Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/lygwpLd5htxD0aPklAtAVs8i6GA.roa
File: lygwpLd5htxD0aPklAtAVs8i6GA.roa (raw, json)
Hash identifier: os5sBU6D8dMEKMYruoRiVJ/VXqXSRuwwqti0HPEkfB0=
Subject key identifier: 97:28:30:A4:B7:79:86:DC:43:D1:A3:E4:94:0B:40:56:CF:22:E8:60
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 79
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/lygwpLd5htxD0aPklAtAVs8i6GA.roa
Signing time: Wed 15 Dec 2021 00:41:41 +0000
ROA not before: Wed 15 Dec 2021 00:41:41 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 8220
IP address blocks: 202.7.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 15 00:41:41 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=972830A4B77986DC43D1A3E4940B4056CF22E860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:4b:15:ee:41:5a:3e:f3:9b:86:2a:f5:62:
9d:96:7a:06:80:ab:f4:ca:eb:44:61:29:ef:81:ad:
44:62:05:84:69:cd:12:79:bf:c1:24:16:12:4a:50:
86:62:ea:91:de:9b:7a:fe:fc:43:2f:9a:8d:be:cd:
1c:51:dc:50:8e:ea:19:99:7d:a2:e4:66:9b:b4:c4:
3c:7b:a5:c3:68:ff:39:3d:c1:c5:40:dd:4e:89:93:
af:d5:1c:28:3f:ae:ed:f8:af:96:8e:6c:28:31:f9:
52:b7:4a:92:f1:75:4f:d0:d3:cd:ce:68:29:33:0c:
e1:ed:c4:3e:2c:78:69:d4:e2:b7:57:1c:64:45:d8:
67:f1:db:ac:b7:7c:9e:4e:d1:80:28:b5:85:4f:33:
a1:15:7f:e5:ab:dd:67:47:16:4f:51:35:70:8c:f2:
54:f7:fc:4a:90:64:52:1d:72:ca:eb:7f:88:8e:55:
4f:f4:bb:a5:bf:c6:f8:39:40:12:1d:f4:a4:64:ee:
90:5b:41:82:9e:b7:7f:03:8d:ca:7e:8d:df:d0:31:
8a:3c:f2:f6:4d:0b:7c:f4:bc:56:30:ca:e9:1b:39:
c8:3b:94:0e:9f:48:9a:df:85:0a:6f:a1:79:a5:c1:
e7:12:18:78:ce:9b:2f:00:fb:aa:4d:74:8a:4d:40:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:30:A4:B7:79:86:DC:43:D1:A3:E4:94:0B:40:56:CF:22:E8:60
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/lygwpLd5htxD0aPklAtAVs8i6GA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:64:f5:22:b5:99:24:f4:45:2a:51:92:7b:f3:3c:70:22:9e:
ff:0b:36:35:d9:2d:c9:58:8b:b3:76:14:7e:81:c8:34:92:c6:
a7:3a:5d:a5:1a:44:8b:ce:28:ea:56:51:17:ae:62:77:1c:50:
33:4f:d9:2d:b2:a1:0c:fc:93:c5:de:9b:0d:09:e1:15:c6:e9:
a9:b2:37:47:80:70:f2:f5:e0:45:62:e0:40:a8:0d:c0:23:41:
74:e0:a1:0c:83:dd:5a:df:6f:36:57:fc:50:4a:d5:e1:56:62:
45:f5:bd:25:30:db:2b:d7:61:c2:f4:cf:ea:c4:1c:4b:74:43:
ef:48:6b:0b:1a:21:5e:c3:48:b9:56:69:5d:4f:2f:5d:d3:d3:
60:32:75:e8:8f:94:52:44:16:ac:0e:5a:40:8b:18:75:d8:0c:
78:e7:2c:46:ac:9d:1a:2a:97:3e:70:9f:25:da:03:5c:3b:c6:
a8:77:59:1e:ef:4d:fe:a7:26:51:0a:c4:10:ed:78:69:70:0c:
2a:fd:6e:c7:a6:14:04:23:5a:ef:30:d0:b8:99:4b:06:e9:60:
d1:d0:1d:b9:87:3d:e7:0a:8e:2b:eb:cf:34:39:c4:cf:75:d7:
fe:98:96:5c:af:9d:56:17:55:11:a8:ba:32:f8:53:89:38:d9:
62:5f:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org