Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/QiFkKdpyc_CSJjJ2-TFJ97MIejA.roa
File: QiFkKdpyc_CSJjJ2-TFJ97MIejA.roa (raw, json)
Hash identifier: E81cGjugd36J110nOvwtn8nxe8dcZuUD8BeHcr0dPGw=
Subject key identifier: 42:21:64:29:DA:72:73:F0:92:26:32:76:F9:31:49:F7:B3:08:7A:30
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: B5
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QiFkKdpyc_CSJjJ2-TFJ97MIejA.roa
Signing time: Sun 01 Jan 2023 01:29:09 +0000
ROA not before: Sun 01 Jan 2023 01:29:09 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 10021
IP address blocks: 27.110.22.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:09 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=42216429DA7273F092263276F93149F7B3087A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:37:b5:df:e5:e6:58:e8:dc:37:c2:5a:03:
f6:db:5b:aa:8e:61:84:72:01:18:16:21:cb:57:87:
c8:12:c8:6b:d0:7a:af:db:9b:77:3f:20:d7:85:7a:
2d:6b:4a:b1:f9:6c:4a:0e:23:de:8f:9e:7a:a9:35:
43:5c:42:5d:59:19:12:c2:17:4c:61:29:3b:a6:f6:
70:84:d5:a7:07:9f:84:a7:d7:a9:67:ba:d2:b7:52:
2d:69:87:b8:e3:87:20:65:16:ec:05:4d:aa:22:fc:
f8:c0:e2:4a:84:01:c0:26:3d:86:12:87:cc:d1:8a:
c4:cf:f3:c0:72:d7:3b:44:c3:13:db:88:a1:2c:69:
06:45:8d:45:60:4b:a6:fd:4f:97:28:b6:db:50:23:
0c:3d:3b:72:a2:64:b1:41:f0:46:6f:72:1a:5a:f8:
9e:13:cf:16:10:1b:7c:0f:15:bb:36:51:79:66:c6:
10:fd:2c:32:49:9d:d3:6b:f7:36:d9:cd:92:1b:59:
b7:39:86:97:b1:fd:65:1f:af:c5:e0:2c:77:39:7c:
02:75:15:90:4e:41:a9:bd:33:e9:05:e5:6c:27:80:
8c:4d:e3:20:12:a2:94:3d:de:7c:67:88:36:dc:29:
5c:2c:6a:fa:3f:bf:ff:45:3c:0e:5a:df:4e:81:ea:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:64:29:DA:72:73:F0:92:26:32:76:F9:31:49:F7:B3:08:7A:30
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QiFkKdpyc_CSJjJ2-TFJ97MIejA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.110.22.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8d:57:7e:fe:8e:31:76:62:27:63:05:3e:ad:ff:ce:aa:6f:
86:8c:d0:1b:ec:81:33:64:12:be:22:ea:6e:c8:cb:c1:71:3a:
10:02:73:b9:34:df:fa:75:e1:29:89:23:db:1d:68:88:c4:0b:
ae:bd:35:03:49:28:39:6d:c2:77:4e:38:e7:d5:0c:93:f5:0d:
97:34:de:35:c9:71:fb:99:c0:2f:a3:2e:3e:92:d9:ff:24:6d:
75:1b:8b:1e:12:6a:1e:a0:7d:fe:f3:7d:76:29:06:15:39:3d:
9e:5b:75:72:af:6f:63:77:de:c3:ff:61:d0:67:d1:cb:af:ca:
7e:d4:6b:69:fb:7a:69:4e:da:fb:f4:83:4c:b9:06:dc:99:0b:
06:a1:9f:9a:a0:85:3f:51:c1:4a:7e:3f:f7:a4:c5:cf:7f:a3:
b6:01:69:32:ef:b6:e4:12:24:00:3b:df:30:8a:2a:f1:79:40:
8a:75:e5:5e:b4:11:a7:48:92:65:7a:d1:e2:0b:01:81:63:4b:
32:c3:27:a4:59:70:df:4a:02:aa:b6:0f:25:9b:a2:b8:a6:03:
58:a3:65:75:8e:c8:9c:dd:6d:29:ac:43:f5:70:d3:89:69:33:
e0:bb:bc:41:37:67:52:d6:78:18:16:df:9a:69:c6:72:31:cf:
b9:7a:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org