Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/QF0koWA3_ZBRnph3UogyJifP5NQ.roa
File: QF0koWA3_ZBRnph3UogyJifP5NQ.roa (raw, json)
Hash identifier: 0dFdN7uP9ABldSK5MeFLBhtZnLiT5bTq0hAazMVtXUo=
Subject key identifier: 40:5D:24:A1:60:37:FD:90:51:9E:98:77:52:88:32:26:27:CF:E4:D4
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 6F
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QF0koWA3_ZBRnph3UogyJifP5NQ.roa
Signing time: Wed 01 Dec 2021 05:39:21 +0000
ROA not before: Wed 01 Dec 2021 05:39:21 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 202.95.220.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:39:21 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=405D24A16037FD90519E98775288322627CFE4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:57:3c:87:60:a9:f4:9e:77:60:ad:b2:9b:
2b:a4:f4:fa:fe:46:b2:d3:a0:5f:6c:63:5c:3b:5f:
49:9f:19:4a:f7:cc:bc:ce:3a:b8:de:a4:86:65:e0:
21:3c:3f:28:69:5d:4b:35:83:c4:1d:c1:cc:7a:18:
d8:6f:30:fb:e5:c0:e7:c3:9d:8b:7c:47:a3:59:cd:
49:e1:81:4e:8f:7d:d2:59:e9:d1:2d:bc:68:3c:5a:
ed:12:08:f8:54:92:e1:4b:c3:89:63:8b:be:7f:89:
1a:f4:94:b9:b9:d0:aa:90:45:45:78:98:a7:bc:12:
49:d7:ce:15:14:a2:12:37:b5:05:7d:f4:f0:ce:72:
63:b0:a6:1e:93:9d:65:c2:88:ea:c1:df:32:e7:c1:
f1:e9:69:46:b0:a0:f8:ca:99:03:f0:98:ad:8d:92:
41:44:c0:04:a3:b8:54:99:1d:a1:d6:4f:24:ea:91:
ac:76:8e:84:c3:bd:3a:b4:e8:c2:94:d2:a6:33:c1:
44:57:19:18:3a:1d:41:b4:4b:ec:d4:9f:f8:95:d7:
21:c8:81:2d:b7:1c:e3:b8:3a:d7:ea:26:bd:c2:43:
bb:f6:aa:e1:53:bd:ce:42:80:02:46:e0:b0:cd:14:
ee:f1:74:07:ad:dd:35:1c:a1:a9:d8:da:11:ee:c0:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:24:A1:60:37:FD:90:51:9E:98:77:52:88:32:26:27:CF:E4:D4
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QF0koWA3_ZBRnph3UogyJifP5NQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.95.220.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a6:02:49:18:f5:97:da:97:98:6b:01:6e:4d:70:e5:7a:b7:
b2:d6:4e:17:81:1e:4e:eb:6e:35:aa:be:2b:52:ea:16:db:1b:
de:5f:d2:28:d6:8f:2d:34:cc:44:a3:8a:16:8a:23:ee:ac:4b:
b0:a7:31:18:ef:e0:a1:62:05:46:df:77:00:92:5c:0b:f0:58:
04:86:a0:c2:1d:66:46:f2:15:d5:b8:e5:7b:c2:4f:eb:69:d4:
6c:4b:a4:16:20:ef:76:27:21:07:09:e4:8d:e6:3c:f3:fd:22:
84:6c:36:b5:71:24:41:fc:8e:14:1b:30:50:fe:0a:71:06:d1:
70:69:61:a1:0c:79:e9:3a:81:a4:86:a6:32:d8:a0:2a:51:62:
e3:e5:e0:70:b9:93:d0:62:a0:8c:41:68:1d:e7:cb:cf:35:52:
02:41:52:65:a0:d3:33:44:39:b7:0d:17:10:de:8a:32:3c:e1:
ed:56:3d:8b:34:3b:a9:b2:58:1e:d8:80:87:1f:04:41:1c:d6:
ba:80:cb:e1:1f:97:b0:6b:b9:50:7b:49:1c:e5:09:e6:de:5d:
0b:a1:b9:2b:84:f6:68:d6:2a:4c:5c:c7:e6:09:ae:54:1f:3d:
d1:27:8c:32:29:7f:8b:43:94:41:85:73:a0:18:96:2b:7c:74:
7e:a9:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org