Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/NyGIFdd40n8pTytjUbf6_FT42mc.roa
File: NyGIFdd40n8pTytjUbf6_FT42mc.roa (raw, json)
Hash identifier: vxIna/q7mkL+eRl6GE+p1L6DBSogz/GmrdVdwhhpoN8=
Subject key identifier: 37:21:88:15:D7:78:D2:7F:29:4F:2B:63:51:B7:FA:FC:54:F8:DA:67
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 75
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NyGIFdd40n8pTytjUbf6_FT42mc.roa
Signing time: Wed 01 Sep 2021 01:30:27 +0000
ROA not before: Wed 01 Sep 2021 01:30:27 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 27.134.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:27 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=37218815D778D27F294F2B6351B7FAFC54F8DA67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:f0:9b:24:6c:f1:98:01:61:c1:c8:87:25:
06:3e:86:a5:76:9a:9f:0d:ca:8b:2e:86:4b:ee:6c:
5b:70:09:bd:38:40:27:ba:9d:ab:c0:6a:1b:77:26:
1c:2e:70:76:6b:a9:23:f1:63:cc:47:f5:74:33:5c:
c9:0a:73:3d:e7:58:d9:61:6a:71:62:96:b5:4f:8e:
6e:5c:2e:0b:e6:4f:1f:ba:df:72:5b:4f:b1:13:24:
3a:e8:ad:4f:35:67:d3:cc:4d:9c:0f:41:d3:0c:b5:
d2:bf:99:7b:2e:d1:e7:5a:58:8a:e5:8c:7f:ff:9a:
b6:89:cf:a4:b7:23:e2:3e:49:ca:32:24:34:c7:d5:
04:29:a4:de:cf:38:82:a3:fc:63:e6:0d:7d:fb:06:
b3:77:08:53:02:b2:9c:80:00:eb:e3:1d:d1:71:a4:
da:25:0b:76:d4:af:46:72:c0:a4:55:0d:f5:4b:97:
82:fc:7b:78:f9:15:f8:00:51:16:63:2d:da:2e:61:
dd:a6:8c:8a:43:30:38:d9:62:62:3b:81:22:3a:55:
6e:3e:d3:fb:ad:7d:23:28:66:60:c8:b4:5a:91:f0:
a5:2a:7a:92:4d:76:be:0e:01:9e:27:e5:6d:3d:a0:
3c:b9:4c:10:15:5f:34:cc:42:27:5c:6a:85:4c:50:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:88:15:D7:78:D2:7F:29:4F:2B:63:51:B7:FA:FC:54:F8:DA:67
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NyGIFdd40n8pTytjUbf6_FT42mc.roa
sbgp-ipAddrBlock: critical
IPv4:
27.134.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:47:11:e8:07:84:0d:26:40:24:0e:c7:67:62:c4:52:fa:c7:
2e:ff:27:cc:11:4d:e7:f5:91:87:89:94:7e:57:b9:59:86:a2:
16:0d:cc:10:c4:8c:42:e6:45:cc:d9:d0:ad:58:28:1c:90:24:
e8:80:25:47:6b:ce:ff:19:6a:bc:68:85:77:ed:30:25:2f:72:
39:1d:26:66:7c:28:70:fd:8d:63:34:56:7c:e7:5d:e6:56:70:
6e:d8:06:f6:09:29:16:d0:a5:cc:e7:9f:13:31:a1:ae:ff:7d:
38:37:41:d9:d3:50:f3:1e:2f:d9:c6:4a:50:a0:86:34:6d:fa:
e3:df:1b:24:6a:34:c6:35:dc:15:f9:56:a2:5d:3b:ab:d6:3e:
88:b2:a0:cf:77:03:f8:47:c1:48:83:bc:a7:7b:1b:8d:44:ad:
91:61:09:e3:97:53:0a:97:6e:32:d8:54:4b:1c:5c:7d:53:53:
2b:72:34:44:ca:c7:b7:af:5b:67:16:e5:15:8d:f8:06:43:a7:
4f:10:9c:db:99:31:f7:f3:5a:03:35:f9:f5:07:9d:e9:6c:cc:
3e:9e:97:55:c4:8b:c2:42:ba:9a:d1:d4:9d:f6:9a:3d:a7:7c:
bc:9f:70:cc:3d:78:ac:29:62:07:5d:c9:5f:ea:04:e0:06:56:
d6:4a:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org