Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/4CuYc8uBtSr48EaCuk6XEpw1pW0.roa
File: 4CuYc8uBtSr48EaCuk6XEpw1pW0.roa (raw, json)
Hash identifier: bRYtDsN7DCPhZStiRYsGZHvWdFYnbU2uZOuX2VIypfU=
Subject key identifier: E0:2B:98:73:CB:81:B5:2A:F8:F0:46:82:BA:4E:97:12:9C:35:A5:6D
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 64
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4CuYc8uBtSr48EaCuk6XEpw1pW0.roa
Signing time: Wed 01 Dec 2021 01:28:55 +0000
ROA not before: Wed 01 Dec 2021 01:28:55 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 8220
IP address blocks: 110.50.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 01:28:55 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=E02B9873CB81B52AF8F04682BA4E97129C35A56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:50:ea:bd:57:52:f9:0f:25:fc:0b:83:47:
22:ef:a0:51:53:92:73:ce:5f:1c:0f:9b:a8:19:a6:
f8:4f:ff:63:69:e3:fb:c6:9e:57:e7:2e:7c:16:b8:
6f:b0:b2:3b:01:78:10:70:f6:8b:40:11:15:4b:d0:
34:9b:2b:0d:aa:38:47:07:a4:b1:e5:c8:e4:b9:76:
83:b8:37:24:1d:21:05:17:44:d5:1d:cd:dd:d7:f2:
89:29:42:80:22:94:05:b8:fd:bc:52:bb:f7:25:d3:
68:29:7f:c5:28:f6:a7:4a:0e:25:c1:5b:d8:93:6a:
92:b3:80:c7:a3:11:7f:5e:13:c7:74:95:2f:22:d3:
25:bb:64:5c:3c:50:45:d9:9b:77:45:e9:f5:cd:dc:
c5:63:bf:f4:fb:e9:a7:f5:2f:db:d8:39:ee:fa:8d:
f7:90:8e:04:c6:95:af:12:9a:d4:62:d6:33:6d:ae:
91:8a:dc:63:05:2c:4c:dc:5f:29:7c:7f:98:85:e4:
d7:15:70:62:0f:45:ef:05:84:e1:d1:bf:c7:90:11:
89:75:ae:1c:8b:4c:e0:9c:f5:60:29:0e:a5:41:f3:
f4:6a:e6:61:d3:03:fd:fd:bd:13:49:87:14:b1:ef:
ed:e0:b2:aa:8c:69:a7:d1:b5:e0:41:fa:2a:55:7d:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:98:73:CB:81:B5:2A:F8:F0:46:82:BA:4E:97:12:9C:35:A5:6D
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/4CuYc8uBtSr48EaCuk6XEpw1pW0.roa
sbgp-ipAddrBlock: critical
IPv4:
110.50.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:9b:95:e7:b7:b4:98:44:59:06:36:ce:28:c2:d1:97:42:c2:
54:dd:3f:16:46:eb:1e:a9:2e:08:84:ec:94:6e:e8:54:cc:5d:
96:9c:33:d5:4a:84:6b:c9:11:d5:42:68:86:1e:2d:05:24:f6:
57:41:b3:3f:7b:f7:1a:79:52:47:9b:e8:24:14:91:bf:27:ad:
5b:d1:f7:38:14:33:1e:60:ab:08:59:9c:f4:13:e3:52:83:69:
e0:70:11:d4:8a:2c:35:4e:86:59:ff:6a:bc:aa:d6:95:94:04:
ba:d1:37:b3:97:a6:93:47:92:9b:ad:ef:d0:2d:3e:ee:e4:50:
88:7d:72:e9:35:2a:40:15:53:d2:a4:bf:bd:72:a7:2a:e2:8d:
64:b6:38:fe:67:4a:68:eb:39:32:c8:c0:a0:62:52:ce:95:27:
8a:f7:d5:4f:bb:1e:10:b8:ec:eb:52:a2:3b:5a:dd:eb:57:0f:
de:e8:52:43:03:cb:25:63:7a:2f:00:7c:8a:37:88:a7:a2:d6:
c7:7b:13:9e:e8:6b:ae:fa:b8:b0:fc:c2:ff:8f:08:dc:7a:bc:
e5:dd:37:da:f2:4a:e8:75:7e:90:2b:65:fb:d7:15:ed:3b:cd:
20:75:0e:06:77:39:07:00:25:01:b4:84:06:5e:c5:ee:7f:e1:
91:64:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org