Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/PYEy5LDxVyVXXpmlUM5kn1oFFDs.roa
File: PYEy5LDxVyVXXpmlUM5kn1oFFDs.roa (raw, json)
Hash identifier: ZWNRId9PYy8rEUac1qhw0wm5Kz/LPcJmohKngVwB5ts=
Subject key identifier: 3D:81:32:E4:B0:F1:57:25:57:5E:99:A5:50:CE:64:9F:5A:05:14:3B
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: C5
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/PYEy5LDxVyVXXpmlUM5kn1oFFDs.roa
Signing time: Sun 01 Jan 2023 01:29:14 +0000
ROA not before: Sun 01 Jan 2023 01:29:14 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 8220
IP address blocks: 203.167.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:14 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=3D8132E4B0F15725575E99A550CE649F5A05143B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:91:df:f7:93:0d:29:43:15:6a:91:ca:56:
0c:6e:a2:9b:b1:99:30:00:46:74:7e:4f:3d:ba:8f:
a6:d5:58:eb:c0:92:91:2a:ea:d6:b9:dc:e0:02:26:
f2:6a:2b:a8:40:e4:b6:fb:c7:83:af:61:99:6f:e9:
52:60:59:67:03:fe:4a:99:d3:eb:5f:0c:31:4e:6c:
cf:e5:01:b4:71:b0:41:fe:df:c1:e0:c0:bb:71:88:
ef:f1:0e:da:0f:ca:aa:6c:61:12:86:89:16:70:1f:
29:71:25:22:c2:ee:f6:23:db:ba:c3:24:8f:64:ee:
d7:64:6c:dc:13:7a:fa:a0:0d:41:0c:4d:6a:05:6c:
b9:13:d9:2b:7e:1b:f3:ff:49:d1:9e:5e:60:80:c3:
f9:e2:9b:71:1f:4f:27:72:7c:36:3a:81:ae:85:3b:
83:29:f7:b1:eb:0b:8b:7f:14:45:16:09:9e:c4:80:
b4:ea:69:97:a2:75:06:82:ca:44:97:56:1f:50:d6:
c3:58:5f:27:6b:d6:fa:65:71:b3:2a:71:c4:4b:f7:
4b:85:97:09:30:16:f4:64:0c:d7:3a:a3:92:e9:bc:
f4:4d:71:26:7a:b5:2c:62:72:8a:c2:57:a3:c8:16:
3d:9b:93:9d:fe:cc:d3:a3:f1:a9:79:06:e8:7d:bd:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:81:32:E4:B0:F1:57:25:57:5E:99:A5:50:CE:64:9F:5A:05:14:3B
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/PYEy5LDxVyVXXpmlUM5kn1oFFDs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.167.32.0/19
Signature Algorithm: sha256WithRSAEncryption
47:2f:e0:d9:91:5e:69:90:d4:b4:d9:b6:34:53:eb:69:44:c9:
de:c8:68:8b:7d:bb:91:12:25:d9:37:35:a6:66:74:20:93:b8:
1e:df:bc:2b:1b:1c:69:75:95:ec:d0:43:10:c6:1b:78:b8:3d:
72:d1:c4:1f:f0:b7:92:31:84:68:cc:ad:da:75:f2:87:70:5c:
27:65:ef:8d:ea:28:07:d3:4b:f7:21:15:20:f1:13:bf:bb:77:
6f:0a:78:a0:9d:72:0b:77:74:d1:b1:88:fe:07:72:35:e1:ef:
bf:a3:f8:94:3c:3d:15:50:cc:7e:85:a8:44:f7:2d:67:c8:fb:
f7:01:6f:ac:b4:85:e9:c9:8a:06:fc:ae:28:ad:2d:a8:aa:1d:
87:35:e8:b9:5e:da:f1:90:15:9a:be:86:80:62:22:88:cd:23:
0d:22:08:78:34:ed:34:1c:dc:1e:78:0c:e7:e5:e5:69:f3:29:
7d:e8:42:6c:82:24:55:34:cf:d8:c8:44:37:9a:29:c2:b8:fa:
d5:69:dd:3e:17:fe:d0:99:c9:03:4c:5d:dc:bf:52:7b:da:fb:
84:87:22:87:c6:b0:6e:be:a1:4a:7c:9a:d6:fe:c7:fc:3b:44:
bb:97:fb:e0:7a:f4:f5:06:15:87:6d:df:69:06:19:b2:9b:d7:
2c:79:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org