Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/IoNSSYt69140M8CKj2p17AUMvc0.roa
File: IoNSSYt69140M8CKj2p17AUMvc0.roa (raw, json)
Hash identifier: WoahfN3OfxhGfhIcgeBKGu2LKkIQpkkYmQcjjVrrlrg=
Subject key identifier: 22:83:52:49:8B:7A:F7:5E:34:33:C0:8A:8F:6A:75:EC:05:0C:BD:CD
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 2E
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/IoNSSYt69140M8CKj2p17AUMvc0.roa
Signing time: Tue 25 May 2021 02:42:08 +0000
ROA not before: Tue 25 May 2021 02:42:08 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: May 25 02:42:08 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=228352498B7AF75E3433C08A8F6A75EC050CBDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:71:58:ee:aa:1e:54:b7:a3:f8:3e:7a:c1:
46:d7:c0:c0:5c:9c:db:b7:4a:5d:93:9f:6f:6d:2e:
14:bd:49:29:ef:46:87:2a:70:cb:82:59:3f:88:0d:
10:04:2b:eb:ea:c7:c3:cc:79:2a:cc:ae:61:de:42:
cc:08:d6:f4:80:f3:45:96:95:b7:2f:b5:c1:a4:d6:
f1:2a:84:17:ac:21:bb:d5:20:fa:24:4b:e7:58:7c:
40:a1:9a:29:f2:f9:94:13:77:a7:3c:b1:f3:de:ff:
84:88:3a:94:92:70:88:0b:e1:60:ae:3a:f6:c9:83:
38:41:07:8c:8e:aa:5f:25:4b:3d:05:16:f1:e6:24:
1d:9b:6d:82:9f:f0:f9:ee:8b:49:8d:0b:e8:91:35:
43:b0:91:c7:ad:f9:18:34:97:e1:81:64:f9:21:c1:
0c:66:ed:55:4a:23:5c:6d:ff:d1:43:77:c5:37:45:
51:55:2f:e0:05:37:ba:2b:c6:37:19:ab:df:f3:31:
ff:1b:c2:87:5a:93:33:8f:0a:7b:6e:1b:b6:7d:1e:
07:44:a5:4d:84:26:25:fc:9b:bb:e0:4e:d4:94:68:
f3:4d:d7:3f:56:15:92:3e:b9:3e:b6:46:db:eb:80:
41:23:2a:95:69:12:72:ee:30:e1:ba:06:5b:e3:e5:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:83:52:49:8B:7A:F7:5E:34:33:C0:8A:8F:6A:75:EC:05:0C:BD:CD
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/IoNSSYt69140M8CKj2p17AUMvc0.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
76:df:9c:41:50:76:9d:dc:e4:99:de:38:e3:ff:57:a6:02:d1:
b3:62:ba:93:4d:11:7d:7f:7f:5a:de:a8:28:f2:cd:a0:02:2b:
70:8b:31:03:3f:34:01:7b:1e:b2:09:4b:c3:21:af:b6:15:74:
ee:87:a0:91:82:8b:5a:b4:f6:24:09:5b:dd:a2:03:fd:bf:71:
0f:e1:bf:a9:74:7f:02:03:aa:e4:ec:a5:bf:b3:b3:f9:91:de:
b5:2e:4f:e2:5f:ce:72:f1:2c:df:6b:94:20:09:1a:e3:c1:bd:
0b:3f:7d:06:f0:9d:26:9c:c0:16:66:17:e9:00:99:6b:88:9c:
5f:da:4b:8d:dd:73:e7:b1:d9:26:27:d5:e1:f2:8d:c3:a4:10:
9f:d2:6a:43:8f:26:96:49:d7:44:76:ba:66:26:66:b0:09:a3:
af:97:3a:a5:9b:1a:22:f3:83:24:2a:f0:24:36:5c:d7:84:7e:
ef:e5:ed:cd:63:20:13:57:20:f2:60:96:fd:b4:0b:96:5d:74:
44:92:62:00:9f:bf:90:2c:fe:01:56:a1:2e:6f:f6:d3:3e:e9:
36:d4:5a:d0:80:a5:69:54:ec:40:8d:7a:3e:e9:01:c1:2b:ca:
8a:25:9c:a5:c9:b4:3e:33:e4:4a:21:84:80:84:25:de:a8:6e:
cc:31:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org