Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/2bWXr1Nn_i0fNNG6l4y-Mx-PfnI.roa
File: 2bWXr1Nn_i0fNNG6l4y-Mx-PfnI.roa (raw, json)
Hash identifier: LULUGGAzeno36hCwxzuaY3oVQbeTSIZ5Q5AFWJrBirM=
Subject key identifier: D9:B5:97:AF:53:67:FE:2D:1F:34:D1:BA:97:8C:BE:33:1F:8F:7E:72
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 11
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/2bWXr1Nn_i0fNNG6l4y-Mx-PfnI.roa
Signing time: Wed 20 Apr 2022 09:02:17 +0000
ROA not before: Wed 20 Apr 2022 09:02:17 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 218.40.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:02:17 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=D9B597AF5367FE2D1F34D1BA978CBE331F8F7E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:56:ee:bd:32:7d:0b:d5:a7:6e:83:64:c2:
9b:ef:2c:f5:e5:fc:d3:63:c8:c2:5e:04:41:b6:b1:
70:5b:70:53:c8:07:e5:65:de:29:ce:01:6d:0f:b3:
ab:ae:d1:ec:4d:73:e3:3b:f4:e5:29:fb:63:3f:49:
2a:6c:d3:56:3c:6d:49:2e:81:fd:a4:7c:77:6d:8f:
7e:84:a3:ab:c6:04:9d:f2:d4:43:8a:71:95:19:1d:
11:fd:ae:d0:1c:ca:7c:a6:96:fd:86:47:08:97:5c:
91:71:25:ea:b4:3b:9b:ba:ac:ce:9c:ae:50:67:84:
e8:52:ca:5e:79:36:61:be:8b:5f:b7:3b:23:23:0b:
73:10:76:7b:db:fb:05:0e:1d:25:5c:dd:28:ae:f5:
92:1b:0e:c8:a3:f4:d5:9a:5c:1d:e6:8b:34:59:d6:
4e:40:69:64:03:0c:a2:76:fc:bb:08:84:b0:c3:dd:
ff:c7:43:5b:56:22:b6:ff:a7:8b:2f:92:b8:b6:ee:
73:98:0d:71:99:0f:28:a0:fa:d5:81:26:36:a5:79:
ec:26:1f:d2:a7:bb:e1:1a:06:11:5b:ea:e3:2a:f5:
50:7d:66:16:aa:45:0f:16:36:36:9d:80:59:f5:33:
43:6b:7a:b3:40:e7:7d:55:80:22:a5:0f:cb:c6:be:
e2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:97:AF:53:67:FE:2D:1F:34:D1:BA:97:8C:BE:33:1F:8F:7E:72
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/2bWXr1Nn_i0fNNG6l4y-Mx-PfnI.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.200.0/21
Signature Algorithm: sha256WithRSAEncryption
99:5b:d9:35:85:56:dc:92:cc:78:3c:db:02:ad:ef:7e:e3:23:
60:09:de:f4:7b:18:26:30:89:ae:87:5c:b2:c3:bd:45:3d:f4:
42:ba:d5:e6:2c:7d:31:0b:10:b1:a0:6a:ee:96:06:12:68:40:
7d:80:06:15:8c:92:b7:88:42:5a:41:0b:d6:b0:84:fb:0b:37:
7c:de:7a:7d:69:be:ae:4d:19:e9:cc:47:2e:25:0a:38:31:96:
30:79:62:bd:6d:22:27:65:b9:8e:a7:fa:ed:0e:20:04:e2:28:
cf:9d:e3:6f:40:d9:cb:81:7f:73:14:ee:f9:9c:32:75:eb:3e:
f7:bd:0f:e5:5f:dd:e7:25:7a:0a:41:b0:f1:49:c3:5d:3b:b1:
2b:32:df:47:61:bd:27:2e:e9:3d:ec:ac:7a:74:bd:c9:f1:53:
47:e3:a8:46:d1:9b:ad:57:48:52:2b:4b:ab:f5:89:72:f6:33:
83:d1:18:1a:70:35:10:13:68:fb:2b:0f:8f:a6:2c:8a:82:d1:
b1:71:0c:04:fa:4e:aa:b6:43:5b:41:db:5b:a4:e8:38:16:a7:
6d:6d:d3:3a:47:ad:99:af:6a:10:c2:d5:3a:eb:22:2b:c0:2b:
92:ff:bb:11:9c:76:88:05:df:3a:04:24:e4:26:bc:6a:7d:de:
26:51:b4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:17 2023 by rpki-client on console-ams.rpki-client.org