Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30211/tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa
File: tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa (raw, json)
Hash identifier: ee2hEci40is1qYGaK/oa8YS39KgXfbFm4Z2SDC0UBlM=
Subject key identifier: B6:26:29:AB:FF:32:08:02:DF:CD:A0:B2:14:94:3F:13:36:01:F6:2E
Certificate issuer: /CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5
Certificate serial: 05
Authority key identifier: 14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa
Signing time: Tue 15 Mar 2022 00:46:49 +0000
ROA not before: Tue 15 Mar 2022 00:46:49 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 38648
IP address blocks: 2402:3b00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5
Validity
Not Before: Mar 15 00:46:49 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=B62629ABFF320802DFCDA0B214943F133601F62E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:4e:55:66:9c:69:19:1e:e5:4f:fe:0c:29:
f6:cf:1b:cd:50:6e:3d:f2:6f:23:5e:68:c8:56:3b:
fb:de:02:94:5d:0b:96:6a:6e:2b:a7:ee:ea:d0:9d:
73:eb:f8:d5:5f:6c:fd:61:9a:37:84:00:cd:af:f3:
aa:66:fb:1a:65:7a:bd:05:cc:82:44:b5:04:e3:10:
b9:b2:64:c3:b1:7a:8a:ab:bb:35:06:4e:4c:05:5a:
6c:1b:a4:0b:93:8b:7a:78:5f:27:b5:7e:f9:90:80:
6e:5a:62:64:b0:79:03:2e:36:72:a9:e6:dc:95:97:
cc:98:d9:b6:97:4a:2d:f5:78:de:04:83:a7:87:66:
5e:bd:74:ab:9f:ff:42:43:fc:5d:80:9c:95:ba:dd:
49:d3:e4:d2:46:5c:50:c9:f8:05:01:e3:1f:72:fe:
dd:17:4d:68:93:5f:da:d1:d8:11:cd:8b:1d:f3:25:
51:ab:ac:32:55:a8:9f:8a:3d:f8:77:8d:37:51:88:
0e:88:b3:1e:7f:57:21:e2:90:d7:e1:c3:89:4f:0d:
85:b9:30:1d:2c:ae:23:f1:b8:9d:65:9b:d5:4e:95:
8a:bb:89:33:00:34:33:c9:32:3a:cb:8e:ef:cd:c3:
27:93:00:8b:9d:b7:e6:f3:45:e7:66:62:aa:82:ea:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:26:29:AB:FF:32:08:02:DF:CD:A0:B2:14:94:3F:13:36:01:F6:2E
X509v3 Authority Key Identifier:
keyid:14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
29:b2:aa:fc:f7:59:08:06:e9:03:39:88:48:d6:69:3b:0d:bb:
54:52:87:52:2b:0e:e2:e6:99:8b:00:d2:46:65:b6:b3:dc:d8:
25:81:ec:8e:e8:30:68:a1:5d:cf:bb:21:b0:23:73:02:20:b8:
f1:e5:a8:4e:c0:16:a2:8a:31:2a:35:77:22:47:78:54:eb:a9:
21:f5:46:7d:28:ab:6e:c2:c1:69:e1:9f:c1:59:59:8d:52:9f:
bb:09:3d:52:ef:3a:43:14:e3:eb:34:f9:31:1b:66:3e:ce:90:
58:15:43:22:bc:3c:ac:01:db:ce:71:0a:43:94:31:35:f6:70:
d4:43:33:6e:6e:15:a8:b8:f9:38:42:9a:c0:8a:75:6f:0c:06:
a7:4a:72:a7:3b:a8:da:c7:85:a6:33:18:3e:0f:4d:f7:7c:a9:
30:16:2c:c1:11:ae:e1:df:60:d9:89:0b:f2:6e:05:db:87:4b:
ac:a2:e5:ae:24:61:4d:bf:b3:45:39:c2:58:67:be:fc:4d:4c:
dc:e8:c6:7e:89:01:59:45:0b:c1:ba:89:ff:60:56:7c:cb:ca:
d7:05:99:66:12:20:7b:58:8d:e0:8a:85:d3:2e:15:b9:22:6d:
7f:8b:c4:53:49:d0:80:0c:a1:7b:85:80:02:c2:08:04:00:ae:
40:92:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org