Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/iYC52QugytL8Ksb_evD9DvadWR0.roa
File: iYC52QugytL8Ksb_evD9DvadWR0.roa (raw, json)
Hash identifier: XeVu+JPHktUIDaqKPKCoG+XRwAF8qpQ5A/FE9vNCTwo=
Subject key identifier: 89:80:B9:D9:0B:A0:CA:D2:FC:2A:C6:FF:7A:F0:FD:0E:F6:9D:59:1D
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 78
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/iYC52QugytL8Ksb_evD9DvadWR0.roa
Signing time: Wed 15 Dec 2021 00:41:41 +0000
ROA not before: Wed 15 Dec 2021 00:41:41 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 8220
IP address blocks: 110.50.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 15 00:41:41 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=8980B9D90BA0CAD2FC2AC6FF7AF0FD0EF69D591D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:a5:8d:5e:77:a6:d7:74:f5:cc:61:fb:ea:
a3:79:e5:39:c4:a6:18:4b:3c:00:73:3c:87:37:2f:
83:ef:ea:ef:70:0e:c6:57:75:e5:06:04:68:9d:e8:
2c:4f:15:3e:10:19:35:3b:1d:c6:67:da:6e:43:fd:
36:cc:44:82:c6:2a:d4:a9:7b:07:30:6c:2e:e8:4f:
ee:2b:69:f9:54:bf:af:ee:45:a5:89:54:96:a8:f2:
a9:6c:f9:6b:8a:44:b2:e3:26:7c:ea:93:1e:f7:eb:
31:8f:d6:55:2e:b1:d3:73:27:ce:ec:cc:50:87:18:
57:a5:c3:b9:d3:f4:98:46:99:aa:61:9e:35:a9:63:
9b:cc:27:1f:6a:0a:d5:3d:1d:cc:c1:2b:96:fc:5b:
cf:f6:d6:98:4c:7a:70:14:26:bd:ff:9e:d5:6d:7e:
0b:d5:0c:92:e0:18:c4:f2:29:39:c5:5f:ed:5e:6d:
ef:92:bb:05:b0:7d:dd:f6:21:74:bc:c6:e9:73:c3:
fa:b3:4e:fa:7d:b4:e1:5c:57:11:9c:bd:a2:26:66:
9d:f8:c6:a2:93:0f:76:de:75:16:ae:32:6c:3e:8f:
03:05:41:3d:94:1f:88:51:c0:9d:1f:f6:05:e4:ec:
96:ee:69:32:7e:97:1b:56:99:7c:80:ef:3c:28:a6:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:80:B9:D9:0B:A0:CA:D2:FC:2A:C6:FF:7A:F0:FD:0E:F6:9D:59:1D
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/iYC52QugytL8Ksb_evD9DvadWR0.roa
sbgp-ipAddrBlock: critical
IPv4:
110.50.78.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:fb:9d:12:28:16:7f:36:30:c3:d0:e7:07:12:de:ef:28:ac:
f9:5d:51:2f:69:ef:16:b8:ff:d2:95:1e:31:b3:f1:c9:05:31:
7d:3b:1d:9b:f8:11:ed:89:c7:cd:d7:a0:d7:be:21:71:67:fd:
5c:34:7c:0d:c9:64:b4:37:99:07:88:84:27:63:17:5f:fc:85:
71:50:d2:f3:fb:d3:5f:f7:d5:b0:84:d1:d1:5f:83:de:fb:20:
64:8a:33:63:94:8a:09:2e:29:56:8e:22:37:a1:19:31:60:fc:
d4:9a:a6:a3:a1:00:43:8f:e7:af:4f:76:4a:f5:50:b4:03:71:
74:8e:29:97:8a:4d:eb:43:0f:48:ab:0f:ef:e8:c8:d8:89:c9:
82:6e:74:14:28:da:fc:4a:3a:e1:12:e8:9f:e3:c4:8e:02:ba:
e8:12:03:50:ed:23:53:a8:98:9d:bd:c4:84:a7:53:05:f5:5b:
b6:86:3d:83:cf:75:f1:c6:67:f0:b9:01:42:3e:cd:d8:06:c7:
16:7e:f6:ae:91:1c:2c:e1:dd:7e:52:ff:f8:a0:3a:75:cf:ca:
6a:4f:0f:bc:b9:e6:5e:c6:71:34:87:66:39:a7:dd:b3:9c:ef:
d6:88:1b:dd:11:7b:f6:04:ba:60:83:c7:c2:54:ae:65:1d:67:
fb:c8:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org