Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/zwYcEeFcTt7kUsH-RXxooDt9H44.roa
File: zwYcEeFcTt7kUsH-RXxooDt9H44.roa (raw, json)
Hash identifier: 0LxGT2iUijlVqGsTsEJk5N1E8p9J73vtPk9I6T4otug=
Subject key identifier: CF:06:1C:11:E1:5C:4E:DE:E4:52:C1:FE:45:7C:68:A0:3B:7D:1F:8E
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: B9
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/zwYcEeFcTt7kUsH-RXxooDt9H44.roa
Signing time: Sun 01 Jan 2023 01:29:10 +0000
ROA not before: Sun 01 Jan 2023 01:29:10 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 10021
IP address blocks: 61.120.192.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Jan 1 01:29:10 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=CF061C11E15C4EDEE452C1FE457C68A03B7D1F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:fc:48:b5:2b:a0:7a:4f:bd:12:64:a5:ff:
8f:b1:86:0c:ce:30:15:53:71:71:7b:ae:ae:b8:47:
f5:b2:d3:5c:80:d0:ca:04:a7:38:cc:e9:87:cb:87:
b3:77:7d:b0:f1:12:f7:d6:bd:df:41:83:22:72:3a:
6e:35:7b:8d:ab:c4:af:e9:8a:10:e8:71:70:c0:af:
16:2f:84:3e:6a:2a:a8:12:18:c7:a6:4d:ad:e7:f1:
01:d1:07:b0:9b:6a:0e:e3:ae:7b:6d:70:f8:59:07:
8d:51:97:13:05:6b:9a:f4:06:ec:2f:2e:ef:71:b2:
d6:82:59:8b:f0:f7:91:e3:51:66:b4:49:5e:b1:5f:
b0:d0:18:8c:5e:6b:50:d6:71:55:34:57:96:97:6c:
49:82:a1:fa:31:cb:ff:a9:ab:2a:d4:9c:69:9e:9e:
19:32:03:eb:8e:85:fb:de:5d:cf:84:0b:33:e9:c6:
87:28:fc:4a:35:27:ed:c5:90:23:50:ac:33:ec:5f:
3f:11:b9:03:cb:ab:4c:47:07:9f:b7:53:2d:ea:26:
35:d4:85:18:9c:20:22:a3:6a:0c:22:d4:9c:03:90:
3a:5c:d1:1f:9b:77:fc:17:25:87:8f:5c:1b:46:cb:
a8:cd:35:46:95:5d:97:c0:07:4e:05:a9:d0:7b:6a:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:1C:11:E1:5C:4E:DE:E4:52:C1:FE:45:7C:68:A0:3B:7D:1F:8E
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/zwYcEeFcTt7kUsH-RXxooDt9H44.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.120.192.0/21
Signature Algorithm: sha256WithRSAEncryption
38:6f:ce:62:7b:27:f7:76:d2:01:80:92:8b:5e:81:99:aa:9f:
8b:b0:a9:1c:64:bc:60:0f:07:a8:d4:2e:61:bd:8b:58:9d:c4:
98:7a:0e:a2:71:7a:82:70:18:c7:b7:6a:f6:7f:d8:a9:96:02:
cd:f3:a2:92:02:d2:d7:20:f4:7b:f2:68:33:1d:22:14:64:33:
65:9d:6f:01:49:c2:5d:dc:1e:09:a6:f5:14:6f:63:66:83:2b:
ba:23:17:24:a5:3d:39:b4:02:ef:be:e9:d1:cb:0a:9d:3a:91:
ba:c3:a0:1f:51:e8:14:d0:cd:02:fd:0a:a3:0d:8a:59:c5:bd:
91:c3:f2:f8:c7:6c:25:5e:a8:e8:6a:8d:67:55:07:67:d2:a0:
c9:6a:93:59:15:73:7a:72:ca:26:5f:b6:45:0c:2f:c4:ee:1b:
dc:a0:54:be:75:20:5d:9c:cb:58:83:7e:35:d3:c2:b9:ca:44:
67:75:f7:78:88:bf:60:e6:11:92:aa:ad:75:4a:67:be:03:d4:
6a:fa:8a:16:71:2b:77:e2:19:12:b5:f3:33:1e:4a:04:3c:30:
a0:14:28:69:63:93:85:e9:f0:47:53:55:1b:05:bc:68:04:fa:
d1:e8:93:cb:bd:ed:a6:f0:19:27:b8:7a:a6:00:24:40:95:20:
49:fe:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org