Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/YzEZZ4vmitLPfbyZLrA-93b5QkA.roa
File: YzEZZ4vmitLPfbyZLrA-93b5QkA.roa (raw, json)
Hash identifier: gXp8jqi9v0NgNK6WmrRH2C0Mj5yVsID0ttXGFGHfOCo=
Subject key identifier: 63:31:19:67:8B:E6:8A:D2:CF:7D:BC:99:2E:B0:3E:F7:76:F9:42:40
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 3B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/YzEZZ4vmitLPfbyZLrA-93b5QkA.roa
Signing time: Tue 02 Mar 2021 08:11:33 +0000
ROA not before: Tue 02 Mar 2021 08:11:33 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 27.110.22.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:11:33 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=633119678BE68AD2CF7DBC992EB03EF776F94240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:db:9f:f6:57:8d:43:7a:91:29:77:de:b0:
b9:a3:d4:f1:91:1d:34:c8:28:73:81:98:fe:54:6b:
87:10:3e:7e:fe:e1:e6:7c:79:90:32:a6:34:95:f3:
ba:3d:46:b3:b4:6e:0a:4c:3a:4c:af:b9:bb:5b:3e:
04:32:5d:23:9d:10:c0:d5:45:88:d0:86:70:ae:4e:
ea:75:64:55:9a:31:66:9b:fd:57:15:ea:fd:7e:f3:
d9:c4:42:2b:5b:0b:96:43:62:0e:a9:d9:74:3f:fe:
1a:37:9f:65:4c:97:11:27:68:88:38:2b:6d:72:c0:
a4:09:e1:09:23:51:71:cd:67:de:cf:56:70:b2:e9:
d7:f4:11:95:2f:35:9e:8d:7a:e8:dd:a9:11:a1:70:
91:bb:e8:fd:1a:91:25:f6:ed:43:d5:79:07:54:13:
ad:c7:e4:ab:5a:73:51:a3:e0:90:63:b1:ce:07:67:
ab:33:f3:82:97:c0:8c:91:c9:06:80:ea:16:32:00:
62:ea:37:54:80:c5:04:8d:7d:43:fc:7e:02:b6:4c:
7b:68:eb:9c:dd:d9:41:b9:58:2b:bb:3c:d2:83:e3:
58:5e:39:07:4f:c8:9e:05:65:b7:8b:4f:b4:d6:a0:
e5:bd:55:2f:08:f0:4f:6f:31:69:0c:38:86:cc:8e:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:31:19:67:8B:E6:8A:D2:CF:7D:BC:99:2E:B0:3E:F7:76:F9:42:40
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/YzEZZ4vmitLPfbyZLrA-93b5QkA.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.22.0/23
Signature Algorithm: sha256WithRSAEncryption
19:03:f9:a4:9a:88:3a:38:4b:6c:5a:45:4f:58:66:91:77:c7:
c5:f7:b6:9e:da:f0:c1:ed:af:04:62:33:0e:52:eb:ba:65:eb:
3c:09:c8:1d:3e:bc:e6:d3:6a:e9:c1:bc:40:fd:87:16:23:27:
54:92:61:0e:04:fb:ff:fe:47:73:ad:b0:42:ed:4d:6c:25:f6:
0e:96:a6:5b:1a:39:8b:40:f3:a9:e6:39:8d:52:da:12:9a:04:
08:ab:a5:59:b5:11:a5:79:82:58:c4:8b:f7:b2:13:02:90:30:
dd:f1:f8:27:0a:b3:20:b4:77:c1:c1:e4:58:bf:18:6c:9e:96:
1b:32:44:1d:8f:8b:9c:9d:2d:c4:08:93:3e:b8:bd:5f:b0:65:
d4:ca:2d:03:5c:ad:5e:7f:f8:8b:15:4c:e6:2c:61:e5:66:db:
4a:7b:c4:dc:54:da:c1:24:c7:17:da:c9:a1:0b:47:33:73:b1:
2c:5e:49:3e:43:a4:d6:04:cc:09:47:f2:f6:29:bc:d8:f5:45:
13:bc:19:3f:d4:a9:7e:35:89:5f:b7:9c:df:77:25:c1:5e:8d:
c2:5f:fd:77:04:c0:49:26:12:a9:af:3b:5d:2d:2b:ac:76:17:
69:55:ac:33:31:19:73:e1:d7:ef:55:03:da:ba:fd:fc:86:8b:
5f:b0:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org