Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/k93uik15o17p0-9UpRMC8yUvymA.roa
File: k93uik15o17p0-9UpRMC8yUvymA.roa (raw, json)
Hash identifier: Cgt33Z/K0miBhZZG/3naAVs8qM7Mk/aeTYvs+oJYzPM=
Subject key identifier: 93:DD:EE:8A:4D:79:A3:5E:E9:D3:EF:54:A5:13:02:F3:25:2F:CA:60
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 7E
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/k93uik15o17p0-9UpRMC8yUvymA.roa
Signing time: Tue 01 Feb 2022 01:30:59 +0000
ROA not before: Tue 01 Feb 2022 01:30:59 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 10021
IP address blocks: 27.110.28.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:30:59 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=93DDEE8A4D79A35EE9D3EF54A51302F3252FCA60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:7a:c6:f4:42:6d:62:31:7e:57:7e:7e:5d:
6c:9c:00:92:47:07:ae:93:14:c1:45:ca:8d:0f:e2:
bd:4e:10:b2:f9:20:c7:26:40:27:bd:c3:d4:ec:75:
98:cc:5c:b7:6c:75:70:b6:c5:ae:53:70:9e:b6:4d:
99:0b:9f:3a:2f:33:b5:eb:9a:8e:e6:6c:67:3c:be:
0f:87:6c:f6:29:44:35:85:9f:c7:a3:4e:c9:19:11:
5b:b2:35:eb:4f:28:8b:27:e4:8e:ef:f4:ea:81:fa:
07:5e:89:50:f0:1d:b8:be:9c:06:02:09:c5:fa:4f:
b7:d3:e5:16:ff:c5:e8:08:2e:b2:01:78:71:9f:0e:
fb:3f:de:2d:50:1f:fe:27:37:4c:18:c0:79:c8:27:
53:40:81:25:34:ad:95:f1:90:b4:4c:5f:c5:d7:65:
cb:10:48:89:8a:8f:a6:d2:fe:b1:10:19:76:2d:25:
2b:f6:95:86:35:fb:e2:1a:0b:f7:60:32:47:06:63:
9d:a8:a8:43:61:20:20:4e:47:c0:dd:b8:c1:61:a2:
64:40:80:ab:4a:cb:3e:d9:a1:8a:6e:34:2f:5c:85:
4f:0e:bc:dc:7b:5e:94:b2:87:0c:54:99:04:eb:0a:
8d:a0:ff:6e:a0:77:23:b6:52:f3:04:36:62:f0:54:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DD:EE:8A:4D:79:A3:5E:E9:D3:EF:54:A5:13:02:F3:25:2F:CA:60
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/k93uik15o17p0-9UpRMC8yUvymA.roa
sbgp-ipAddrBlock: critical
IPv4:
27.110.28.0/22
Signature Algorithm: sha256WithRSAEncryption
14:dc:1c:57:c3:a3:4e:ac:95:08:1b:7d:50:c2:7a:e9:a7:5a:
4c:06:07:e9:6c:04:fb:5f:ec:31:99:95:51:3e:f4:84:8d:d4:
30:cc:af:ac:c8:63:b8:92:10:3c:a2:d9:43:41:7f:d9:e9:61:
d3:53:a0:57:fa:cd:49:64:50:07:36:c9:67:22:93:97:28:16:
68:ab:66:ec:be:c9:5b:2b:e2:59:a4:66:16:cb:3f:40:01:97:
7b:3d:22:56:ac:15:9c:62:52:89:5e:5d:13:c9:3b:10:27:b5:
32:2f:16:63:8a:4a:a6:4a:67:8d:1d:7f:f1:c3:3f:b5:36:27:
60:c6:34:19:32:c2:e0:c7:f1:ba:69:92:55:c7:ba:d4:f8:a4:
12:78:eb:77:53:75:2d:31:b4:2f:9e:f3:f3:8d:c0:d6:59:51:
66:9e:4c:96:50:52:04:92:fe:d0:8d:87:82:88:42:50:68:c7:
d8:07:2c:d4:10:34:51:25:20:c3:00:77:40:30:cd:b9:ec:f1:
86:d6:7e:bf:ae:af:d6:76:7f:da:bc:18:55:9c:d6:07:4a:50:
04:01:64:90:fc:7f:d8:b6:2d:67:a0:90:1b:d0:c7:a7:c4:56:
73:f3:21:57:7b:b1:b4:5c:13:49:8c:1a:b9:7d:d9:c0:2b:15:
4d:97:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org