Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/fbIWVTM-uKGtRXW7HwWuTn9-ZII.roa
File: fbIWVTM-uKGtRXW7HwWuTn9-ZII.roa (raw, json)
Hash identifier: r39n1NxjMc5CAtPoUYiyfHB/hy4UyvGzPc6CB2zxhjQ=
Subject key identifier: 7D:B2:16:55:33:3E:B8:A1:AD:45:75:BB:1F:05:AE:4E:7F:7E:64:82
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 48
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/fbIWVTM-uKGtRXW7HwWuTn9-ZII.roa
Signing time: Tue 02 Mar 2021 08:41:38 +0000
ROA not before: Tue 02 Mar 2021 08:41:38 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 117.55.208.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:41:38 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=7DB21655333EB8A1AD4575BB1F05AE4E7F7E6482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:bd:87:a4:46:c7:6b:a8:8c:49:78:1f:1f:
e8:60:57:32:16:0c:60:c7:8c:c3:15:23:01:ef:f8:
5b:eb:72:4e:cd:d0:e1:6c:c0:fb:84:cb:38:19:72:
1e:04:52:20:38:c5:9e:bc:ad:67:4a:20:85:e8:a5:
7b:e2:e0:45:fd:e9:02:61:86:7f:75:cb:cf:78:8e:
e7:f4:a9:05:b9:c1:a9:15:84:91:cf:b6:ac:0e:3e:
29:03:0c:8e:04:e8:84:53:06:44:11:87:94:4e:51:
9a:af:e1:9f:d4:92:03:45:28:12:a6:2a:68:cf:02:
53:89:b8:c7:7b:be:06:40:b2:34:78:1b:61:8f:34:
c5:23:be:53:a9:a1:da:59:b6:83:e7:ab:63:d0:29:
ca:c5:b6:9c:b8:28:3f:7c:0d:34:6b:02:0e:75:f4:
10:11:0b:94:a3:eb:7c:35:48:b9:af:16:d3:25:66:
61:71:2e:71:2c:a4:ca:4b:ff:fa:0e:68:50:77:08:
f9:ae:0a:dd:2c:ef:87:f5:cd:e8:b6:8b:ef:0c:92:
8c:37:a5:8b:b1:d7:aa:a5:9e:6f:97:99:12:29:bf:
7c:73:bc:e2:d1:70:39:9c:d2:3a:74:cf:7e:b5:0b:
4a:86:31:7d:4d:83:f8:2d:ea:25:4c:1a:ab:0c:94:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:16:55:33:3E:B8:A1:AD:45:75:BB:1F:05:AE:4E:7F:7E:64:82
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/fbIWVTM-uKGtRXW7HwWuTn9-ZII.roa
sbgp-ipAddrBlock: critical
IPv4:
117.55.208.0/21
Signature Algorithm: sha256WithRSAEncryption
be:3e:9b:13:ff:77:0a:d8:b8:01:e6:c9:12:ec:32:90:b8:c2:
c5:02:39:26:7a:60:35:fb:90:0b:22:8c:cd:d8:ee:71:93:49:
f1:8c:24:79:dc:5c:1c:7f:02:a0:96:0b:4f:36:aa:fd:e5:7d:
90:c8:ea:23:e4:8c:9d:56:d5:0f:55:6e:44:0b:ce:cc:b2:d9:
fe:80:f3:9a:e5:98:f7:87:54:0c:95:cb:b2:33:8b:fc:77:8d:
98:30:cd:0d:c1:f2:e6:6a:39:ee:1f:dd:f2:64:eb:79:b2:13:
c4:5d:19:e5:ea:b1:bc:f0:ce:a6:a9:75:e9:a9:bf:e4:c8:c5:
b9:2a:91:2c:1f:ea:19:03:f3:8c:b6:1e:08:11:76:03:c9:15:
d7:57:88:c8:ae:18:9d:a2:84:7f:40:32:21:d7:3c:94:a6:d5:
02:48:51:d9:2f:79:45:8e:63:be:c1:dc:81:51:03:09:42:29:
1f:3c:93:cd:12:08:0c:3c:55:c2:e2:fb:3d:0b:0d:fc:8b:49:
3d:3d:41:16:76:9e:b8:23:31:8f:93:ef:04:90:d1:10:d4:52:
5a:34:8b:62:09:5e:27:8a:4d:c9:4d:d9:6f:10:da:70:a1:83:
8f:67:22:4b:19:76:b5:dc:85:61:82:1c:ac:2d:b3:dc:fa:2b:
e4:8c:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org