Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/yig0Tx22Wnk_lATU8xm7CJCOlfQ.roa
File: yig0Tx22Wnk_lATU8xm7CJCOlfQ.roa (raw, json)
Hash identifier: F8+Cdf9i+wWM12TVBAzxoQs/3kaj2UIrpxRNQSKcF8Q=
Subject key identifier: CA:28:34:4F:1D:B6:5A:79:3F:94:04:D4:F3:19:BB:08:90:8E:95:F4
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 69
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/yig0Tx22Wnk_lATU8xm7CJCOlfQ.roa
Signing time: Wed 01 Sep 2021 01:30:22 +0000
ROA not before: Wed 01 Sep 2021 01:30:22 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 9370
IP address blocks: 36.53.128.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Sep 1 01:30:22 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=CA28344F1DB65A793F9404D4F319BB08908E95F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:90:fd:f0:c5:d1:4c:48:17:54:dd:82:eb:
c4:82:c4:9d:56:b2:bb:d4:3f:f9:6c:e3:08:40:05:
90:13:6b:79:04:41:14:1c:81:a3:d5:4c:be:32:35:
ee:d7:08:8a:41:e7:ca:32:bd:31:8b:21:f4:2c:a1:
7c:e3:cb:93:f8:31:23:ee:60:8e:54:03:4d:90:94:
7d:20:3a:16:1a:60:69:f7:2b:6a:81:f8:0f:7d:9b:
7c:63:2a:fa:7e:a3:0c:b8:85:65:0f:1c:dc:aa:b9:
a5:83:6e:81:3e:f7:0c:40:1f:29:8a:fe:3c:7c:87:
d2:6d:77:1f:bc:98:34:59:66:05:f3:04:60:5d:b6:
4c:e1:19:4e:ae:2f:ce:b3:45:7c:f1:4c:fd:36:ee:
02:0f:bd:a8:6c:8d:a4:bb:ed:a9:26:fe:ac:67:90:
1d:35:a8:00:d4:6b:3d:d3:91:ef:90:6e:86:4f:26:
1e:97:4e:08:3f:ef:5f:24:79:9c:e9:46:b2:b2:5d:
7b:be:8c:ef:fa:f3:62:78:36:d9:6a:bf:0f:84:2a:
75:0c:bf:a7:0e:a3:a0:d7:55:c0:44:b4:17:f6:f4:
d8:66:a4:53:cc:50:5c:4b:0b:91:81:53:49:c5:74:
97:62:35:36:eb:9b:16:34:09:ab:79:3b:4c:23:0b:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:34:4F:1D:B6:5A:79:3F:94:04:D4:F3:19:BB:08:90:8E:95:F4
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/yig0Tx22Wnk_lATU8xm7CJCOlfQ.roa
sbgp-ipAddrBlock: critical
IPv4:
36.53.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:d3:8e:b6:5f:ec:2c:0e:13:60:54:83:00:69:67:56:8f:61:
83:fa:f7:3c:ae:5b:f3:a5:ee:7c:a1:cf:01:88:30:c2:b5:c8:
17:6d:66:c8:e1:c0:14:59:e7:b8:10:cd:a0:3c:35:ef:8b:d6:
b3:9e:35:32:3e:0f:06:20:61:75:66:f9:56:26:43:be:2a:90:
c7:f4:5f:4a:c7:07:c1:be:a4:72:72:2c:27:8e:83:fa:29:88:
01:6e:4f:64:36:d5:be:5a:63:df:7d:6e:b2:3f:5a:05:ba:7c:
e2:7b:2a:2e:08:99:48:86:61:1e:5a:a1:ea:c7:98:98:d8:f7:
84:67:8a:ad:3d:67:f1:35:09:96:80:5f:bb:58:9e:ee:13:31:
02:ad:05:5c:c2:47:08:5a:7f:9c:52:67:bc:5d:65:57:c9:5c:
d7:28:39:6a:24:29:b0:bd:b5:ef:84:c6:10:3c:4a:59:64:66:
31:31:83:bb:b7:ad:73:14:55:f3:28:79:56:33:ea:63:b3:3a:
4a:e3:13:16:d6:f2:c6:0f:ea:ae:e9:c8:ff:e9:4d:f7:52:e7:
2b:e2:e9:cc:d4:34:5a:75:ca:01:cd:bd:f7:8a:9a:89:78:fa:
43:35:a2:5c:7d:e3:bc:79:37:62:45:31:3f:9a:f5:93:08:7a:
12:45:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org