Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/QSeByuphaw2Hdti16snrvwaPgI4.roa
File: QSeByuphaw2Hdti16snrvwaPgI4.roa (raw, json)
Hash identifier: HZr6H+PRgtslrYVTi6YQxi3Sw5+OkgGj7vW4Cz6Dyxo=
Subject key identifier: 41:27:81:CA:EA:61:6B:0D:87:76:D8:B5:EA:C9:EB:BF:06:8F:80:8E
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 0A
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/QSeByuphaw2Hdti16snrvwaPgI4.roa
Signing time: Thu 08 Jul 2021 13:59:38 +0000
ROA not before: Thu 08 Jul 2021 13:59:38 +0000
ROA not after: Wed 15 Jun 2022 01:30:03 +0000
asID: 63789
IP address blocks: 202.9.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Jul 8 13:59:38 2021 GMT
Not After : Jun 15 01:30:03 2022 GMT
Subject: CN=412781CAEA616B0D8776D8B5EAC9EBBF068F808E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:e3:33:14:f0:61:c5:32:a0:18:33:51:a7:
8d:28:9c:82:e2:ad:b0:e8:af:b1:16:e2:3b:22:a5:
02:8c:1f:61:5c:7e:d1:ab:57:67:9b:43:6a:23:af:
ba:25:2f:8f:46:58:0a:e3:d7:d4:4c:f5:2a:0c:c4:
c7:2f:3b:cc:27:2f:a0:aa:01:23:10:cf:16:db:0a:
72:5c:9d:88:c4:be:ab:05:07:bc:98:01:12:2d:e1:
b4:9b:7a:5a:6e:74:bf:3c:7a:32:dd:76:95:4c:f8:
4e:ec:c1:38:db:78:a1:fe:41:e6:31:c1:77:09:1e:
1f:f7:af:6f:a0:ea:76:c3:99:4e:cc:bf:43:f0:54:
72:bf:5c:6a:8d:1a:47:81:6a:f4:3c:b4:fe:e4:42:
de:e8:b9:09:43:ca:fd:59:45:f6:43:ea:2a:76:d4:
be:3c:3f:c3:06:d1:48:89:09:f3:1f:6c:3d:91:76:
62:0b:08:d5:40:4c:bc:93:09:4e:94:87:d3:4b:77:
cd:c0:4d:c8:09:b9:86:ec:35:0e:ec:b6:f1:7a:bf:
31:60:ff:15:85:33:6f:43:33:b7:52:e1:60:16:37:
cc:5c:3d:3b:37:b6:86:cc:05:31:0f:5a:c5:76:54:
8e:a8:09:0c:e0:ee:27:92:46:ed:fe:b1:87:43:cd:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:81:CA:EA:61:6B:0D:87:76:D8:B5:EA:C9:EB:BF:06:8F:80:8E
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/QSeByuphaw2Hdti16snrvwaPgI4.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.209.0/24
Signature Algorithm: sha256WithRSAEncryption
19:76:d1:0d:b2:b0:83:a1:bb:1a:7e:60:62:4e:27:7c:d8:ec:
65:11:17:c0:e1:b6:72:62:ce:14:71:cb:d1:dd:81:10:70:e5:
82:5a:14:f9:83:59:d7:c2:85:7d:e3:5b:14:5a:44:c0:d8:76:
40:8d:8e:d2:42:ad:3a:1d:eb:db:fb:63:4b:7e:cd:bd:96:4f:
18:ad:95:01:61:70:ba:28:86:6a:79:c4:44:00:a6:3d:3c:e9:
58:bb:d4:2a:16:80:20:81:fa:46:73:71:e0:66:69:a3:e4:24:
6f:88:dd:1e:be:08:fc:a3:1a:3f:0e:bd:27:b4:60:e8:af:2f:
a6:29:fb:90:60:9a:24:95:90:cb:77:02:a5:0a:81:75:90:c7:
b0:16:46:dd:5f:0c:c0:19:c7:b8:ce:63:4a:e6:e4:4c:0e:8b:
d2:a3:7c:91:4f:08:b4:54:c1:c3:87:e0:61:e6:ed:80:40:8b:
6b:08:3d:d7:41:e0:2d:d6:e1:b4:98:1c:9f:cc:d5:3c:f8:f2:
aa:22:e8:2f:68:da:82:5d:d2:31:e0:3c:81:38:86:be:31:1c:
bf:7f:f6:2d:14:22:ab:30:c5:87:e6:2a:5b:3b:d6:9c:2f:58:
34:b3:2a:19:48:6c:4a:db:2d:5a:33:47:d2:82:1c:01:71:01:
0b:15:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:12 2023 by rpki-client on console-ams.rpki-client.org