Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30193/yM1RD9ane-1o8rsj8Dn0zDND-B0.roa
File: yM1RD9ane-1o8rsj8Dn0zDND-B0.roa (raw, json)
Hash identifier: 0LK7nn2VFaMYnAMAn3+eb9Lb9gCGTWw2FMd4vDLK/Xw=
Subject key identifier: C8:CD:51:0F:D6:A7:7B:ED:68:F2:BB:23:F0:39:F4:CC:33:43:F8:1D
Certificate issuer: /CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
Certificate serial: 1A
Authority key identifier: 59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/yM1RD9ane-1o8rsj8Dn0zDND-B0.roa
Signing time: Tue 25 May 2021 02:42:19 +0000
ROA not before: Tue 25 May 2021 02:42:19 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 9363
IP address blocks: 2401:3b00::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
Validity
Not Before: May 25 02:42:19 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=C8CD510FD6A77BED68F2BB23F039F4CC3343F81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:78:83:62:ba:b5:0e:b2:a6:04:14:78:bc:
70:1f:44:8e:89:cf:25:24:e0:cf:f7:1e:cc:e7:8a:
fd:e6:51:35:49:0c:2a:a5:f4:5a:be:cb:58:24:2f:
60:37:26:e9:3a:77:a6:02:ce:f8:03:8d:15:6c:d4:
c2:00:40:ce:45:90:5d:6e:1f:b4:bf:b8:aa:18:69:
98:e8:d8:ba:bc:f2:f8:2c:b8:5d:50:57:34:bf:9f:
e7:c3:e8:c0:94:6c:9e:57:8e:83:e6:c4:95:1f:12:
75:39:8a:95:94:a3:00:3c:40:25:a5:bd:14:f7:21:
9f:ed:a8:f8:33:56:89:7f:c4:d0:56:1c:81:a1:1b:
0a:d8:7e:7e:f1:89:db:8e:12:49:6e:7b:ae:95:65:
f1:af:76:91:1d:28:94:dc:81:86:26:77:b8:b1:e5:
a5:5c:0b:1d:b0:87:7f:fc:39:bc:aa:32:d1:79:f8:
8a:ea:66:0b:57:3e:56:83:5f:74:79:88:10:1b:36:
f8:11:4f:fb:5e:95:9e:69:6c:d7:42:a8:ac:4f:d4:
e8:74:72:33:12:3a:a6:80:e6:ba:6f:3f:33:91:9c:
af:c2:f5:52:76:a5:71:11:df:9e:22:21:84:6f:e8:
4d:9a:12:57:87:ed:fc:3f:1b:d2:19:2a:da:74:c8:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:51:0F:D6:A7:7B:ED:68:F2:BB:23:F0:39:F4:CC:33:43:F8:1D
X509v3 Authority Key Identifier:
keyid:59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/yM1RD9ane-1o8rsj8Dn0zDND-B0.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
a2:58:30:c8:ea:fd:52:3a:b6:89:18:38:9f:8e:60:5e:34:e8:
54:8f:41:ed:01:22:49:a7:b8:63:f8:b8:75:9d:4b:84:7b:97:
08:8d:3c:20:cc:37:46:20:24:22:83:4f:59:1e:15:99:0b:1e:
59:cb:c5:2d:67:a4:5a:6d:7a:12:7e:8c:91:72:09:fd:28:20:
55:8f:b2:e3:c8:45:35:09:78:c6:21:e6:f5:12:39:cb:47:dd:
0e:3c:5e:6e:11:75:95:88:2d:55:cf:4c:1b:36:1e:b8:2c:7d:
6d:0c:a9:2d:9b:09:b3:91:82:3b:05:66:43:0e:8b:77:c2:2b:
62:00:72:f5:08:21:7a:1b:11:33:39:b5:20:75:d3:77:64:42:
a3:31:f8:48:31:3b:cd:8c:c7:49:ab:8b:ab:18:33:d6:56:0c:
c8:b1:aa:73:e1:8a:10:ad:f7:8f:d8:1c:5f:27:96:a4:36:12:
c6:84:8a:f9:46:1a:39:a6:b9:6b:28:c1:fe:65:39:e6:85:e1:
77:36:93:bc:fa:cc:5d:23:d5:32:1f:19:60:7f:51:36:d5:2d:
fd:15:7c:a9:2c:17:c0:51:6c:1b:9d:90:bb:8e:bb:54:11:96:
0b:7f:50:8d:15:ef:03:32:8b:42:09:5d:ea:84:b9:ac:14:4e:
63:c8:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org