Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/QdLFvZiHGAZRlCoDKEmvA7fTrJs.roa
File: QdLFvZiHGAZRlCoDKEmvA7fTrJs.roa (raw, json)
Hash identifier: ArfXgwmo3QapeKdv2atDQOn6Rx47UI2EVh7cVDtCrAM=
Subject key identifier: 41:D2:C5:BD:98:87:18:06:51:94:2A:03:28:49:AF:03:B7:D3:AC:9B
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 0E
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/QdLFvZiHGAZRlCoDKEmvA7fTrJs.roa
Signing time: Wed 20 Apr 2022 08:47:25 +0000
ROA not before: Wed 20 Apr 2022 08:47:25 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 220.212.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 08:47:25 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=41D2C5BD9887180651942A032849AF03B7D3AC9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:f9:4d:aa:e5:e7:c0:dd:3a:16:23:ec:ba:
e0:6d:35:fb:3b:a9:a7:27:7c:17:39:61:86:58:06:
53:cd:d7:91:85:d5:79:c4:b8:ab:0d:55:35:ba:68:
3b:35:cc:ab:db:56:f5:ea:cf:36:39:8c:35:0b:33:
2b:14:82:2f:a7:98:fa:be:45:25:69:88:c0:4b:d5:
9a:af:aa:0a:d6:33:ee:98:ec:2d:bf:ff:61:60:1b:
6e:ba:f9:05:5a:8e:07:66:65:86:69:80:f8:4a:66:
c5:b5:e5:27:e5:89:b5:79:c6:00:48:48:70:6e:b8:
4b:98:61:db:fe:ab:ab:d4:a9:67:a7:2e:84:d0:38:
45:8a:a6:f5:a8:3f:f9:d3:24:bf:8e:ed:7d:11:68:
df:77:bb:fc:06:44:92:16:ba:5f:d3:35:e6:6e:32:
22:a7:7f:5b:7a:3d:4d:2d:90:33:b3:01:7c:ef:e0:
0a:06:4a:8c:e6:20:28:0f:91:c7:4d:d8:de:c6:f7:
a2:d1:a7:2d:ff:d7:3e:dd:fa:78:c3:32:f7:fd:d8:
3a:af:48:e3:41:ad:0a:65:56:83:d1:5c:aa:34:b6:
a6:3b:c3:18:65:03:47:b7:2d:90:9c:9b:b1:dc:b8:
58:2d:5d:7e:c3:3b:02:53:25:91:f8:81:fb:34:6f:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:C5:BD:98:87:18:06:51:94:2A:03:28:49:AF:03:B7:D3:AC:9B
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/QdLFvZiHGAZRlCoDKEmvA7fTrJs.roa
sbgp-ipAddrBlock: critical
IPv4:
220.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:a2:88:5f:fe:fc:17:a5:22:ef:3d:c5:4e:2f:c5:1c:3d:8c:
12:50:cd:a2:48:bd:f5:67:0e:81:f3:08:7a:e7:3a:8a:59:67:
0a:16:2c:48:30:36:33:a5:81:08:c2:dd:90:e5:4f:90:74:4a:
f0:e4:ae:79:2e:ac:e0:3c:62:c0:fb:c8:bd:07:d9:9e:0d:76:
c6:5b:e6:cf:94:ad:56:2b:f7:c5:81:3f:af:b9:47:78:61:25:
24:52:f8:13:9f:39:ae:ff:9e:cb:15:b0:c1:7d:64:14:9a:14:
c0:00:da:7c:a7:cd:45:09:e2:80:d4:b2:65:59:8f:70:7c:68:
a4:c0:4e:45:05:d5:c2:c7:7d:57:10:bd:db:b7:d1:f9:ed:7a:
b9:d3:13:79:0f:72:8c:1e:51:46:f0:20:11:3a:be:8a:d2:ca:
a5:24:57:72:ab:e9:97:80:80:b3:00:3d:82:22:23:ef:6b:ff:
68:c4:b6:b7:55:78:57:29:be:0d:d3:68:6a:78:9a:5f:8d:45:
a6:fa:d3:91:ac:1a:8b:2c:2b:d8:cf:ce:7e:63:26:bb:b4:e8:
44:88:1b:2b:e4:df:f3:b7:76:4e:ba:a1:7b:72:b0:25:a1:cc:
73:4e:59:83:ee:a5:ed:9e:16:35:5f:c9:0c:87:85:bd:05:92:
ed:dd:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org