Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/QIGbLbEHxYMQ1ix35nJeWb3Bdiw.roa
File: QIGbLbEHxYMQ1ix35nJeWb3Bdiw.roa (raw, json)
Hash identifier: ChWgX89QYNpMut9LPhU0j51fblGXQh2cU0L+664SUds=
Subject key identifier: 40:81:9B:2D:B1:07:C5:83:10:D6:2C:77:E6:72:5E:59:BD:C1:76:2C
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 64
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/QIGbLbEHxYMQ1ix35nJeWb3Bdiw.roa
Signing time: Sat 18 Sep 2021 06:37:55 +0000
ROA not before: Sat 18 Sep 2021 06:37:55 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 7530
IP address blocks: 210.231.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Sep 18 06:37:55 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=40819B2DB107C58310D62C77E6725E59BDC1762C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:2c:a6:2b:85:54:40:fc:8e:b3:41:1d:c6:
3b:79:d7:50:bf:68:a9:d2:53:55:ec:6b:60:0f:05:
bf:41:ec:c7:b2:9b:83:bd:0c:4f:47:89:30:3c:34:
6c:69:09:4f:35:38:d5:47:1f:4f:72:8c:b7:89:a8:
dc:28:03:0e:07:0d:14:46:4d:15:07:d8:ac:bd:9a:
e0:cf:74:c9:0c:85:98:a2:9b:ee:2c:f6:4f:d8:d7:
29:69:1d:fd:3e:5d:62:4c:8a:16:03:5e:d8:ce:2c:
54:ef:0d:1a:5b:d3:49:3f:74:76:17:cd:50:73:c6:
46:80:e2:46:29:5e:61:0a:ec:3f:78:91:d0:38:d6:
dd:77:e0:9a:79:ac:0d:5b:9e:12:cb:5e:10:f8:66:
ad:c9:ec:ae:8c:cb:2c:78:8f:f4:f0:a6:17:af:07:
31:7d:d9:a6:e5:fc:99:35:52:21:f6:c1:3e:41:5f:
31:71:59:64:ca:b5:f0:fa:3f:48:97:5d:88:36:ad:
a4:fa:d1:a3:7a:3a:33:ed:86:c5:7b:f2:de:1a:ae:
5f:c7:23:b8:ef:0c:42:4a:7f:5a:5c:b6:ba:73:8d:
91:93:b7:b2:c8:66:3d:bb:83:0f:83:b6:94:e2:17:
50:27:b3:15:c2:49:40:16:08:a9:d8:d7:28:a2:8a:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:9B:2D:B1:07:C5:83:10:D6:2C:77:E6:72:5E:59:BD:C1:76:2C
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/QIGbLbEHxYMQ1ix35nJeWb3Bdiw.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.208.0/21
Signature Algorithm: sha256WithRSAEncryption
97:96:47:5f:ef:79:0c:2b:ca:69:2f:59:c3:2b:2b:67:9e:70:
d5:3b:64:60:2e:e2:4b:16:86:ac:f5:f2:b7:8a:7f:49:e7:5a:
04:fb:dc:28:05:6a:e3:7c:63:0f:52:eb:0d:d5:96:2c:89:9a:
8e:06:2c:9d:ab:10:7a:2b:4f:d1:6c:5b:85:c1:e5:ba:73:4c:
26:73:12:aa:7d:e9:53:6b:6e:06:26:15:da:c9:bf:85:3a:33:
ba:26:5f:c0:c2:e5:73:ec:45:25:77:e6:18:ca:c0:26:cd:81:
df:06:30:7b:37:77:32:b5:0a:db:f3:40:67:14:44:c5:d5:71:
cd:44:83:47:ec:b7:2a:ea:e1:d0:ab:3f:39:ed:36:0f:71:eb:
67:0e:76:29:ff:c1:cb:6c:72:e4:1a:63:10:f7:37:23:c2:0f:
8e:fb:8a:02:30:15:20:ed:f2:e0:95:73:c1:a7:85:3b:ee:84:
40:0b:2c:cb:21:d8:3a:be:b5:71:ee:9e:4f:33:8e:6f:38:7c:
47:fe:35:70:b4:b0:a3:2d:1a:50:81:a5:72:89:58:60:a9:72:
9e:bb:00:cc:75:63:57:53:d5:50:d8:8c:be:c7:6f:93:74:ac:
42:2f:df:82:28:09:f0:c4:c4:6f:b9:81:15:e7:85:a8:db:0e:
9a:b8:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:14 2023 by rpki-client on console-ams.rpki-client.org