Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/Sat5x7KR51IMeVwe0ZNGkG-f6Mw.roa
File: Sat5x7KR51IMeVwe0ZNGkG-f6Mw.roa (raw, json)
Hash identifier: xMAjk3BS2K07KKOcLNNXwNXGddE3YVStjwGWDmaZBwM=
Subject key identifier: 49:AB:79:C7:B2:91:E7:52:0C:79:5C:1E:D1:93:46:90:6F:9F:E8:CC
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 17
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Sat5x7KR51IMeVwe0ZNGkG-f6Mw.roa
Signing time: Fri 28 Apr 2023 00:41:25 +0000
ROA not before: Fri 28 Apr 2023 00:41:25 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 131954
IP address blocks: 121.58.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Apr 28 00:41:25 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=49AB79C7B291E7520C795C1ED19346906F9FE8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:7e:70:30:40:c7:25:33:6c:ab:7a:94:6e:
2a:3a:8f:19:a0:70:bd:70:3d:7c:da:35:f0:b0:03:
b3:16:19:ee:e4:eb:b3:12:65:2f:be:88:bd:fb:a1:
98:f5:d0:53:97:18:8c:02:de:c7:b1:a7:be:ca:a5:
78:fc:94:0f:e3:ce:3f:8b:a0:8f:58:f8:e9:d5:95:
7d:9b:37:c8:df:60:69:f5:61:ff:66:8d:05:11:7f:
b9:34:ad:85:67:07:b9:33:05:5e:5a:8f:af:69:3e:
cf:c4:f8:b4:08:0e:90:60:e6:4c:67:53:eb:66:a1:
8b:f6:f7:3f:ef:76:6f:5c:ca:33:85:6e:7b:87:d9:
2d:1b:c7:9b:c1:67:33:7b:97:f5:60:f7:01:53:d3:
d4:cf:ce:ba:a3:05:ae:9c:6b:6b:54:0d:4c:a0:83:
3a:46:87:2d:aa:69:66:b2:4b:57:0b:67:b0:dc:e9:
d5:5e:10:75:93:de:d9:f4:95:e7:60:70:ef:eb:dd:
af:6a:b6:eb:aa:3f:68:05:5e:47:fd:a3:94:06:10:
46:cf:5c:6f:57:f3:45:55:91:4a:cc:82:55:ed:04:
e9:81:ee:a0:41:96:36:7e:2b:b0:28:1d:9a:e0:f2:
e9:93:96:0a:4b:21:b4:90:22:2f:72:6e:80:46:51:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:79:C7:B2:91:E7:52:0C:79:5C:1E:D1:93:46:90:6F:9F:E8:CC
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Sat5x7KR51IMeVwe0ZNGkG-f6Mw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.58.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:6b:50:9a:94:9f:90:ed:cc:cc:db:36:ee:f9:91:05:64:9e:
1d:df:c3:17:a5:a2:3b:0b:fd:cb:a1:e7:c2:65:c2:a6:e2:42:
0a:a8:8c:78:01:e5:56:ca:2d:fd:d5:b6:79:e2:87:8e:84:f9:
eb:f7:2e:11:a1:c1:d1:cd:b0:e4:d6:6f:3c:4d:9b:d1:de:85:
f7:c6:f5:bb:8d:34:2f:26:e0:9e:2f:4c:3b:54:b5:c7:49:2e:
97:8d:1e:75:9c:7d:db:d1:89:1e:75:a0:8c:03:0d:81:ef:73:
a4:f3:21:cc:4b:3e:25:b0:74:22:fa:3d:0a:6c:80:bb:a1:29:
1c:e4:df:dc:83:0a:2d:61:87:6f:d2:d2:0d:ce:5c:5d:57:07:
0a:aa:67:d8:77:a7:08:58:83:c4:71:ca:da:f2:50:7f:4e:22:
a1:11:f5:e0:60:dc:dc:6e:db:cc:47:cc:c9:26:6b:4e:35:eb:
32:54:c9:8c:1c:9b:ae:65:b6:2b:5e:47:24:7d:63:da:68:6c:
6a:4c:82:5f:37:2f:f0:6d:5e:25:9e:bd:ab:50:f3:b2:f8:ff:
20:af:86:de:28:9f:0b:9c:63:24:dc:a0:38:ab:b2:1c:15:ca:
02:7c:ab:4b:f7:9d:e5:12:c3:e2:06:8d:1d:93:0c:3a:69:8f:
87:65:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org