Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/kC3TQM5JIno7mOPWqMzr1Vo6jfM.roa
File: kC3TQM5JIno7mOPWqMzr1Vo6jfM.roa (raw, json)
Hash identifier: aF7OiawSFdpXIgn+MV/dtfJ01uDKFXJKDEN1+QWNjDY=
Subject key identifier: 90:2D:D3:40:CE:49:22:7A:3B:98:E3:D6:A8:CC:EB:D5:5A:3A:8D:F3
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 50
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/kC3TQM5JIno7mOPWqMzr1Vo6jfM.roa
Signing time: Tue 02 Mar 2021 08:51:38 +0000
ROA not before: Tue 02 Mar 2021 08:51:38 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 203.167.32.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:51:38 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=902DD340CE49227A3B98E3D6A8CCEBD55A3A8DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:40:51:e7:e2:d7:b6:86:64:36:05:f0:8c:
6e:ff:a6:aa:eb:59:5d:99:46:44:d5:ef:8a:e0:7b:
22:8d:62:58:7d:41:a7:31:43:ec:1d:d8:5c:18:2c:
fd:f0:a0:1e:b9:dd:39:80:e1:ce:35:8e:b3:9e:cf:
5d:9b:69:c0:ed:1c:eb:87:9a:e3:b3:91:4a:38:ed:
82:ba:b3:ab:4d:4c:c7:30:39:33:46:74:cc:f7:13:
27:40:6e:f9:c4:6d:d9:a5:d7:e9:72:3b:dc:fe:11:
e8:0c:9b:fb:c9:2a:82:50:de:15:fa:13:fe:7c:e5:
85:a0:f7:2a:5f:e2:1b:70:bc:59:2f:70:21:47:09:
d1:6b:2f:5a:35:5e:ad:84:0c:55:41:de:91:b1:ee:
4d:f2:e0:21:13:dd:92:bb:50:29:85:1e:a2:3f:41:
ad:d2:34:92:f3:de:ea:8c:7b:1b:5c:5c:86:39:85:
6d:1c:04:b7:ce:7f:b9:65:14:ad:67:df:46:18:da:
e2:83:ac:aa:a5:39:29:4c:82:16:7f:61:03:b4:5c:
7a:e8:5f:72:dc:96:4d:b6:8a:c5:f7:db:0a:9c:40:
d6:0a:5c:4f:4a:4c:7d:a6:bb:26:59:e0:c8:a0:11:
5d:68:85:10:1d:25:b8:66:de:42:fd:fc:ab:53:9f:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:D3:40:CE:49:22:7A:3B:98:E3:D6:A8:CC:EB:D5:5A:3A:8D:F3
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/kC3TQM5JIno7mOPWqMzr1Vo6jfM.roa
sbgp-ipAddrBlock: critical
IPv4:
203.167.32.0/20
Signature Algorithm: sha256WithRSAEncryption
02:aa:9c:af:02:c9:81:1c:7b:6c:07:3f:56:b8:64:2a:1b:f7:
ec:69:f4:24:18:a5:6a:3e:9c:d8:36:9c:72:b1:a7:69:09:f7:
3b:59:6c:96:29:65:ff:f2:4b:4c:0c:f2:06:95:c1:10:45:f0:
98:6c:4f:34:a8:fe:1a:a0:bd:e9:fd:a0:4c:13:20:4b:98:ce:
fa:68:c9:b1:45:c6:e8:1c:04:60:b6:85:70:37:6d:f2:15:b6:
8e:e6:2e:7e:f3:4a:0c:be:47:60:9e:c0:da:48:40:1d:f1:45:
12:78:22:ab:95:b6:91:58:f9:96:8e:c7:96:76:79:9f:e9:0d:
55:94:de:a0:4b:e7:da:d6:8e:9a:2e:c4:19:51:b6:a4:4e:d4:
7a:3d:85:7d:e9:97:59:41:cd:ac:e5:94:db:6e:06:45:59:2b:
90:40:f9:7a:77:8d:9e:4c:f3:69:8c:13:65:c3:7b:6c:b2:e4:
b8:d9:34:a4:95:64:8e:1c:02:d0:be:ab:76:81:2a:a0:15:96:
b8:b9:0c:bd:ab:dc:d7:0e:f5:6d:58:95:a2:9d:cb:b3:e0:76:
2f:79:9f:9a:21:cd:06:c4:86:07:54:84:82:4d:34:08:67:a9:
b0:07:70:7c:18:fe:26:78:ed:47:03:87:3b:0a:b5:62:8d:31:
25:d9:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org