Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/PNGd-D1T8S07qLaOn5whNyGHRM8.roa
File: PNGd-D1T8S07qLaOn5whNyGHRM8.roa (raw, json)
Hash identifier: Z0syygEoKhWKhlCL264hOHtL7adOynYx4RTu6twUXbs=
Subject key identifier: 3C:D1:9D:F8:3D:53:F1:2D:3B:A8:B6:8E:9F:9C:21:37:21:87:44:CF
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 23
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/PNGd-D1T8S07qLaOn5whNyGHRM8.roa
Signing time: Tue 30 Mar 2021 16:45:20 +0000
ROA not before: Tue 30 Mar 2021 16:45:20 +0000
ROA not after: Tue 15 Mar 2022 01:30:01 +0000
asID: 6220
IP address blocks: 61.200.83.64/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 30 16:45:20 2021 GMT
Not After : Mar 15 01:30:01 2022 GMT
Subject: CN=3CD19DF83D53F12D3BA8B68E9F9C2137218744CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:be:e2:d9:26:15:af:0a:f5:b8:98:0a:33:
92:9f:ab:aa:f9:ca:4a:49:de:84:66:b8:0d:51:0f:
c4:a7:21:18:e7:7a:04:b9:9c:9e:91:ed:06:0e:3b:
df:96:53:ef:3e:7d:f5:ff:49:3a:a9:73:ed:56:d8:
02:74:81:93:39:eb:ad:a1:da:d0:31:eb:3b:58:82:
a0:09:43:df:48:ae:aa:a0:aa:38:12:39:73:8a:2a:
ea:ff:f1:e5:5c:84:c0:09:67:7d:f9:90:cc:f3:a8:
3e:85:a0:08:64:02:4d:f6:92:47:6c:e2:69:f8:47:
0f:21:5b:e2:15:a1:24:54:70:dc:af:12:34:4e:b0:
96:7e:44:3b:d4:ec:7b:59:04:10:68:b5:d2:b6:d4:
9b:41:d3:64:bc:e4:f7:ff:c2:99:70:be:ff:52:68:
8f:85:49:4c:38:71:c7:6c:cd:71:5b:d9:2b:c1:3d:
25:dd:73:52:04:86:cd:16:b6:d4:20:1a:fc:a9:a6:
5c:33:56:20:61:b3:e7:90:6d:8e:9e:31:76:b6:a3:
67:d7:36:b4:21:2a:5c:47:32:c2:c2:bd:c2:68:7e:
62:9f:ad:67:ce:81:85:4a:9a:e0:81:21:68:8b:1e:
ca:f9:ad:0c:5c:00:88:1e:01:52:fb:f5:10:3d:f2:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:9D:F8:3D:53:F1:2D:3B:A8:B6:8E:9F:9C:21:37:21:87:44:CF
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/PNGd-D1T8S07qLaOn5whNyGHRM8.roa
sbgp-ipAddrBlock: critical
IPv4:
61.200.83.64/28
Signature Algorithm: sha256WithRSAEncryption
91:97:3f:16:a9:a6:07:99:25:65:20:b8:d6:dd:64:ff:12:4f:
48:c8:93:2d:66:45:35:02:ea:82:f2:db:e4:16:a2:6c:20:d0:
5b:53:b3:fa:51:8a:ee:e2:61:58:22:68:cb:b3:e8:0d:53:a2:
e9:72:92:ba:4f:fa:9e:ff:6c:dc:3d:91:1c:6b:8a:a2:f7:25:
d7:5d:08:e0:63:43:e7:62:00:e3:39:86:47:bf:48:13:b4:15:
d1:21:6f:f5:8a:19:78:21:00:4a:84:83:89:3d:91:2c:43:4e:
e1:06:85:2d:5a:e2:cc:37:f9:e7:78:cd:f9:57:e2:01:05:2c:
0d:2e:b4:55:07:7f:8c:54:78:1a:cd:a4:90:85:b6:79:e5:66:
e8:0d:17:8a:c8:39:70:99:53:59:4f:9e:2f:cc:81:c4:4b:5c:
ef:db:62:02:11:3b:1c:1c:d9:4a:aa:ea:35:ff:0d:04:54:2f:
ef:52:bc:ec:c8:32:f0:9d:ce:48:8b:b6:3b:51:e2:63:b1:6d:
67:4b:d2:c0:6c:3e:9d:93:57:c1:4c:3e:75:73:ec:68:9c:72:
7c:3c:ad:61:28:64:5d:c0:65:d0:10:cc:c4:e5:31:0c:80:a7:
49:c1:bc:24:3e:b4:aa:b0:e0:dc:3a:dc:8b:79:06:09:af:e4:
65:65:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org