Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/HoW45nf4pSMsCna8NGUejeYkJWM.roa
File: HoW45nf4pSMsCna8NGUejeYkJWM.roa (raw, json)
Hash identifier: RXQG81+IEL9LieCYl7TD+QgjFBd+o6yXY3yJq6129R0=
Subject key identifier: 1E:85:B8:E6:77:F8:A5:23:2C:0A:76:BC:34:65:1E:8D:E6:24:25:63
Certificate issuer: /CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
Certificate serial: 15
Authority key identifier: 7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/HoW45nf4pSMsCna8NGUejeYkJWM.roa
Signing time: Tue 25 May 2021 02:47:00 +0000
ROA not before: Tue 25 May 2021 02:47:00 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 38631
IP address blocks: 147.92.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF54AA100E9F4B66535E920EB89E2E14BCACDB0
Validity
Not Before: May 25 02:47:00 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=1E85B8E677F8A5232C0A76BC34651E8DE6242563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:87:f1:c4:76:6f:7d:d6:a2:e1:2b:78:78:
a8:43:af:c8:15:ed:cb:e4:d4:0f:32:18:7c:21:4e:
0b:ee:c6:94:27:b7:fe:ab:3a:34:d1:4b:a8:4c:43:
95:52:bd:0a:62:7f:ee:71:2d:a7:40:1e:c7:56:c6:
97:c2:3d:54:77:0a:24:43:c6:68:f1:23:e9:7a:a4:
a4:a2:c7:30:a3:d0:7e:e6:d7:17:21:d8:b0:2f:e0:
d7:d6:9e:57:3f:15:37:bb:77:50:4e:ed:fc:a2:ff:
e7:e5:b5:cf:76:b9:e1:70:85:2e:00:dd:a2:50:a6:
7f:13:ff:87:e3:bc:9d:fd:39:2b:18:a7:69:c1:62:
50:7f:0c:3e:f1:7d:3d:02:42:0a:0a:3e:45:19:31:
b3:45:f1:e1:b4:07:f3:d6:1d:6f:6d:91:27:e5:ec:
48:2d:98:de:a4:2d:58:83:ed:31:fc:ac:78:3d:08:
be:8e:96:3d:1e:48:75:85:18:e4:86:1c:c9:81:cb:
cb:af:63:0a:33:7d:ab:eb:ac:c4:17:76:e0:e7:52:
a1:b5:68:6d:34:c1:a7:30:8b:67:5b:65:1a:1b:bd:
2d:05:6b:28:6c:d6:04:4e:4b:64:1a:7e:92:c1:ec:
53:cd:f9:c3:6e:9e:8d:fa:6c:51:9f:47:80:2b:79:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:B8:E6:77:F8:A5:23:2C:0A:76:BC:34:65:1E:8D:E6:24:25:63
X509v3 Authority Key Identifier:
keyid:7D:F5:4A:A1:00:E9:F4:B6:65:35:E9:20:EB:89:E2:E1:4B:CA:CD:B0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/ffVKoQDp9LZlNekg64ni4UvKzbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ffVKoQDp9LZlNekg64ni4UvKzbA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/HoW45nf4pSMsCna8NGUejeYkJWM.roa
sbgp-ipAddrBlock: critical
IPv4:
147.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5d:ae:92:9e:7d:5d:a2:9f:1c:2e:0b:f8:34:94:ed:c7:a8:09:
58:b6:41:3f:9b:14:aa:32:dd:15:2d:53:db:7a:d5:fe:96:4e:
1e:a4:4f:cb:7a:33:c3:50:44:0b:20:46:0b:31:73:98:5a:73:
88:9f:fc:89:b0:fa:2a:67:44:7b:85:db:3e:0b:11:cd:80:62:
99:dc:fd:a7:88:3d:55:bb:e1:61:60:aa:02:fc:8e:89:db:de:
00:28:70:25:02:c0:ba:1e:9d:b9:cc:a6:ca:49:38:b8:3e:c9:
53:97:e8:b0:52:25:b1:23:f9:6d:99:3e:d6:87:0d:fc:10:e9:
29:9e:79:0c:2d:26:0f:d7:f5:58:db:17:5b:e6:da:b0:6a:f3:
ef:e4:ab:43:55:6b:e3:f2:2e:49:c4:20:39:e3:9a:7c:b2:9c:
1c:01:62:89:37:12:d5:2a:ee:61:45:96:90:a8:78:d4:43:4f:
9e:d0:87:66:36:55:87:22:62:6e:6b:90:a4:4b:4f:cf:e3:ef:
ca:8d:54:50:f7:15:e7:25:f4:bd:61:a4:72:0e:e8:db:d8:77:
cf:97:83:4f:c9:5e:29:3b:c9:4c:ba:d8:b4:e5:d4:42:c1:66:
97:5d:bd:7d:54:57:e0:72:72:32:c2:87:ed:f5:28:a6:1b:ad:
1e:32:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org