Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Oq-i1vPMe2zkbPCIgxB3jTe1e0A.roa
File: Oq-i1vPMe2zkbPCIgxB3jTe1e0A.roa (raw, json)
Hash identifier: 7I6VkSMQv4xlKyX59n+eOjaW7fg392Wd7ZVFawJidic=
Subject key identifier: 3A:AF:A2:D6:F3:CC:7B:6C:E4:6C:F0:88:83:10:77:8D:37:B5:7B:40
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 88
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Oq-i1vPMe2zkbPCIgxB3jTe1e0A.roa
Signing time: Tue 01 Feb 2022 01:31:02 +0000
ROA not before: Tue 01 Feb 2022 01:31:02 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 10021
IP address blocks: 117.55.216.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:31:02 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=3AAFA2D6F3CC7B6CE46CF0888310778D37B57B40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:5c:7d:98:62:19:2b:f2:dc:60:54:a6:0e:
86:3c:74:c5:84:2e:8d:99:77:44:19:bb:0c:dd:16:
c4:92:ab:35:f8:64:f4:3a:4a:f0:38:e6:9b:f7:b7:
41:1a:ae:b7:a7:e4:f8:e9:79:b2:ed:29:3a:3c:e4:
f2:25:79:b8:f1:13:86:34:59:7e:0e:70:c9:0b:11:
30:a3:b0:2d:80:f7:a6:01:50:6d:43:56:4d:85:9e:
1a:40:05:e7:d5:94:6c:0e:9b:da:9e:ae:6d:7d:5d:
83:cb:3e:89:40:11:fd:e8:17:50:e8:40:df:37:55:
16:56:4b:ba:7c:bc:1d:30:36:eb:a9:80:a0:86:fa:
b0:70:d1:e0:b0:80:d1:bd:a9:e6:c1:ff:fc:81:56:
ed:45:7f:20:8a:ce:99:5f:95:55:16:56:56:81:0f:
3c:dd:e8:a2:f0:21:d1:46:25:7a:45:1b:13:77:24:
be:81:69:bc:58:bd:98:13:60:09:58:8d:c3:52:4a:
af:7a:b4:3f:ef:72:3b:7f:7a:d2:ea:c7:70:56:51:
57:5a:c6:9f:06:27:ce:1c:cd:13:85:4c:88:05:ce:
46:69:ff:a7:5a:17:39:91:da:0b:28:59:d5:c3:c5:
82:86:d1:5c:45:b4:49:c5:6d:71:87:16:a4:65:dc:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:A2:D6:F3:CC:7B:6C:E4:6C:F0:88:83:10:77:8D:37:B5:7B:40
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Oq-i1vPMe2zkbPCIgxB3jTe1e0A.roa
sbgp-ipAddrBlock: critical
IPv4:
117.55.216.0/21
Signature Algorithm: sha256WithRSAEncryption
95:be:aa:46:e9:8a:d4:45:01:d5:b5:5d:3a:fc:ac:e4:f1:d5:
05:5b:ab:d5:fe:8d:27:7a:bf:c8:70:3f:6d:72:2c:86:eb:e7:
ae:ab:4d:4a:98:53:b2:26:40:62:1a:09:03:25:ee:63:94:e5:
a6:fd:40:02:f3:c8:e7:53:2c:01:be:5d:3b:e1:70:09:26:1f:
9c:3a:e8:9f:e3:d5:c8:f2:2d:d1:44:f6:e7:ff:8c:db:28:b9:
95:55:56:69:c1:38:5b:b2:f2:53:83:42:92:19:04:05:33:22:
0a:21:d0:af:34:c0:c4:8d:1c:8a:2e:68:c9:8e:25:35:cc:59:
7e:10:9c:7e:ad:01:d6:38:ee:c4:41:1b:f8:75:c4:e0:54:70:
bd:54:ac:fe:d2:a6:9a:46:7d:cf:68:e6:95:f4:94:1f:ec:61:
7f:be:5e:cd:f4:9f:bc:24:fa:51:08:71:94:54:81:cd:6b:07:
78:17:a2:1f:e9:d4:19:ff:b6:ab:fb:7e:d0:da:02:51:97:1c:
f7:a6:26:51:08:08:b4:b6:a5:7e:fb:54:b8:e3:1a:63:dd:9b:
ab:39:63:64:7d:ff:46:f4:04:eb:b7:9b:e3:32:a9:a4:95:be:
9a:78:0f:44:f0:f5:83:eb:e9:bf:a3:ed:b2:9d:fe:17:b2:f0:
ff:5b:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org