Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/5s_8KTDIvvp6tiitgPVzrqQWBAQ.roa
File: 5s_8KTDIvvp6tiitgPVzrqQWBAQ.roa (raw, json)
Hash identifier: C3/hRXl+8g6OCowFXcyzslpm57qn0kVZCWkY/qOZiws=
Subject key identifier: E6:CF:FC:29:30:C8:BE:FA:7A:B6:28:AD:80:F5:73:AE:A4:16:04:04
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 1A
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/5s_8KTDIvvp6tiitgPVzrqQWBAQ.roa
Signing time: Tue 25 May 2021 02:46:56 +0000
ROA not before: Tue 25 May 2021 02:46:56 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 2500
IP address blocks: 202.249.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: May 25 02:46:56 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=E6CFFC2930C8BEFA7AB628AD80F573AEA4160404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:23:fd:67:2d:e7:51:f5:83:d5:3c:03:4c:
97:4c:1a:2c:6e:9b:30:b2:99:5d:c7:d4:a1:a6:08:
79:67:b2:6b:7e:a5:51:60:2f:98:63:d4:30:fb:da:
82:89:63:ed:30:5e:18:ce:31:d1:5b:a1:42:aa:18:
02:3b:4b:db:77:13:cb:e6:51:0c:a3:32:58:54:49:
46:ba:cc:65:25:84:f7:7c:67:dc:77:7a:b3:fb:43:
44:fa:45:c4:f3:8a:ba:ba:b3:83:51:18:15:d0:14:
98:c9:95:17:bd:a6:c5:d2:24:fe:03:07:2c:d8:d9:
64:82:ab:14:6a:b0:52:5f:80:f2:d6:c6:d6:2b:6a:
fe:85:0a:82:26:b5:9c:2e:41:8b:79:15:28:17:84:
ae:ef:cb:8b:55:82:62:a1:70:4c:d3:9e:14:b2:81:
39:83:61:81:e6:76:92:d1:3b:8d:b7:6a:cc:bf:58:
01:8f:a3:f3:80:e2:e7:92:c7:cc:fe:2a:11:e4:23:
93:74:cf:a2:52:24:de:a1:69:2e:dd:37:b5:cf:d3:
ee:94:62:5f:9f:ed:61:69:af:79:db:87:a7:db:b2:
ad:49:92:d5:18:43:c9:14:07:8c:c4:21:62:79:f9:
a5:f2:f9:bd:01:ff:1e:f5:a3:e3:46:62:98:f9:1c:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:FC:29:30:C8:BE:FA:7A:B6:28:AD:80:F5:73:AE:A4:16:04:04
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/5s_8KTDIvvp6tiitgPVzrqQWBAQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.249.128.0/18
Signature Algorithm: sha256WithRSAEncryption
88:85:e7:8d:0b:66:dd:99:7a:85:cf:84:f2:55:8f:0a:51:c8:
0f:45:c1:84:55:f9:84:f8:9f:75:55:e2:8d:0a:63:47:18:f0:
4d:02:2d:e4:a1:1e:1f:86:9c:4c:ec:7c:56:c7:36:71:a5:b3:
89:43:36:32:fa:5f:c1:ca:da:c2:a6:0a:dc:f6:d5:2e:54:04:
75:b4:81:52:ae:0c:36:20:78:f5:e9:db:23:8a:c5:b8:c8:75:
8c:92:88:9a:48:0c:ac:87:ed:fe:50:68:e1:18:d0:52:af:f0:
83:43:56:82:54:ed:bc:3e:da:ea:ac:3a:92:7c:73:80:9a:f9:
da:29:c7:fa:3e:3a:35:6a:be:ab:a8:9b:89:e1:c0:33:18:cd:
3e:26:e3:15:e5:79:37:18:52:84:5f:2e:85:35:3f:18:ac:ec:
26:ee:6a:fe:3a:dc:3d:a1:a2:3c:db:21:03:cc:8c:9f:5e:4e:
68:b9:26:20:90:18:44:72:aa:fa:6d:d8:56:5c:17:d4:2e:e8:
e7:38:f9:5e:ef:1c:68:77:47:50:00:53:4c:9d:f5:6c:53:1c:
13:f0:93:79:f8:e8:5d:2d:06:e3:aa:bd:eb:4e:5c:e8:e4:91:
bc:2d:f2:d3:29:3a:af:a7:0f:1c:5b:0f:cb:9b:ed:3a:1b:13:
e3:a2:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org