Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/QzD-HWxOp3BXM5DfY0HLkaDDT2A.roa
File: QzD-HWxOp3BXM5DfY0HLkaDDT2A.roa (raw, json)
Hash identifier: LBAitIbKxrlVREFTHo59fZJOzq89YIWfNpEE05stdmg=
Subject key identifier: 43:30:FE:1D:6C:4E:A7:70:57:33:90:DF:63:41:CB:91:A0:C3:4F:60
Certificate issuer: /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial: 13
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/QzD-HWxOp3BXM5DfY0HLkaDDT2A.roa
Signing time: Thu 21 Oct 2021 08:44:29 +0000
ROA not before: Thu 21 Oct 2021 08:44:29 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 38651
IP address blocks: 114.31.104.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Validity
Not Before: Oct 21 08:44:29 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=4330FE1D6C4EA770573390DF6341CB91A0C34F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:76:23:4a:6b:48:fa:1c:dc:1f:d1:11:53:
66:ff:91:c1:76:79:9b:b5:ac:44:e8:f2:97:a0:7c:
1a:da:db:19:8b:17:78:06:8d:88:98:8b:ea:90:1a:
39:a8:93:c3:9a:84:ab:62:0d:90:27:eb:5f:4c:f6:
9b:9e:31:f3:ac:ab:ee:1c:12:1f:f8:18:21:91:55:
8b:ca:a7:bd:bb:96:5d:16:0a:22:57:6b:39:e5:cd:
63:40:1b:f6:b3:48:f6:55:c1:10:36:ae:a0:55:7a:
a2:c5:ad:ee:ba:8c:4f:18:94:da:ff:d5:2a:99:a3:
98:14:c2:24:98:16:22:5b:e6:2f:cf:69:de:c2:ca:
ef:c5:08:7f:77:5d:7f:1b:71:3b:91:88:f6:d2:1e:
21:eb:ce:f9:97:1f:f9:49:fa:67:1a:2b:cb:63:1c:
5e:38:c8:f0:28:0b:9a:39:cb:d8:f3:71:3b:ff:1d:
c8:49:f8:e1:58:ea:4a:ac:8c:1a:bf:43:96:ff:11:
e7:f1:a8:3b:24:4d:6a:2a:09:63:c5:d9:15:0d:95:
d1:f2:d1:31:43:89:16:18:8c:52:4d:d1:3b:2f:e5:
bf:c9:e2:2e:a0:42:e6:ca:be:61:12:de:17:8d:f0:
3d:4c:02:59:75:c7:da:59:3c:8d:6d:b0:0a:1a:51:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:30:FE:1D:6C:4E:A7:70:57:33:90:DF:63:41:CB:91:A0:C3:4F:60
X509v3 Authority Key Identifier:
keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/QzD-HWxOp3BXM5DfY0HLkaDDT2A.roa
sbgp-ipAddrBlock: critical
IPv4:
114.31.104.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:80:3b:22:5d:be:f9:76:3a:4d:3f:b1:fe:4c:ee:ea:61:cc:
94:da:18:71:8c:56:f2:b1:18:05:c3:ac:46:8d:36:6f:39:2f:
cf:b7:4a:96:57:bd:b7:4e:16:e5:47:70:7a:fe:ec:3d:f7:73:
c7:16:92:c9:d2:5d:18:98:7c:7b:d0:34:25:04:df:95:38:a4:
06:3f:9c:c3:0d:58:5d:8d:a6:f4:2a:f0:61:50:81:d2:cc:0c:
f7:8d:d0:9d:b8:5f:46:c6:4e:3e:19:ce:46:e4:3d:1f:17:62:
70:83:2b:b4:c2:f0:04:e8:ca:00:e7:4b:c9:e2:ad:8b:39:1c:
ad:cb:d5:fe:33:f4:40:82:0b:8d:4d:47:08:34:6c:04:72:d2:
89:d6:44:fa:22:65:69:21:30:3a:51:6f:d7:8d:d7:b1:4f:e9:
49:37:a3:57:95:d5:72:fd:f2:3d:f3:94:83:d4:f6:fc:ce:19:
89:f2:b0:4d:9a:e4:d6:84:24:cc:25:d9:18:dd:da:72:ef:73:
ca:3e:79:bb:6f:3c:93:2e:73:48:c1:c5:0a:16:8f:e3:f7:3f:
88:22:53:01:f9:52:58:cf:29:55:70:62:08:eb:04:81:05:4c:
a0:04:a3:57:2c:69:cc:b2:6b:b1:23:ab:c2:fb:80:34:67:64:
63:51:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org