Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/H-JMDWs-GZQI_PM9aM6rZcViw7Y.roa
File: H-JMDWs-GZQI_PM9aM6rZcViw7Y.roa (raw, json)
Hash identifier: gvhiHQcdHUglvUliKMLGUThlVUPM+8kJ2cyD5BfjUmg=
Subject key identifier: 1F:E2:4C:0D:6B:3E:19:94:08:FC:F3:3D:68:CE:AB:65:C5:62:C3:B6
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 89
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/H-JMDWs-GZQI_PM9aM6rZcViw7Y.roa
Signing time: Tue 01 Feb 2022 01:31:03 +0000
ROA not before: Tue 01 Feb 2022 01:31:02 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 8220
IP address blocks: 202.7.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:31:02 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=1FE24C0D6B3E199408FCF33D68CEAB65C562C3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:46:62:c7:d4:2d:e5:d2:06:1e:49:11:d1:
a8:85:88:18:36:1c:44:70:9d:80:13:80:06:12:87:
08:98:76:4a:89:26:ad:4a:07:5b:3d:4b:2c:fc:ba:
e9:77:99:fc:53:eb:b0:14:b8:2b:ca:1e:c6:b5:47:
26:70:18:a6:30:20:34:33:77:df:21:f6:dd:b7:26:
13:75:cc:76:4c:ae:12:e4:5c:28:c3:92:ce:e9:6b:
c9:b4:62:62:7b:4d:4f:27:ab:ee:31:a8:5c:8d:09:
1c:e9:9e:31:09:dc:1e:64:ce:30:4c:75:1b:cb:39:
af:52:22:28:e7:36:45:0f:82:26:84:98:0d:24:a7:
35:fc:1d:a5:79:c9:3a:ef:0d:31:74:91:15:e1:45:
e2:6c:eb:ec:72:8b:3c:b8:24:fe:ab:93:5e:a4:0d:
b4:1e:23:59:93:f5:1b:8b:bd:92:14:81:fc:98:99:
82:2f:c1:37:90:a0:3b:72:35:d4:5e:b5:1b:8f:8a:
10:32:fa:8f:f8:ec:a1:89:1d:44:4d:8b:0b:cc:2c:
86:af:be:57:1b:b5:95:cd:21:19:c3:84:1f:cc:c3:
ec:cf:1d:e8:e0:ac:00:d2:0a:5b:fc:58:61:22:4c:
11:63:05:77:f0:f6:b0:6c:8e:7e:0e:00:1c:7c:66:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E2:4C:0D:6B:3E:19:94:08:FC:F3:3D:68:CE:AB:65:C5:62:C3:B6
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/H-JMDWs-GZQI_PM9aM6rZcViw7Y.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:b9:91:bc:bd:03:14:46:f5:e3:ce:b0:86:11:0a:a2:00:da:
88:b3:ed:15:ac:bb:6d:87:6b:0b:cf:e9:35:e9:f1:5e:dc:48:
d4:61:c0:db:87:45:87:6a:59:6b:0a:44:68:ca:57:6e:c2:87:
6e:41:e3:22:45:39:d9:d5:d4:9b:97:35:e5:1d:b2:d5:f0:05:
b2:27:35:58:9f:63:95:17:7d:5f:31:df:9c:51:4a:4d:d0:3e:
a0:33:5e:c3:cc:72:d5:24:16:22:d6:02:6f:52:86:c0:81:29:
63:62:06:2c:53:49:5a:6a:7b:ab:3f:c4:97:88:21:0d:b3:34:
93:c8:42:36:f0:61:3b:7b:09:e3:8c:87:13:a4:94:ee:ae:82:
58:32:18:11:63:44:45:be:b9:b0:fc:86:13:b5:51:9d:20:5e:
c6:f7:34:05:00:29:ac:c6:09:ed:d5:08:77:0e:7b:b9:45:ff:
f9:eb:b9:ee:b0:43:64:18:08:ce:2d:4b:cc:aa:0d:b9:a9:da:
2b:58:cd:97:4c:cb:7e:7b:dd:24:b7:69:37:e6:4d:83:c9:2d:
8d:a2:4a:48:7c:4e:74:87:12:97:4b:3d:3d:db:ec:24:80:ce:
25:03:a0:b6:02:d6:18:a1:d0:48:cb:c5:63:6e:9f:ed:be:23:
fb:bd:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org