Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Q9I_AG9Dkg5tv3N_Ilkmu31UFgQ.roa
File: Q9I_AG9Dkg5tv3N_Ilkmu31UFgQ.roa (raw, json)
Hash identifier: MmrJighH4naiyG9oBCyqi0keHbr+T0h0Y6IEiD/WZ8s=
Subject key identifier: 43:D2:3F:00:6F:43:92:0E:6D:BF:73:7F:22:59:26:BB:7D:54:16:04
Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial: 3B
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Q9I_AG9Dkg5tv3N_Ilkmu31UFgQ.roa
Signing time: Fri 01 Apr 2022 01:33:04 +0000
ROA not before: Fri 01 Apr 2022 01:33:04 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 7521
IP address blocks: 2001:3a0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Validity
Not Before: Apr 1 01:33:04 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=43D23F006F43920E6DBF737F225926BB7D541604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:fd:fc:e8:28:91:45:e2:a4:f0:cb:57:c9:
a4:65:8e:10:6d:76:42:4c:2a:08:db:31:b8:f2:9b:
cb:17:e8:6e:dc:70:fa:16:fa:08:10:70:a6:b2:36:
5b:5f:3b:53:4f:c9:a7:1d:cb:5a:6f:68:b7:e8:1e:
1e:64:50:a4:66:bd:13:fd:39:d2:4c:47:50:55:39:
84:09:0d:a7:0d:e3:62:c8:19:7b:be:d7:7a:f7:9c:
59:ff:a1:b6:e4:e4:dd:54:21:64:a9:b7:62:d3:dc:
a0:4b:69:a4:28:a2:c3:a9:36:70:ce:5c:58:a8:f6:
13:9b:60:97:86:d6:fe:02:7f:da:ab:06:2a:c9:c6:
f5:a2:14:b5:9f:66:37:27:fa:49:07:71:71:9d:26:
56:3b:b8:2c:bb:99:f4:94:48:ad:48:a7:fb:59:77:
6a:62:8f:0f:bf:cc:b7:7d:fe:6c:df:9e:a2:1a:ea:
eb:92:04:ea:3d:03:48:b2:ee:21:53:c8:f7:0e:d5:
4f:42:ea:02:a4:ec:08:44:92:c4:6f:43:63:c7:8c:
e4:fb:79:54:7a:57:9f:b8:e0:b2:78:18:46:49:9c:
bc:cd:6f:b8:68:f3:ef:c9:ff:c0:eb:26:57:e2:69:
5a:8b:24:54:85:32:95:37:ed:8e:3c:38:ff:c6:36:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:3F:00:6F:43:92:0E:6D:BF:73:7F:22:59:26:BB:7D:54:16:04
X509v3 Authority Key Identifier:
keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Q9I_AG9Dkg5tv3N_Ilkmu31UFgQ.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3a0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:e8:dc:c4:58:58:f0:20:f2:2b:27:f3:70:e1:d5:24:7e:b4:
cb:0d:5b:02:54:d8:05:de:1c:38:34:40:51:97:66:e3:31:08:
b8:d5:3d:0a:3a:27:59:b7:9d:59:0d:91:2e:ee:5d:05:e6:7a:
02:1e:52:d0:1d:e4:fd:9a:1b:da:cb:82:ee:2c:91:88:d4:35:
cb:f4:0f:28:ec:5d:5d:08:77:6e:1d:f6:e4:fd:72:9e:a4:ff:
1d:17:5b:68:42:cd:4a:1e:81:62:f7:3d:90:ef:b7:e9:ba:24:
6c:dd:1c:25:7f:79:1f:44:91:92:52:c5:87:ca:bc:e3:3c:27:
2a:ea:7f:44:78:af:97:16:1a:25:f1:39:32:92:84:f4:59:f9:
19:9d:ea:06:25:41:f3:10:1e:cd:5e:e6:e8:ca:5e:49:9b:ba:
47:53:74:09:f0:2b:21:10:80:65:5d:89:d9:74:1d:64:2d:16:
f8:38:06:46:5b:9b:4a:e1:0c:ce:d7:ec:ea:3a:1b:33:14:5c:
be:43:60:04:98:71:77:c0:a3:9e:80:3f:7a:4f:0f:21:e3:f9:
52:1d:d4:6e:1c:56:9c:ec:1c:7e:c5:c2:4f:05:f9:fd:c7:fa:
ba:a3:b3:77:19:72:30:14:35:5d:c9:59:ca:93:df:27:05:ea:
23:2d:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org