Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/KkhmZ2ykV0EeAfpIMHtYbUkhzcI.roa
File: KkhmZ2ykV0EeAfpIMHtYbUkhzcI.roa (raw, json)
Hash identifier: li94L8pKtbj/uDfevAcntSM2fOCit/BKkzMxmyk89gI=
Subject key identifier: 2A:48:66:67:6C:A4:57:41:1E:01:FA:48:30:7B:58:6D:49:21:CD:C2
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 74
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KkhmZ2ykV0EeAfpIMHtYbUkhzcI.roa
Signing time: Wed 01 Sep 2021 01:30:26 +0000
ROA not before: Wed 01 Sep 2021 01:30:26 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 110.232.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:26 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=2A4866676CA457411E01FA48307B586D4921CDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:ec:80:88:d7:13:8a:78:60:7e:43:0c:b8:
ae:35:1d:b0:08:47:74:9e:dd:ff:05:11:df:7e:d1:
1c:89:db:01:f2:5a:34:e2:4f:3c:61:c2:75:03:b7:
8c:d4:1d:5e:9e:fe:1e:0c:84:f3:97:ec:b9:49:99:
98:ec:b0:1a:34:03:44:ce:e6:b3:6f:42:96:78:62:
08:b6:5a:d1:06:d8:4e:1c:c9:18:79:79:4c:e9:15:
70:7f:3f:19:1f:95:5b:ed:25:a6:d1:72:42:15:05:
5e:19:f8:a4:1f:5b:18:3f:cb:13:67:35:38:9a:a5:
d3:3a:d6:25:16:87:09:9a:16:84:7e:ef:be:c2:34:
f5:d9:35:b8:fd:2b:86:2e:e9:ae:48:da:4a:0e:85:
d3:24:e6:b2:3d:14:7d:72:d8:05:31:80:fc:ba:29:
4c:fc:ff:32:c2:7b:c7:34:ae:c7:e1:2d:77:21:f5:
2e:a6:38:71:5f:74:2f:b3:fc:39:ad:87:fd:51:1b:
4d:21:40:ae:00:bb:9a:08:bb:e8:a6:73:47:c1:09:
a5:45:e8:e7:bc:a5:87:fa:b2:61:95:1e:fc:8c:9f:
4e:ca:9b:cf:f6:73:58:6b:a2:95:0d:35:60:cb:24:
65:d9:93:d5:a1:a2:ff:ff:1d:45:96:78:c9:a4:f6:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:48:66:67:6C:A4:57:41:1E:01:FA:48:30:7B:58:6D:49:21:CD:C2
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KkhmZ2ykV0EeAfpIMHtYbUkhzcI.roa
sbgp-ipAddrBlock: critical
IPv4:
110.232.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:ac:bc:62:a9:5e:9c:82:d2:52:ee:31:60:88:8c:91:67:8f:
e3:14:76:59:67:ae:0b:e4:99:71:0b:d5:05:2b:f4:4f:57:0d:
41:68:02:fe:14:7c:2b:e6:58:e4:1a:f6:b3:6b:cd:1b:4c:e6:
67:06:50:56:e6:41:2b:36:42:e7:0c:71:2e:e5:72:a5:91:41:
73:fc:ef:1d:8f:00:db:40:7e:5e:0e:c0:b1:b4:7a:b2:ae:d1:
20:cd:ab:bf:17:86:f6:8d:a3:c4:6e:7b:18:df:00:f5:b2:d1:
a7:46:e1:34:f2:6f:10:93:c3:37:6d:52:76:bb:a0:35:2f:57:
41:1e:4a:86:22:97:70:a8:61:26:ec:e2:47:a3:2a:1d:b6:3c:
cb:9b:54:2c:c0:7c:9c:14:b5:f9:63:9c:95:a9:20:ce:a3:82:
62:28:84:96:a2:c7:ae:15:b7:a8:9d:e5:8a:17:3e:30:27:11:
db:2d:5e:f0:e6:b4:0d:bd:1f:dc:d3:2d:25:4f:cb:60:cf:e6:
3e:ef:41:00:4f:90:db:81:0a:49:0b:75:6a:27:c4:7c:3c:3d:
b8:f6:ce:f9:e4:11:f7:05:70:3f:fe:b8:5d:ab:c0:c4:c5:33:
ba:55:94:32:2f:a5:f9:74:0f:a6:42:21:c9:8f:7b:ba:68:3f:
04:d9:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org