Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/BESxCcAAdvrJWFDpgciYzwECnQg.roa
File: BESxCcAAdvrJWFDpgciYzwECnQg.roa (raw, json)
Hash identifier: fEaCOpONkqzKrpDt9Rsl7mKOqpgNF/cxOaE70vn4LYw=
Subject key identifier: 04:44:B1:09:C0:00:76:FA:C9:58:50:E9:81:C8:98:CF:01:02:9D:08
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 67
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/BESxCcAAdvrJWFDpgciYzwECnQg.roa
Signing time: Wed 01 Dec 2021 05:29:18 +0000
ROA not before: Wed 01 Dec 2021 05:29:18 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 27.110.60.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:29:18 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=0444B109C00076FAC95850E981C898CF01029D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:64:81:38:a8:03:8a:52:be:66:8e:d2:bd:
5f:eb:fd:87:2b:b6:6b:a1:ca:bd:e9:90:a1:3a:5b:
56:5d:c6:56:c5:b7:fc:cf:7b:b3:5a:23:b4:a8:c5:
51:d9:00:92:ff:7b:bd:a2:48:26:16:14:ca:e6:9c:
6f:1b:74:ff:25:6a:64:66:38:de:ad:d4:a7:e5:9c:
a9:ca:35:21:8f:47:fa:95:f4:00:2a:a2:d9:04:e0:
9a:96:71:3a:13:5e:c2:1b:42:66:86:d1:a3:5e:8d:
21:50:26:a8:3c:06:f2:70:a8:68:71:f2:33:82:c9:
4b:c7:9b:43:64:bd:ae:c7:2f:6d:12:b3:67:e2:b2:
50:32:87:41:3a:60:d7:d6:df:60:2c:bb:76:e3:10:
56:16:5b:8d:c6:20:26:51:97:2d:65:06:e2:f4:45:
77:ff:15:54:0d:62:57:9f:25:73:6f:d3:af:21:12:
3b:a2:ab:6f:23:b9:b6:60:0b:7b:81:25:0a:66:7a:
11:8e:f4:0a:e3:bf:0b:9b:8d:6e:c5:a8:72:30:ed:
c1:97:4f:9a:89:fe:e4:35:47:77:a0:17:24:f0:ec:
b8:3a:a9:80:ee:79:e2:fd:d6:ac:9b:f6:66:b8:07:
d3:8d:f0:22:1d:57:28:aa:2d:b6:7a:36:65:0c:63:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:B1:09:C0:00:76:FA:C9:58:50:E9:81:C8:98:CF:01:02:9D:08
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/BESxCcAAdvrJWFDpgciYzwECnQg.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.60.0/23
Signature Algorithm: sha256WithRSAEncryption
68:9d:c8:69:1c:9d:f4:56:45:39:f6:92:d1:df:76:78:4d:50:
7f:b1:e1:3a:2c:e4:e3:7e:0e:8d:94:d7:f5:80:ff:42:7c:b5:
8a:8c:8f:8b:3f:0a:d6:a7:97:ff:b2:05:38:2e:8f:df:1b:e8:
86:d0:cf:de:55:ea:9e:61:60:39:85:f9:8c:92:13:c5:f2:6b:
af:be:dc:df:36:3d:b5:c6:26:61:65:7c:c9:2c:2c:6e:9f:65:
05:3c:ee:27:d4:e1:fa:80:d1:3c:12:ab:95:7a:22:52:33:86:
41:83:2f:5d:c0:a1:15:ff:21:01:d0:77:ab:95:6a:b7:cc:8d:
a8:8d:f2:8e:ea:5d:d8:9e:9f:29:76:e1:f8:d4:a5:d1:35:20:
f0:0c:89:73:5d:03:24:b8:4e:18:45:b5:5a:ad:3d:1a:d5:b0:
07:33:8a:3a:d5:96:16:3d:f9:5d:b3:aa:0f:ab:fc:f6:84:60:
63:14:d4:17:a3:aa:89:a4:68:d6:98:e2:b5:c6:59:00:a8:cb:
a1:58:56:8f:a4:e1:6c:ad:f8:a7:68:fa:d7:fc:29:10:f0:ad:
0f:23:90:9d:20:43:53:21:b1:fc:bf:5f:a9:ab:75:b2:cd:6f:
b5:b1:17:2b:f5:ff:b6:f9:fa:35:d2:f1:24:53:51:4e:c2:41:
f6:86:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org