Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/mWo_icK5BaOuYR5UbTNHHeJ90UY.roa
File: mWo_icK5BaOuYR5UbTNHHeJ90UY.roa (raw, json)
Hash identifier: zVes6Y+g1iUuKTz4z/iIYApuCR44NFC8qu8tibclCK8=
Subject key identifier: 99:6A:3F:89:C2:B9:05:A3:AE:61:1E:54:6D:33:47:1D:E2:7D:D1:46
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 8A
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mWo_icK5BaOuYR5UbTNHHeJ90UY.roa
Signing time: Tue 01 Feb 2022 01:31:03 +0000
ROA not before: Tue 01 Feb 2022 01:31:03 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 8220
IP address blocks: 202.95.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:31:03 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=996A3F89C2B905A3AE611E546D33471DE27DD146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b3:a0:23:4b:f3:e4:af:1d:03:01:22:17:33:
37:95:06:a7:67:98:4c:32:e2:c4:09:d4:25:cb:0d:
39:5d:f3:75:88:b7:20:b1:c8:7e:32:4b:a4:31:8b:
d5:f2:a4:2c:02:d3:eb:9c:f5:d1:93:84:bb:a5:96:
eb:66:dd:0d:a9:aa:c7:51:3d:df:f9:0d:d5:78:35:
ee:df:d6:3a:20:3d:bb:b4:3c:35:35:c6:7f:b7:dc:
d9:78:c5:02:fb:33:a9:16:27:9a:f1:62:01:c4:e5:
ca:66:d2:6f:49:70:ad:c3:f9:45:7a:84:3c:19:80:
bc:54:f7:4b:1e:75:fc:7b:bc:ba:e1:21:82:a5:c0:
9e:6c:04:18:ff:a6:d2:28:36:45:96:cd:b7:8c:87:
e9:90:38:37:4b:12:d4:dd:14:4f:c1:72:89:6b:5f:
d4:8f:60:0a:ee:01:10:61:48:5d:ac:3e:50:3a:5e:
c6:28:f8:0f:7b:5b:54:be:c4:92:93:9b:ed:1f:94:
b1:a5:d5:4d:70:49:c1:95:15:a7:28:8b:5f:fb:df:
88:62:b6:09:86:cb:da:84:a8:44:72:72:ac:ad:f4:
39:ee:e0:dc:a8:1a:ef:8e:0f:8e:1f:4e:65:45:d6:
6e:5d:f4:eb:60:15:f1:64:df:4e:43:27:fc:1c:cf:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:3F:89:C2:B9:05:A3:AE:61:1E:54:6D:33:47:1D:E2:7D:D1:46
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mWo_icK5BaOuYR5UbTNHHeJ90UY.roa
sbgp-ipAddrBlock: critical
IPv4:
202.95.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:9e:0e:5a:60:d8:19:6d:b8:9d:89:4c:e8:d1:80:f5:c5:e9:
da:dd:68:b8:01:70:ba:52:4a:e6:47:28:4f:c1:c0:19:66:46:
d1:58:27:07:9e:dc:4b:90:89:b7:93:ae:b8:93:a9:05:81:48:
30:ab:fe:25:2c:69:15:49:6a:c8:e5:86:9d:9e:8e:a9:3c:c6:
d5:4b:61:a2:47:a3:a8:59:54:8d:6f:43:0c:2e:55:91:2f:ad:
72:51:96:56:0f:61:be:34:c4:40:e4:98:de:a2:08:cb:39:98:
1c:e8:3f:d9:b0:8c:7f:8d:8c:6a:58:cb:ad:d9:7f:70:44:ee:
a6:6e:b8:b1:70:0e:84:75:ca:84:43:72:c6:a4:c8:c5:cc:c2:
71:ad:78:c5:71:de:74:c8:a0:d8:71:ee:7a:52:58:5d:db:9b:
5a:d3:3e:bc:ab:1d:49:31:c2:6a:e9:2e:a4:52:e0:d2:89:2b:
f3:65:e4:a1:49:3d:6c:b8:c9:6f:77:b6:50:ab:25:37:d4:21:
f5:af:16:e8:63:d5:d5:64:1d:17:89:bf:a4:cf:e4:7c:d2:92:
23:e7:cd:8f:63:76:ac:03:8d:45:a9:4d:ac:d4:86:c4:66:66:
af:4b:b8:35:0c:6f:c0:bd:aa:ce:68:38:95:14:20:5c:55:80:
3a:97:17:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org