Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/OxjALcs3I7mD2cENpffc1OJJYeI.roa
File: OxjALcs3I7mD2cENpffc1OJJYeI.roa (raw, json)
Hash identifier: cmiNs4fFFnEVU/TcOOpMC2OXPgMAkT1AneLhoPBtw8c=
Subject key identifier: 3B:18:C0:2D:CB:37:23:B9:83:D9:C1:0D:A5:F7:DC:D4:E2:49:61:E2
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 1D
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/OxjALcs3I7mD2cENpffc1OJJYeI.roa
Signing time: Wed 20 Apr 2022 09:12:22 +0000
ROA not before: Wed 20 Apr 2022 09:12:22 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.254.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:12:22 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=3B18C02DCB3723B983D9C10DA5F7DCD4E24961E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:f9:df:d4:89:c6:e5:e6:84:5b:0d:e5:62:
41:6a:13:fb:c1:94:22:39:c3:e6:1e:2a:b7:20:4b:
cb:5b:cf:45:47:48:4b:45:30:68:30:66:d7:a9:fb:
d8:9e:12:e1:ce:ac:57:72:63:cd:a7:13:c7:cc:a2:
97:b6:5c:04:8c:ab:af:4a:58:b0:95:24:84:9b:30:
77:e4:14:7e:a5:dc:8b:24:05:1c:63:1a:36:79:cd:
27:c1:6e:af:74:a2:ca:ab:17:2c:54:a5:49:ad:d3:
dc:d4:9f:cb:ee:20:90:31:6c:cc:7f:4b:01:54:91:
46:16:e1:d2:c1:3e:59:57:a8:31:22:29:64:a4:a6:
30:11:c1:65:e7:2e:80:8c:d8:cb:99:40:6a:02:91:
23:23:7e:b3:ca:d1:41:72:bd:56:48:7d:57:c8:3e:
cf:55:4f:8f:c6:8d:ba:85:7c:c2:fd:64:0d:e2:ef:
20:64:cc:d7:be:44:af:d2:f6:bd:c9:d1:9c:74:43:
13:5c:35:ba:4a:d4:16:12:6e:05:75:d1:e1:de:dc:
ca:23:b0:61:f7:35:4b:e4:21:fe:bb:61:57:cc:f1:
b4:26:28:34:9e:e5:ad:8a:cc:31:d7:27:ee:88:d3:
1b:89:c3:10:9f:c9:9b:3e:ac:38:8a:89:be:20:a6:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:C0:2D:CB:37:23:B9:83:D9:C1:0D:A5:F7:DC:D4:E2:49:61:E2
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/OxjALcs3I7mD2cENpffc1OJJYeI.roa
sbgp-ipAddrBlock: critical
IPv4:
210.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:fb:72:6f:ef:9b:70:8f:54:bb:c7:b0:d6:13:d5:10:c7:7a:
1a:da:b3:92:2c:00:38:e9:2c:37:d6:67:91:61:00:cc:0d:21:
c0:c6:c0:66:7a:85:1d:0a:6f:17:7f:46:2a:0f:6b:7c:77:a1:
43:a8:b4:d6:5e:fd:76:4c:44:29:e3:6c:d1:6c:ce:12:71:61:
dd:af:57:6e:a2:a8:56:66:69:02:51:ce:7f:f0:da:44:95:8c:
fc:a1:38:f3:4f:2c:6b:99:ec:71:76:13:2e:be:48:37:2f:73:
d9:9b:ae:83:16:62:ea:6a:c5:ec:55:43:d5:dd:8d:78:34:36:
57:89:9f:04:3b:d5:91:b1:4d:fb:a1:3b:eb:1e:53:55:80:c8:
56:e9:4c:58:ba:86:1e:51:10:39:2c:96:ae:0a:43:a6:3c:15:
6c:a8:1f:d2:58:11:c9:80:7f:f2:6f:62:ff:47:6b:bc:80:80:
44:fb:96:fa:c2:98:0b:2b:0c:54:05:eb:00:75:76:1b:8c:47:
1d:91:86:d4:a0:b8:2c:50:95:28:e9:9b:31:1e:b5:4a:62:4e:
dd:5e:5b:03:8e:f7:2a:a6:76:df:55:2f:c0:b3:29:46:d3:67:
ed:7e:02:c8:4a:12:93:86:9c:d6:38:c1:34:5a:64:82:dc:ea:
31:7a:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org