Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Dz0u6BAUC6lM02gVCfLN6fyfx-E.roa
File: Dz0u6BAUC6lM02gVCfLN6fyfx-E.roa (raw, json)
Hash identifier: Qs4oyhLjXzzGKjSdl1lkI6Lod6tfgWafc2TxD61bpgY=
Subject key identifier: 0F:3D:2E:E8:10:14:0B:A9:4C:D3:68:15:09:F2:CD:E9:FC:9F:C7:E1
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 8B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Dz0u6BAUC6lM02gVCfLN6fyfx-E.roa
Signing time: Tue 01 Feb 2022 01:31:03 +0000
ROA not before: Tue 01 Feb 2022 01:31:03 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 10021
IP address blocks: 202.95.208.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:31:03 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=0F3D2EE810140BA94CD3681509F2CDE9FC9FC7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:a6:79:0e:fe:21:c1:0d:57:ed:ad:1a:65:
e0:e4:7f:c4:14:83:b6:aa:4a:68:ee:fd:26:f1:ee:
cb:78:0e:09:8a:56:15:a8:f8:6b:aa:d5:d0:f0:ad:
ae:c9:0f:c2:b5:78:6a:53:92:6e:d9:f7:79:3e:a6:
a0:cf:c4:a1:79:17:dd:09:10:70:b6:dd:63:35:21:
cf:e8:12:83:97:c7:9b:a3:0d:92:5a:aa:1f:64:91:
22:f0:45:23:dc:4f:3a:4a:33:b2:2b:39:a8:c0:e7:
4d:f4:ec:5e:fd:a7:8f:dd:5d:d6:e0:ad:fd:51:76:
ab:39:54:ae:86:4a:ee:2f:4c:cd:9a:89:00:c6:eb:
29:16:04:66:fc:67:15:f5:42:db:e7:cb:95:b0:c6:
4b:12:b1:5e:ab:a4:ca:a7:cb:ee:d6:d3:43:19:bc:
cf:27:fb:a8:c9:5e:94:17:98:b1:ef:73:c5:a3:2c:
c5:f8:de:87:c3:12:ec:e2:15:4f:1e:70:24:df:18:
c1:49:7d:71:15:d7:7b:d9:7e:39:7f:46:4b:88:dd:
f5:1d:7a:d6:75:cc:9e:bd:d4:e2:1c:ea:59:80:a5:
ca:3e:9f:8c:f0:47:7b:6c:1c:27:55:35:2c:9a:e5:
ae:b2:65:72:a6:aa:d0:d8:4a:dc:06:4b:10:68:09:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3D:2E:E8:10:14:0B:A9:4C:D3:68:15:09:F2:CD:E9:FC:9F:C7:E1
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Dz0u6BAUC6lM02gVCfLN6fyfx-E.roa
sbgp-ipAddrBlock: critical
IPv4:
202.95.208.0/21
Signature Algorithm: sha256WithRSAEncryption
36:32:d0:3f:8a:99:4c:ab:58:11:f7:e5:87:c5:45:6d:c0:28:
47:08:6b:d9:b7:3c:d9:83:fe:e1:5b:d2:55:66:1c:99:af:f4:
d7:19:2c:8a:45:fd:e4:ff:5f:a1:86:54:e1:1f:b7:49:11:37:
7b:62:08:d7:de:3f:70:c8:38:6e:63:9c:b4:9d:56:99:ea:73:
de:38:09:71:8c:56:5e:f7:2e:f6:02:48:3e:ce:d8:17:25:f3:
16:5c:db:9e:f8:08:99:8c:cb:2c:c9:03:66:eb:7f:12:cb:48:
9c:70:85:c4:7f:e1:87:28:1c:83:79:91:8a:67:34:4f:75:06:
63:dc:d1:c3:2c:4b:8b:45:44:a3:e8:3f:7e:87:93:40:01:1a:
27:d2:a3:41:f0:93:6a:23:d7:ef:ef:6f:4c:d1:72:aa:b1:c0:
c1:31:91:52:6d:4f:c6:65:8e:80:20:5c:4f:c5:99:94:49:25:
56:aa:c4:7e:d7:52:96:5f:a0:2d:68:d8:62:6a:3f:10:c1:0b:
4f:3c:68:ec:f2:db:ed:c5:76:9f:2b:6d:aa:33:cf:4c:24:4a:
6b:da:4b:56:73:2a:cd:4a:d6:ac:cb:26:0c:a1:dd:9d:32:be:
c1:57:9a:a4:21:71:4a:6c:2d:32:8c:75:57:67:60:a3:3f:cc:
73:3c:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org