Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Mu9Yv6hp4PyNr4hK5JTnCljXbZY.roa
File: Mu9Yv6hp4PyNr4hK5JTnCljXbZY.roa (raw, json)
Hash identifier: HWh1wPI0NKZ80Ltw6O4XsnXQJAUP79XHsut8epFMPzw=
Subject key identifier: 32:EF:58:BF:A8:69:E0:FC:8D:AF:88:4A:E4:94:E7:0A:58:D7:6D:96
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 35
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Mu9Yv6hp4PyNr4hK5JTnCljXbZY.roa
Signing time: Wed 18 Aug 2021 07:54:26 +0000
ROA not before: Wed 18 Aug 2021 07:54:26 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2518
IP address blocks: 111.168.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Aug 18 07:54:26 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=32EF58BFA869E0FC8DAF884AE494E70A58D76D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:1b:9b:8d:ff:b9:5b:fe:52:41:88:1b:e0:
bc:ac:77:39:a5:4c:0d:3b:57:64:0e:bb:9e:9f:7f:
0e:25:f1:92:c8:cf:34:b6:6b:94:c9:52:1d:16:f0:
e7:da:c7:aa:ee:e0:fe:d2:f9:31:e2:d6:76:4e:fa:
a4:45:ec:e7:ba:d4:2d:b4:f4:d4:1f:37:fd:9a:07:
3a:10:50:b5:f8:18:48:ad:c6:86:23:56:c3:07:2f:
32:9f:3e:b6:a7:19:9b:03:46:55:aa:d5:fe:cc:07:
c0:a2:c3:35:31:0c:d9:e4:19:86:43:c2:64:81:75:
84:0e:f1:f1:1a:e2:35:88:57:60:71:51:4b:98:ef:
b5:da:c6:57:ba:ea:47:3b:fd:5c:cb:97:8c:d6:29:
c0:65:0f:79:be:23:ee:25:97:78:25:30:57:fa:45:
5f:a9:8b:32:8f:15:d9:b4:d6:5a:7b:9b:a4:28:9e:
5a:5b:b2:71:5e:d3:57:e7:aa:6d:4f:c5:74:15:29:
0c:ee:aa:f6:78:75:6f:74:b1:82:76:d3:2f:37:30:
c4:81:46:66:51:33:0d:a6:d4:0b:10:74:62:33:cf:
58:1c:5c:25:93:fe:3b:39:0c:f4:4c:c8:06:7b:1f:
c8:f3:1a:b3:78:5a:68:32:46:dc:d1:24:ab:2e:f7:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:58:BF:A8:69:E0:FC:8D:AF:88:4A:E4:94:E7:0A:58:D7:6D:96
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Mu9Yv6hp4PyNr4hK5JTnCljXbZY.roa
sbgp-ipAddrBlock: critical
IPv4:
111.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
25:bd:4e:9a:9f:76:3d:2e:44:5a:7d:5d:12:ec:0b:70:98:a3:
2e:1e:09:06:48:f3:22:d9:0a:ef:15:dd:62:f5:58:fe:a3:aa:
ef:54:b3:c3:cd:2f:d8:56:f7:2f:3a:5b:1a:61:3d:98:25:54:
55:b5:fa:7a:6c:bd:e2:9f:9c:65:0e:69:cd:7e:6f:11:09:a2:
4e:11:24:a9:e3:99:2b:b5:c4:2f:f3:17:4f:8e:40:6b:f4:cf:
32:d5:e8:15:6a:ad:59:83:0f:24:98:27:13:47:89:bd:05:d1:
18:21:f8:8f:02:4d:67:23:15:31:2f:c1:82:48:79:54:0a:7d:
12:fa:a4:cb:18:ea:47:a9:20:db:63:26:35:27:f4:66:c2:1d:
8b:29:0d:9f:81:65:f1:7b:96:fa:57:15:c3:df:3a:52:d4:d4:
d3:a3:28:fe:20:3d:7e:01:57:16:5e:a9:b0:f6:de:67:32:73:
e8:3d:ec:05:00:0e:78:aa:73:5d:e9:0f:cc:39:50:9f:de:90:
07:8f:95:5d:21:99:e5:c0:7f:b9:1e:12:ca:b4:e3:19:0b:98:
b0:f9:b1:d9:13:73:4d:54:03:2a:2d:0d:32:30:69:33:55:5f:
86:cd:ab:50:95:66:36:84:af:f2:2f:7b:d2:39:5e:80:1b:2a:
78:89:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org