:65:44:ab:f6:eb:a9:c9:38:ab:ae:2b:ef:96:d2:
9a:61:3e:48:7e:2c:cc:21:d8:28:1e:18:04:c9:5e:
cc:c0:3f:e3:13:2e:8c:7a:ad:6f:a0:a2:d0:e9:0b:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D5:A6:18:3A:6D:10:07:69:04:7F:E5:C2:C1:AE:2C:3A:6C:79:42
X509v3 Authority Key Identifier:
keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/u9WmGDptEAdpBH_lwsGuLDpseUI.roa
sbgp-ipAddrBlock: critical
IPv4:
157.70.224.0/20
Signature Algorithm: sha256WithRSAEncryption
95:8a:7d:de:eb:ff:ca:a5:5f:84:75:be:f0:18:74:a1:91:e0:
c3:43:19:b8:6c:fd:f9:ef:c6:86:8b:23:8e:44:d6:c5:83:46:
62:6d:5e:e2:51:8d:9d:cc:34:ee:50:d0:3e:fc:dc:70:bd:71:
a3:f5:27:24:26:ef:d6:ac:23:46:43:6d:c2:bc:b5:27:f4:db:
fb:7b:09:09:54:5d:69:29:b1:13:2e:8d:52:1e:83:26:31:4d:
48:a3:2c:48:1f:18:38:d5:ef:c3:6c:96:2b:24:79:ba:65:b5:
16:d7:ee:61:f0:37:51:8d:c7:73:a0:3d:78:f8:dd:f0:04:21:
47:63:3d:0b:42:d1:3f:de:e9:fe:02:31:1f:11:01:22:39:55:
04:cd:bf:e8:37:1a:57:93:dd:e0:7e:03:58:28:cc:cb:6f:af:
25:6f:41:67:62:90:b1:e3:1a:a3:85:73:41:41:aa:45:02:d8:
c7:19:59:c7:09:21:0c:13:34:c2:c7:b5:a7:74:f7:e8:7d:ac:
c9:56:11:91:9b:99:7d:3a:0e:a3:96:67:a7:58:d2:08:cb:dd:
01:39:7a:71:6f:86:e9:08:a5:a6:f2:27:cb:fa:87:9a:c0:86:
dd:c2:de:22:f0:6a:ae:28:8a:7e:8c:ed:e5:39:06:f0:16:c4:
46:88:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org