Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/eOwd5-DNjgbgq4ca5aZeD7AfKis.roa
File: eOwd5-DNjgbgq4ca5aZeD7AfKis.roa (raw, json)
Hash identifier: ceQG9ifPXAEuojJ28DlXaD1PnNThARuy7b+B4yzL+y0=
Subject key identifier: 78:EC:1D:E7:E0:CD:8E:06:E0:AB:87:1A:E5:A6:5E:0F:B0:1F:2A:2B
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 40
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/eOwd5-DNjgbgq4ca5aZeD7AfKis.roa
Signing time: Tue 02 Mar 2021 08:16:34 +0000
ROA not before: Tue 02 Mar 2021 08:16:34 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 61.120.192.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:16:34 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=78EC1DE7E0CD8E06E0AB871AE5A65E0FB01F2A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:bb:7e:73:c5:1a:49:e6:ee:f4:b9:03:79:
60:52:64:cd:15:67:2b:5b:ed:0f:c7:37:5b:1e:dd:
86:41:8d:50:5e:c9:9a:8b:38:37:ea:9a:11:1b:b9:
b6:38:b8:a4:17:36:fd:4e:c8:19:3e:22:17:94:0c:
6b:fb:15:99:e2:0e:15:23:40:d0:02:06:b4:ec:ca:
ba:3d:d4:50:39:87:3c:cc:d7:db:29:c5:8a:a4:a5:
de:e9:59:c0:1a:ab:23:12:cb:93:97:4d:e8:1b:fa:
0d:03:d4:07:b2:e1:82:98:8e:39:ad:1b:64:1b:ec:
e4:f3:07:f6:15:dc:f6:b2:23:f8:66:88:a8:b8:96:
25:d4:3e:92:0f:35:1d:e8:f9:ee:96:50:9f:97:59:
79:72:d2:9b:44:bd:a7:95:c5:94:76:25:a6:11:a5:
e3:ff:41:48:5c:b1:85:0b:36:88:c9:9d:3e:76:dd:
90:51:59:63:c2:1a:cf:11:b0:1d:8b:15:bc:2a:27:
49:51:49:81:58:29:9b:18:6d:d7:56:5a:7f:aa:03:
5e:48:9a:75:83:df:85:ba:cc:92:f0:bb:e9:27:33:
1a:52:9b:c0:9e:02:9b:4c:3d:bc:53:54:a4:bf:83:
b6:b6:86:d1:c7:99:22:dd:6e:e2:8b:ee:fb:fd:a7:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EC:1D:E7:E0:CD:8E:06:E0:AB:87:1A:E5:A6:5E:0F:B0:1F:2A:2B
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/eOwd5-DNjgbgq4ca5aZeD7AfKis.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.192.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:f4:20:9d:d2:cd:68:fc:00:c9:cb:dc:a7:67:58:e3:88:43:
f4:8e:33:09:20:ac:ab:f8:df:13:96:49:4c:f4:ab:4d:ef:3d:
77:53:d2:07:80:69:cd:29:48:0d:e3:35:0c:15:f6:29:99:ed:
1c:9b:1f:be:ed:17:97:ec:fe:32:d1:03:b7:40:d6:30:ca:39:
ab:76:7a:eb:cc:a2:c8:9f:6c:6a:1d:58:87:a3:84:cd:1c:b6:
26:f7:df:f4:b6:6c:d4:99:ca:d8:51:82:0b:ff:14:5e:e8:b3:
8f:e1:a2:2a:d9:14:e6:26:04:3c:8c:79:9c:fd:44:6a:2a:ef:
87:4a:be:df:e3:6f:01:ec:e6:a7:6e:cd:bb:98:a6:58:f8:7f:
6d:cb:62:5b:09:2d:f5:cd:52:57:83:f7:3c:0c:f8:5a:61:c1:
70:de:1c:fa:0b:0f:47:8c:2e:3c:fe:3e:19:5f:26:da:58:24:
d9:03:ea:56:42:e7:01:26:7d:20:83:fd:0a:17:ff:59:8a:29:
06:0f:00:0d:a7:31:59:f5:ba:17:e3:39:59:58:0a:66:f8:90:
33:4a:ca:ca:2d:6e:3d:60:58:7e:08:d7:b1:e2:d2:0b:da:5f:
5f:f4:f6:4c:2b:23:1b:a2:24:b7:36:98:d0:59:e5:48:1b:db:
08:2b:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org