Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/cYrvWpM08Cbuw5LEG8USJSrDr0s.roa
File: cYrvWpM08Cbuw5LEG8USJSrDr0s.roa (raw, json)
Hash identifier: Q2ZmA20T9DXDho/9ZDVcS/GMHEyGqooCjlj+lhbiHqM=
Subject key identifier: 71:8A:EF:5A:93:34:F0:26:EE:C3:92:C4:1B:C5:12:25:2A:C3:AF:4B
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 7C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/cYrvWpM08Cbuw5LEG8USJSrDr0s.roa
Signing time: Tue 01 Feb 2022 01:30:59 +0000
ROA not before: Tue 01 Feb 2022 01:30:59 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 10021
IP address blocks: 27.110.22.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:30:59 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=718AEF5A9334F026EEC392C41BC512252AC3AF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:f2:36:70:e9:77:ad:8e:87:97:58:ca:d1:
e2:41:54:3e:db:c8:bb:c9:48:04:15:a4:e0:f1:b7:
3d:4f:0e:39:52:83:2b:2e:53:55:91:60:e3:41:e6:
0b:08:6e:7e:bb:0f:51:c4:e2:30:0b:28:14:3b:d9:
1d:e5:a4:59:8b:1c:12:0b:b6:85:83:38:11:d6:42:
13:d6:57:3f:14:b3:4b:49:e0:8a:f7:95:dd:b3:df:
13:6f:aa:00:77:59:0e:4c:3b:b0:87:ce:70:75:b0:
6a:c3:6e:66:dc:15:00:f5:a6:e2:ed:97:9a:a7:ec:
cc:eb:45:cc:a7:58:5e:88:85:31:c8:fc:40:8f:6b:
2a:ff:1c:dc:82:0b:81:49:f5:81:52:ad:d6:04:49:
f9:79:b8:58:7e:a8:cd:67:d8:9f:f8:10:49:ae:11:
cb:02:23:b1:73:2f:ad:a3:0c:94:fa:c1:26:f2:ae:
09:99:93:9d:81:f8:da:f2:07:c4:80:18:52:f2:4e:
15:52:58:31:f4:e4:3b:6e:87:7d:67:25:2a:84:3b:
5b:80:a2:00:40:94:1e:da:88:3f:55:dd:98:ed:d3:
c4:73:a5:47:b0:9b:35:20:34:86:2d:d7:93:ff:47:
14:85:10:cc:5f:90:e4:a6:f8:cb:ce:81:d0:de:b0:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:EF:5A:93:34:F0:26:EE:C3:92:C4:1B:C5:12:25:2A:C3:AF:4B
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/cYrvWpM08Cbuw5LEG8USJSrDr0s.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.22.0/23
Signature Algorithm: sha256WithRSAEncryption
54:a4:33:04:f5:b8:3a:fe:d9:14:bf:50:4f:6b:36:bf:3c:13:
5e:5b:c6:5e:c9:53:c9:dc:bc:93:19:01:76:5e:b3:66:42:b1:
fb:d2:3e:05:26:65:bd:ab:04:00:49:36:99:80:d0:93:76:5f:
5b:c7:6b:e7:54:1b:63:33:66:40:04:be:e4:47:eb:fe:cb:4a:
13:d2:e9:3f:f1:e4:0c:15:9e:42:8d:42:29:2b:af:ad:f0:e1:
b0:70:ec:1c:31:76:be:7c:b4:fe:2a:fa:26:4b:e3:c1:79:02:
66:25:a5:97:b2:a8:78:e2:1f:dd:7e:04:ef:a6:c3:50:2e:4b:
7d:97:9f:92:d0:34:52:ca:ed:3b:7a:b8:0b:b7:36:fb:95:4d:
d3:c2:22:e7:d9:8f:df:2d:28:7f:10:6e:bf:26:a5:ad:49:ee:
03:2d:91:e9:43:e1:fb:ec:87:a4:bf:7f:57:a7:97:ab:ce:c9:
b5:dc:70:1b:3b:93:0d:51:d7:3d:1e:39:3d:f8:dd:ef:ce:77:
6e:43:c8:cd:7c:57:26:b5:86:7a:8a:49:0f:e6:cd:56:f9:36:
dd:91:67:a5:19:d9:0f:0f:df:5f:a5:a8:7d:d8:09:75:50:cc:
2f:30:04:5c:21:bb:bd:d6:8a:76:d9:90:1b:12:3d:cd:d5:e1:
ab:a6:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org