Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/ItOFhZb07JTlL7e0ps0eX2gV_9Q.roa
File: ItOFhZb07JTlL7e0ps0eX2gV_9Q.roa (raw, json)
Hash identifier: 5JDTNR1Zm79tiLb87Yjo7c9kKVHvibFU9OIBvO6Y3GE=
Subject key identifier: 22:D3:85:85:96:F4:EC:94:E5:2F:B7:B4:A6:CD:1E:5F:68:15:FF:D4
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: BF
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ItOFhZb07JTlL7e0ps0eX2gV_9Q.roa
Signing time: Sun 01 Jan 2023 01:29:12 +0000
ROA not before: Sun 01 Jan 2023 01:29:12 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 8220
IP address blocks: 117.55.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:12 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=22D3858596F4EC94E52FB7B4A6CD1E5F6815FFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cd:78:69:27:3e:54:ad:84:c7:da:35:f9:a8:
78:e3:22:d5:09:56:4c:30:ba:62:1c:77:55:de:ac:
18:3a:85:6d:04:44:c2:b9:e6:b2:d6:32:28:88:16:
e4:01:cf:a9:1c:00:ac:47:5d:eb:f6:66:50:16:d2:
5c:88:42:87:72:a7:7c:a5:ee:12:70:e1:95:a8:88:
b9:12:30:e9:21:14:ab:ad:50:59:66:eb:78:9d:4e:
08:6e:56:5d:7d:ac:eb:36:a8:5f:0b:9c:38:58:ac:
e6:02:31:33:93:bc:94:e0:10:00:32:84:a1:d1:cc:
8d:8c:39:86:cc:11:80:8b:fb:ab:02:bd:dd:c7:48:
e4:a5:f5:ee:8e:3d:82:80:bd:35:c5:b2:95:98:27:
0e:d0:d5:1e:16:d0:37:c3:96:ad:a1:b2:42:02:ae:
a0:a9:d8:2d:75:b7:d0:de:88:fe:f2:ca:8a:54:a5:
b9:6a:5b:d1:c5:41:d4:08:a3:53:b2:43:0c:41:04:
b8:96:8e:e1:ab:c3:1e:4b:87:1e:45:7c:73:31:0a:
f1:39:d2:19:ee:a7:6f:b9:58:1d:d8:f2:a4:e7:81:
48:c5:ac:10:40:2c:06:aa:81:10:3c:49:53:f1:f3:
ab:31:5d:ab:70:d3:ad:7c:9a:43:52:b2:49:89:80:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:85:85:96:F4:EC:94:E5:2F:B7:B4:A6:CD:1E:5F:68:15:FF:D4
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ItOFhZb07JTlL7e0ps0eX2gV_9Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.55.208.0/20
Signature Algorithm: sha256WithRSAEncryption
00:1a:d1:cf:de:52:78:06:73:94:c4:cf:e1:36:6b:5f:90:c9:
e9:c4:4b:2e:c9:8e:23:1d:62:2e:44:bf:69:c8:0a:47:7b:ca:
71:3c:4f:e2:e8:28:94:b5:a4:4f:f9:b8:86:28:4d:a0:35:71:
da:8f:08:1b:fc:aa:77:bc:b7:7e:da:89:e4:57:b9:f1:4f:83:
eb:a8:d9:4f:be:fc:42:5b:54:59:24:4c:59:6a:37:f5:61:5e:
fb:05:62:88:74:49:a9:cd:40:30:d7:9c:d5:16:48:f9:f7:49:
df:3c:65:50:fc:7d:93:32:2f:b4:2f:09:2a:0e:3a:76:1f:aa:
a6:43:36:e4:84:a8:2c:64:de:7e:65:f3:1f:94:61:85:b6:f2:
e3:3b:57:ac:51:6c:69:9a:2c:86:b0:25:ca:51:de:84:59:65:
72:cf:4a:1d:b0:1d:d1:f6:9b:be:01:6a:58:3a:35:8b:ba:06:
d0:72:1f:6e:75:af:eb:5f:6a:02:00:fd:e5:d1:c2:ad:15:8e:
0a:eb:5e:36:46:88:a7:dd:d1:3c:78:86:6f:56:b2:6e:6d:64:
41:68:f1:ce:32:a9:10:f2:1d:b3:8b:c6:5c:18:6e:99:60:9f:
8c:f4:b3:16:11:5e:92:d9:fa:60:a9:35:16:37:5d:65:f5:e9:
ea:af:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org