Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/TLUsMv2fosfy4kvQXeB9Y53goHg.roa
File: TLUsMv2fosfy4kvQXeB9Y53goHg.roa (raw, json)
Hash identifier: tJTG2vAs+kIXw4pL/VnysYx92qSEROmMnrDNoB3/F3w=
Subject key identifier: 4C:B5:2C:32:FD:9F:A2:C7:F2:E2:4B:D0:5D:E0:7D:63:9D:E0:A0:78
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 63
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/TLUsMv2fosfy4kvQXeB9Y53goHg.roa
Signing time: Wed 01 Dec 2021 01:28:54 +0000
ROA not before: Wed 01 Dec 2021 01:28:54 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 8220
IP address blocks: 61.120.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 01:28:54 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=4CB52C32FD9FA2C7F2E24BD05DE07D639DE0A078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:84:24:52:cb:8e:af:31:44:f1:44:69:83:
0c:45:63:e5:4a:7f:8a:21:d3:fd:d8:23:2c:d1:1f:
41:11:af:b1:da:b7:b2:63:c5:d7:f8:67:52:2b:42:
06:d9:96:c0:74:79:d0:7b:93:bd:2a:1a:ea:7c:4f:
0e:9b:9a:fd:0f:75:ca:0c:1c:fb:d9:b8:97:0f:15:
c2:6f:65:16:1c:0a:52:72:59:98:3d:ee:09:3e:d7:
91:e2:37:a8:8b:a1:35:89:83:dd:70:40:51:61:6f:
0f:bd:17:ff:d3:9a:47:fc:17:aa:bb:64:1b:fc:dc:
e1:c7:ec:92:9f:f1:f3:f7:93:76:6c:42:af:f8:7b:
56:d4:02:2a:f5:cc:29:94:13:74:9e:e4:34:2f:6d:
67:ce:cd:60:cd:31:fd:35:dc:63:ea:e8:77:40:8e:
33:e2:01:e2:b7:30:64:b3:74:63:58:a8:34:03:e0:
a7:c0:67:fd:92:a2:be:eb:a0:80:6b:43:96:93:b7:
97:2b:4f:98:c6:9c:42:48:54:5d:73:a8:39:31:f2:
55:99:6a:7e:a9:bf:cc:d9:f8:82:42:64:00:fb:2d:
87:cc:4c:cc:0b:10:89:76:3b:4f:ec:28:26:66:72:
57:b1:ad:d5:ed:da:23:1e:94:d8:75:56:6c:6d:4c:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:2C:32:FD:9F:A2:C7:F2:E2:4B:D0:5D:E0:7D:63:9D:E0:A0:78
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/TLUsMv2fosfy4kvQXeB9Y53goHg.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.192.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:ca:bd:14:c4:d0:0d:39:49:80:be:33:f5:33:4a:7e:2c:d9:
bb:dc:96:54:0c:68:45:f8:b3:63:45:a7:53:66:df:e4:e7:a4:
4a:e3:93:7e:4c:b5:f9:b3:30:7e:9a:ba:9a:2e:3f:89:ef:3b:
8f:56:30:98:b9:51:05:94:9c:02:2d:4a:dd:9b:8b:79:23:7b:
8c:42:e6:6a:91:4c:9a:73:b8:fd:75:92:17:8d:fb:c1:9a:85:
93:db:96:37:8b:85:a1:a6:2c:b2:ff:a9:14:c3:38:a3:a6:ea:
ca:47:b9:90:18:46:a3:d7:70:b6:f4:12:04:02:57:66:5b:b0:
e0:d2:79:04:86:7c:a9:41:f5:76:31:05:32:0e:e3:2b:49:d3:
b1:06:02:5e:a0:7e:c2:b4:f3:ef:5d:31:6c:69:a9:35:6f:88:
e4:f1:a4:ba:fe:6f:36:54:6e:f2:55:c8:75:b9:a2:33:23:43:
40:ea:77:cf:b6:a8:e6:16:70:92:50:0c:a8:a6:90:0e:cb:b3:
81:95:be:0d:f1:6a:b3:cb:c8:bb:0b:00:85:bc:04:58:95:13:
93:c0:f4:82:b8:0a:97:25:d3:5e:b1:86:26:91:51:8d:4b:fe:
a8:85:64:69:d7:5f:f9:64:8b:df:8a:15:99:8d:14:a6:13:2b:
0a:45:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org