Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/PI8Flsw4tp24cxfzjExJ4HESAJg.roa
File: PI8Flsw4tp24cxfzjExJ4HESAJg.roa (raw, json)
Hash identifier: Sha4z5xC+jHQSTzBk7w5p9I3gGnQa+Y3CDwBi+thI8U=
Subject key identifier: 3C:8F:05:96:CC:38:B6:9D:B8:73:17:F3:8C:4C:49:E0:71:12:00:98
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 87
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/PI8Flsw4tp24cxfzjExJ4HESAJg.roa
Signing time: Tue 01 Feb 2022 01:31:01 +0000
ROA not before: Tue 01 Feb 2022 01:31:01 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 10021
IP address blocks: 117.55.208.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:31:01 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=3C8F0596CC38B69DB87317F38C4C49E071120098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:03:d0:89:ab:6c:77:64:4c:10:8c:c1:4b:
92:28:8f:fe:af:7d:be:e3:4a:ad:c7:fe:0f:79:c5:
5d:3e:02:91:c0:22:79:7e:38:d3:d8:2f:06:02:1c:
87:a6:88:66:a9:72:79:75:90:f8:72:35:e3:a7:1a:
1c:da:2f:64:4b:c6:64:e3:d1:fc:8e:1c:ea:4f:02:
2a:97:85:c4:ad:a5:73:11:ab:24:9c:0d:24:83:e7:
60:12:8b:c9:19:d3:f4:45:4d:bd:44:c6:c8:c7:58:
27:7b:9b:32:4c:78:48:a8:cc:ea:b8:b7:70:70:fd:
71:c1:7b:21:89:1a:44:80:78:49:77:f0:81:d9:3a:
8d:14:83:83:51:6d:ad:23:8c:51:3e:4a:d3:e6:06:
fa:66:3f:5a:ac:a0:21:79:4e:85:92:dd:f9:84:a9:
34:31:4d:23:6a:d2:0a:1f:07:e9:57:7d:fc:08:9f:
3c:27:3c:a4:a3:35:23:bd:d0:22:2e:5f:55:9b:1e:
07:0e:53:67:ec:e1:9f:db:e4:79:17:5c:2a:e4:1c:
30:31:19:c5:d7:9e:3e:19:20:3a:cb:02:0e:4a:1c:
1d:11:f3:f1:10:9c:8a:67:0d:71:83:7c:44:02:a0:
f7:e7:49:01:e5:30:47:4d:8e:8c:61:fc:c0:83:b2:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:05:96:CC:38:B6:9D:B8:73:17:F3:8C:4C:49:E0:71:12:00:98
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/PI8Flsw4tp24cxfzjExJ4HESAJg.roa
sbgp-ipAddrBlock: critical
IPv4:
117.55.208.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:b3:06:3a:80:0a:bc:dc:2b:b6:7b:18:a2:d8:ca:17:de:ee:
41:e1:46:c1:cc:58:07:cf:1c:22:95:c9:d0:85:72:55:3e:cf:
69:1f:05:3f:b1:26:d6:00:ae:be:99:8d:95:1d:22:67:c3:4a:
df:fb:36:19:d0:ca:2c:b8:87:03:dc:66:8f:7a:a4:b3:89:2e:
0e:9e:b2:1e:e5:48:52:4a:bd:a7:3c:ce:9f:08:1b:e3:14:81:
3d:7a:c7:10:e9:07:18:77:c5:5c:27:53:8a:ac:ab:27:3f:b9:
d1:9f:8b:bc:95:ed:e2:4e:3f:ea:ba:06:45:65:30:f6:e3:cc:
40:3e:66:dd:ca:a6:8f:28:26:ea:0a:1f:7f:d2:f7:eb:54:0d:
8f:f7:5d:b3:34:db:9e:db:a4:c4:b6:53:67:62:9d:31:2f:c4:
d3:69:ee:8d:1e:7a:08:78:b8:46:9f:05:9b:50:6c:52:4f:b9:
98:da:9b:cd:1f:e2:23:cd:bd:a3:d8:d9:a6:ba:07:84:54:1b:
91:e1:29:cc:a8:8b:7a:a3:ab:2e:89:0f:f1:e9:8e:42:bc:fe:
5f:ce:46:9a:86:64:9a:c9:28:4b:ea:17:75:d3:c1:0f:33:3a:
ae:e4:7a:8f:7e:b8:75:9c:72:b7:39:fd:14:50:ba:6d:67:f4:
9b:25:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org