Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/ZYmwZk2efhYHIWcgjbtqpnO2BIc.roa
File: ZYmwZk2efhYHIWcgjbtqpnO2BIc.roa (raw, json)
Hash identifier: LXWU+2+qWHCjmTE9kYonfa7t1POUqDdIZhekdjp4E7o=
Subject key identifier: 65:89:B0:66:4D:9E:7E:16:07:21:67:20:8D:BB:6A:A6:73:B6:04:87
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 6C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ZYmwZk2efhYHIWcgjbtqpnO2BIc.roa
Signing time: Wed 01 Dec 2021 05:34:21 +0000
ROA not before: Wed 01 Dec 2021 05:34:21 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 10021
IP address blocks: 202.7.106.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Dec 1 05:34:21 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=6589B0664D9E7E16072167208DBB6AA673B60487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:ba:9b:2a:a4:a1:da:70:f5:b7:90:1a:6f:
ce:7c:9b:bf:3b:6c:cb:69:97:83:55:0c:33:e5:87:
f5:f4:22:a4:05:d8:2c:c9:f2:12:ac:1b:15:fb:97:
03:bf:cf:94:16:c5:02:c0:75:85:99:af:73:24:30:
da:76:7c:24:49:cd:35:9f:63:ca:29:7a:49:8f:c5:
dc:6c:5a:14:d9:55:f7:f9:8c:cc:c8:f8:cf:28:7b:
0e:76:c5:79:58:5e:d7:f4:e5:75:1b:ba:8b:52:2d:
36:65:54:07:42:81:64:69:74:6f:fc:6d:84:cb:cd:
66:b2:21:eb:25:01:8a:79:cc:01:eb:77:c7:38:ff:
df:66:57:34:10:b7:d0:e7:3b:62:37:c5:54:d6:eb:
00:df:9e:7e:6c:6e:a2:84:f1:87:5e:12:fa:ab:47:
ef:f3:c8:64:42:02:41:3b:b3:cb:5c:93:74:ec:cc:
59:b6:e7:33:78:12:c7:a6:59:1b:92:b5:d2:94:40:
af:08:ea:2a:dc:79:99:da:5c:4d:e8:71:c2:a7:c2:
63:2b:cf:f5:2e:37:bb:56:53:28:c2:19:ba:20:6f:
be:4b:f5:42:1b:4d:d2:e3:6a:0b:31:bd:2f:db:72:
77:ab:99:35:f9:b9:86:81:80:92:62:9d:c1:cb:3e:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:B0:66:4D:9E:7E:16:07:21:67:20:8D:BB:6A:A6:73:B6:04:87
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/ZYmwZk2efhYHIWcgjbtqpnO2BIc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.7.106.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:f5:3c:fa:e2:12:d1:b0:28:d1:d7:71:f9:f4:b3:81:38:d0:
b1:bb:c3:56:24:d2:a3:32:ad:70:90:19:1e:1f:22:d3:39:83:
51:8a:9b:01:01:f8:6a:50:ae:49:89:a6:3a:b8:d5:3a:11:aa:
c1:f7:4a:90:f0:d0:fe:40:71:f9:77:d8:10:0b:19:13:8f:f7:
55:65:ca:3d:7c:71:ac:1b:be:45:c8:7c:1b:8c:ea:a5:f8:13:
6e:e7:95:f8:ae:da:07:a8:30:b7:bf:91:73:8a:a4:a8:2e:ea:
74:ba:6e:1a:3b:9c:ef:aa:4d:a4:79:00:17:0b:27:68:f8:ed:
32:91:36:b5:e8:eb:09:9f:d4:e8:3c:c4:db:5c:0b:06:97:1f:
9a:78:c0:db:65:7a:ce:45:8e:4b:9d:65:28:47:36:04:26:82:
53:18:3e:9f:67:b0:cc:66:27:9e:59:da:8b:b8:80:5c:fc:74:
ce:69:eb:cc:96:57:45:55:7f:57:0d:c4:6c:47:02:7c:18:f6:
26:62:9e:33:63:37:fe:de:f3:e6:cb:b2:5e:e5:c6:f5:ea:37:
ba:02:64:80:e6:78:c4:f6:3b:20:4a:a4:b8:34:12:b1:14:37:
62:4d:f0:ba:a6:7b:9b:d3:20:24:56:9f:6e:d4:e3:5e:30:c8:
2b:6c:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org