Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/hJYgd1rmsNaLgTwXsfmnRZPBNRk.roa
File: hJYgd1rmsNaLgTwXsfmnRZPBNRk.roa (raw, json)
Hash identifier: 5ka9+5SRuIgCJ4W2s4n4xc+9bza7ShYaC2+dG9aiZqc=
Subject key identifier: 84:96:20:77:5A:E6:B0:D6:8B:81:3C:17:B1:F9:A7:45:93:C1:35:19
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 83
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/hJYgd1rmsNaLgTwXsfmnRZPBNRk.roa
Signing time: Tue 01 Feb 2022 01:31:00 +0000
ROA not before: Tue 01 Feb 2022 01:31:00 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 8220
IP address blocks: 114.31.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:31:00 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=849620775AE6B0D68B813C17B1F9A74593C13519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:62:95:87:40:a2:fa:28:bf:04:f8:65:2e:
c0:3e:15:62:7e:7c:e0:a4:39:a5:1b:e7:e8:df:8c:
56:51:eb:02:fd:6e:6f:d0:9c:c2:b1:4c:d8:5e:d3:
5a:21:ff:b4:4c:3d:a2:71:6d:37:da:09:2a:d3:43:
59:55:0d:80:9f:ee:ed:1e:b2:96:ee:44:55:a8:75:
ac:33:aa:07:ac:67:5c:03:b8:37:cb:f5:e6:2b:9b:
27:c0:28:1c:28:f7:88:15:78:dc:6f:a0:14:27:ee:
0d:6b:d4:48:81:b1:fb:71:2d:4c:27:cd:75:97:44:
1a:fd:a9:dd:fa:aa:25:64:d6:52:c5:05:76:01:e4:
9f:19:11:2a:07:2b:5d:bc:37:ef:ef:eb:bc:28:d0:
3c:2e:42:5a:40:be:79:d3:0e:93:3d:7a:67:e3:79:
f3:6f:b4:dd:93:37:3a:82:94:53:b2:bd:68:50:dc:
36:58:5b:70:a3:cf:d9:d5:d6:12:97:b2:0d:c2:85:
3f:ed:03:05:bf:ea:7c:d1:01:31:9a:05:49:86:d6:
56:3b:96:2e:50:de:b3:7c:ad:6b:2e:48:e9:52:81:
28:23:20:be:bb:bb:0e:4e:3d:8b:9a:86:dc:a9:62:
64:05:5b:02:74:ef:e9:34:b0:06:2e:d9:9b:c4:9f:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:20:77:5A:E6:B0:D6:8B:81:3C:17:B1:F9:A7:45:93:C1:35:19
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/hJYgd1rmsNaLgTwXsfmnRZPBNRk.roa
sbgp-ipAddrBlock: critical
IPv4:
114.31.80.0/20
Signature Algorithm: sha256WithRSAEncryption
85:0a:f7:c6:30:ef:3e:be:b2:10:e9:b9:ce:7d:2b:8a:a4:28:
41:9d:d1:f5:4a:27:ea:45:2d:df:fc:77:51:78:0f:a0:46:4a:
a2:2b:16:c9:1a:08:02:80:36:75:48:75:d1:cb:c0:dc:a8:3e:
af:58:4f:2f:ba:2a:0f:e2:46:1d:ab:7e:3c:eb:67:a8:80:8b:
42:4f:c4:f1:28:00:db:4b:1e:f0:15:f5:e2:c6:23:5b:93:9d:
71:87:08:0c:8a:4b:cd:9f:c8:75:01:56:1f:a9:08:0a:29:6b:
b6:8d:2d:d6:08:b1:12:54:a6:90:3e:01:7c:d0:e7:4a:df:df:
97:b4:07:63:2f:f3:df:3b:ff:28:f4:fa:a6:f5:26:64:90:43:
32:1b:7b:25:3d:1b:df:de:4d:8a:0c:4b:4d:bb:d4:a5:fd:f8:
c4:3e:67:be:7a:22:ac:6e:85:96:bb:cc:e8:d3:35:a0:10:9a:
a8:19:78:a0:02:38:24:8a:5e:d7:46:3e:61:5f:6b:92:75:a8:
e3:d8:0b:10:cf:0e:84:2a:53:f5:6c:da:94:42:68:91:54:cb:
81:1e:b7:e4:52:eb:1f:8b:69:6e:08:ea:d8:21:29:36:5f:81:
56:24:bf:a2:fb:bc:58:be:0b:a5:65:8e:96:f3:10:62:28:81:
30:15:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org