Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/73aYSL7KkpW8-qu5NUaw8DJz1bs.roa
File: 73aYSL7KkpW8-qu5NUaw8DJz1bs.roa (raw, json)
Hash identifier: 6pqnG4jxKx/mJZHtkIqGo7kXSrF1R+jS6uQEu0qKmjI=
Subject key identifier: EF:76:98:48:BE:CA:92:95:BC:FA:AB:B9:35:46:B0:F0:32:73:D5:BB
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 49
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/73aYSL7KkpW8-qu5NUaw8DJz1bs.roa
Signing time: Tue 02 Mar 2021 08:41:38 +0000
ROA not before: Tue 02 Mar 2021 08:41:38 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 117.55.216.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:41:38 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=EF769848BECA9295BCFAABB93546B0F03273D5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:27:28:c4:8f:36:3b:ce:a0:24:9f:79:0f:
9e:50:be:12:58:21:f9:ed:c3:25:97:b4:52:c8:fa:
f3:d7:fc:78:9f:9c:8c:40:05:37:45:b9:db:7e:f9:
57:57:ec:07:50:bc:f6:b9:3c:38:aa:58:8a:48:3b:
6d:d8:4c:51:5a:0b:4d:37:89:27:7e:0d:05:8b:97:
46:48:5f:c0:fc:58:ef:25:91:88:1f:30:01:cf:07:
bb:c8:f7:d3:f0:cc:c4:07:b0:ba:32:90:73:76:67:
ec:4f:45:ea:9a:d1:c2:a1:51:d5:fb:38:95:6e:6a:
57:20:42:fc:7b:4c:af:22:5d:b0:f7:6f:0f:df:04:
ea:da:33:af:09:dd:ed:a1:db:da:b5:01:ac:7c:bc:
81:e2:8a:5a:56:58:78:56:08:d6:9f:de:20:10:a8:
3b:e7:5a:21:4e:bb:a9:6a:73:92:37:e8:aa:50:4c:
09:c3:fb:71:9e:c9:5e:69:bc:d7:cf:e8:c3:1e:a0:
ed:62:03:76:cd:57:c8:89:15:3d:78:8d:aa:34:00:
ad:55:4b:fa:87:ef:cb:89:52:9a:6c:1c:01:89:f7:
6e:54:fa:5d:cf:38:8d:c1:65:cb:54:4f:84:d7:24:
b6:1f:5c:17:b8:cd:80:31:76:e9:e2:3e:d2:1f:ab:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:98:48:BE:CA:92:95:BC:FA:AB:B9:35:46:B0:F0:32:73:D5:BB
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/73aYSL7KkpW8-qu5NUaw8DJz1bs.roa
sbgp-ipAddrBlock: critical
IPv4:
117.55.216.0/21
Signature Algorithm: sha256WithRSAEncryption
45:43:07:90:8a:e9:e9:60:da:a0:db:80:ca:70:cd:be:74:90:
ba:aa:85:9b:b4:5d:a0:8b:b0:d4:06:4f:7a:4f:81:7a:f4:aa:
f6:7b:c3:17:71:8e:4c:2c:e1:1e:1b:ea:e2:1f:98:2d:0b:4b:
8f:d8:33:75:02:4e:8c:f8:74:71:64:ba:54:30:8a:90:ec:fc:
1b:18:ff:83:62:96:01:35:29:71:ca:33:a3:a0:40:aa:43:f7:
96:62:21:10:5b:c9:ed:9b:23:e3:e0:f7:55:9b:3a:5e:7a:ef:
5a:e2:f3:db:e2:dc:59:77:1d:76:b3:4a:83:2d:51:6d:b8:cd:
3d:8b:89:70:4a:9c:5f:87:74:ef:01:d2:e9:e1:7f:67:13:eb:
6e:b3:ca:e1:32:c2:36:26:63:bd:51:c8:e5:3d:93:6f:3e:e4:
0d:f8:a4:b7:59:a1:75:eb:8c:b1:f1:ad:93:ed:f1:dd:cd:b7:
f8:72:6c:91:fa:b6:7e:c6:b8:06:17:db:04:d1:e0:fc:eb:54:
25:9e:37:fe:c0:57:e3:95:e5:88:e1:83:e3:73:c7:91:6d:d8:
bc:39:c5:b5:fc:8f:db:f9:e5:bd:7e:93:87:70:d9:89:94:c2:
23:e1:d5:38:13:e0:40:44:64:4e:90:f3:26:26:91:49:72:c8:
db:e9:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org