Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/cUPPPOcUOymfbkaK2Hh6A1PX_jk.roa
File: cUPPPOcUOymfbkaK2Hh6A1PX_jk.roa (raw, json)
Hash identifier: e5ObDrQqQBP2I9jA8aUrNl1i9ar7MZjyyjR/TMxNY88=
Subject key identifier: 71:43:CF:3C:E7:14:3B:29:9F:6E:46:8A:D8:78:7A:03:53:D7:FE:39
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 3D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/cUPPPOcUOymfbkaK2Hh6A1PX_jk.roa
Signing time: Tue 02 Mar 2021 08:11:34 +0000
ROA not before: Tue 02 Mar 2021 08:11:34 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 27.110.28.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:11:34 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=7143CF3CE7143B299F6E468AD8787A0353D7FE39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:08:51:c8:16:b6:eb:9b:24:a3:f8:62:bd:
16:05:e0:dc:11:07:ef:94:ef:40:6f:69:f0:30:70:
4b:3c:2d:6f:72:ca:65:a4:29:8b:45:c6:f5:39:5f:
2f:fb:d3:0f:2d:5f:01:b7:90:54:29:7e:f4:67:e4:
10:0b:b8:d9:76:33:42:df:01:03:12:45:6c:5b:81:
12:4c:1f:f1:5b:44:c8:5f:0e:c4:2a:ab:75:13:72:
ed:23:4e:21:24:92:6b:c7:19:34:6b:aa:51:28:62:
db:02:c2:b5:da:65:e9:41:ad:12:94:40:4c:d8:9d:
d1:a5:20:1a:eb:61:f4:47:b4:59:08:b8:f0:af:75:
32:33:06:43:74:01:11:29:0c:22:c0:ce:33:70:24:
6b:57:9d:d3:46:e0:5c:ae:74:2a:72:1d:59:cd:e7:
39:09:ce:2d:88:96:db:f0:49:cc:dd:c9:62:6d:77:
00:cf:88:20:23:ea:e4:81:30:7c:20:b9:ab:9b:0e:
e1:4c:41:da:9f:fa:5d:29:b2:7f:76:e8:5c:35:f4:
fe:47:a5:96:9a:47:79:fc:af:a1:ec:6c:6f:18:fc:
fa:f7:d4:53:98:0e:00:39:54:98:00:22:25:d9:5c:
34:82:09:22:ae:a8:63:0e:21:5f:0e:4b:e3:d0:16:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:43:CF:3C:E7:14:3B:29:9F:6E:46:8A:D8:78:7A:03:53:D7:FE:39
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/cUPPPOcUOymfbkaK2Hh6A1PX_jk.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:22:55:63:9d:3c:bc:79:bb:69:1a:9d:a9:16:92:9e:67:e6:
38:f8:dd:d4:ea:de:31:83:55:6d:18:10:f4:6b:57:8f:68:b4:
43:83:c0:a1:94:34:7c:8f:1b:51:e3:f9:24:d8:b8:c6:45:4e:
ea:ad:a2:41:e3:78:88:ef:4a:18:4c:2b:1c:5b:0c:fe:13:c8:
ad:c3:34:13:5a:11:5a:09:fd:eb:72:09:d6:9b:77:40:09:55:
20:e2:fb:9d:7e:82:65:8d:f0:dc:78:10:39:26:f5:ff:6e:a9:
d6:a8:98:53:59:71:0a:7b:fc:b1:c4:0d:cd:ce:97:66:08:a7:
07:be:85:83:61:1d:6b:8d:a4:f3:c1:c6:5c:25:a8:0f:19:35:
c4:51:de:5f:63:cb:32:7a:5a:fe:44:c2:33:37:37:50:6e:cf:
b6:95:1f:ce:48:e4:bc:71:ae:82:57:2e:53:e7:e6:8e:08:a2:
64:e4:39:e5:6b:74:a7:24:24:40:29:50:67:85:1f:b0:6d:b7:
cd:99:c4:f9:87:bb:e7:b7:41:5c:b2:07:37:05:e2:ed:4c:74:
3c:d7:4a:4b:26:f8:82:85:4f:c6:60:1b:1b:11:53:9c:65:09:
63:1f:7a:e3:34:bb:7a:c6:1a:0d:76:52:7e:68:0c:f9:22:d5:
ef:88:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org