Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/NV_yZYe-vLsNoZk2804NgVKMlu4.roa
File: NV_yZYe-vLsNoZk2804NgVKMlu4.roa (raw, json)
Hash identifier: tC6Ko9xoN2AUZBqxgFDqrzkkYWc4j7vG8EsFmgfZx24=
Subject key identifier: 35:5F:F2:65:87:BE:BC:BB:0D:A1:99:36:F3:4E:0D:81:52:8C:96:EE
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: 33
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/NV_yZYe-vLsNoZk2804NgVKMlu4.roa
Signing time: Wed 18 Aug 2021 07:54:26 +0000
ROA not before: Wed 18 Aug 2021 07:54:26 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2518
IP address blocks: 221.170.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Aug 18 07:54:26 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=355FF26587BEBCBB0DA19936F34E0D81528C96EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:ff:61:d8:82:a2:50:81:5b:3c:38:20:8b:
78:70:1c:bb:43:00:71:9c:83:65:7e:ae:76:cc:f2:
7f:e2:8b:e2:0e:80:3e:79:4a:83:00:f2:49:95:5a:
df:f5:b4:51:4d:5e:18:d5:bf:c9:db:b3:89:9d:df:
41:f2:04:10:6a:b5:2a:bc:f1:a4:69:a9:e5:d5:d9:
e6:74:10:a9:48:da:ea:d0:b3:32:4a:f1:14:eb:bf:
61:ef:1d:24:34:b6:84:13:bd:27:36:29:b3:e3:5f:
2b:b8:49:0d:da:6c:44:15:2a:e4:d1:f6:ca:9b:bc:
1c:0a:c8:39:1f:e2:5f:5a:89:9c:46:e8:d5:df:f0:
52:a1:1d:27:ce:71:f7:a2:5c:fc:34:d7:b6:ed:04:
5f:33:81:6d:58:a8:b6:ee:6c:78:db:d9:43:13:6c:
0c:d6:97:68:e0:50:fd:d9:8b:dd:36:4d:2d:31:0e:
d9:08:27:4d:28:65:a6:db:47:31:5c:e6:a9:5e:2e:
e9:5f:05:10:cd:1c:e7:80:96:51:43:14:56:eb:ec:
87:9c:51:f1:46:2a:ad:13:fe:7d:d9:99:7c:7b:57:
7c:88:87:df:0b:e4:32:47:a2:e1:bf:37:85:5a:8a:
6b:29:08:ba:49:13:fd:ca:8d:fd:95:30:73:8f:ac:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:F2:65:87:BE:BC:BB:0D:A1:99:36:F3:4E:0D:81:52:8C:96:EE
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/NV_yZYe-vLsNoZk2804NgVKMlu4.roa
sbgp-ipAddrBlock: critical
IPv4:
221.170.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c5:5e:97:1e:55:7e:8a:95:24:96:c4:81:6e:58:cd:8e:cf:4f:
17:46:b0:a9:e8:03:db:7e:af:61:ff:ae:2e:6c:5a:20:15:c3:
02:58:40:b9:15:c9:1f:ea:35:3f:15:a1:c3:1a:f4:be:04:ca:
22:63:b9:fa:ff:bf:bb:26:60:ba:ac:ea:1b:08:37:da:9f:d9:
40:4f:22:d6:ba:72:72:96:eb:cc:db:05:0e:50:20:16:71:21:
7b:a5:b6:b1:ba:84:f0:08:d6:f5:bf:12:81:da:bf:8e:fd:63:
5f:7c:b4:e7:f4:11:ad:a4:f6:48:9c:95:e5:cd:c0:77:d1:95:
9b:21:8b:37:c1:2f:09:25:7f:b7:d0:b2:65:0e:94:c4:39:16:
0b:82:e0:ff:53:b6:a2:f3:7d:48:fb:e6:63:b3:f9:54:d6:b9:
22:2e:43:28:62:1e:fd:d0:41:b5:14:a6:5b:9a:5f:b6:55:38:
08:85:dd:54:6f:39:8e:a6:3e:79:7d:8c:3c:27:f0:f7:fe:f3:
28:e6:81:be:50:72:af:d2:8c:15:c0:02:47:c1:a9:c6:b0:b6:
38:f5:80:58:b1:e4:ca:dd:b0:8b:0e:a4:1b:7a:6f:9b:66:17:
5e:3a:90:76:f0:c9:ac:36:94:af:ba:b2:4a:73:9b:35:56:cd:
f7:f7:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org