Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/kB_0nhH5-DZ42eUgQd31oWuUFtg.roa
File: kB_0nhH5-DZ42eUgQd31oWuUFtg.roa (raw, json)
Hash identifier: j07jlWzzXYdMuKNsGdQX+pmzAmVIfFs3HCLMYHBUMks=
Subject key identifier: 90:1F:F4:9E:11:F9:F8:36:78:D9:E5:20:41:DD:F5:A1:6B:94:16:D8
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 41
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/kB_0nhH5-DZ42eUgQd31oWuUFtg.roa
Signing time: Tue 02 Mar 2021 08:16:34 +0000
ROA not before: Tue 02 Mar 2021 08:16:34 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 10021
IP address blocks: 61.120.200.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:16:34 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=901FF49E11F9F83678D9E52041DDF5A16B9416D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:5c:d6:83:b1:99:5b:c0:96:ee:9a:92:b3:
78:fb:a9:0a:c1:be:59:48:55:37:95:7f:3f:78:94:
10:73:8e:66:1d:b7:3e:c8:e0:56:c2:57:e4:dc:f6:
40:10:2e:a9:b9:33:7e:ed:7c:af:fb:c9:28:fb:93:
df:07:88:23:fb:5e:14:2a:da:07:49:0f:50:37:b1:
b2:65:7f:70:34:03:a9:0e:33:9a:74:0b:7f:c0:00:
9a:a2:bf:5d:f8:a3:b7:8c:1e:15:38:f9:ac:20:b0:
1e:56:fc:ba:30:e2:32:3c:b6:72:76:29:2e:bf:19:
75:13:8c:48:b7:11:ef:66:fd:0c:35:94:7d:38:b8:
e3:7d:72:3b:7f:92:5e:a8:f6:56:ff:08:63:73:2c:
93:f4:90:98:7d:8c:7e:c8:c1:01:e4:0c:12:3e:80:
f5:da:e0:a0:c5:58:60:9d:5b:f7:74:0e:ba:e8:21:
11:a8:a8:7f:23:88:8d:85:ad:10:c1:cb:c8:98:36:
75:2b:71:45:82:98:7f:01:72:61:24:71:11:09:4b:
f1:b7:44:ec:8c:44:2d:63:8b:66:b7:5b:15:d6:d2:
79:45:25:04:28:92:1e:b0:6d:91:4b:f3:90:21:d2:
b4:f9:d6:ae:dc:ac:e7:bb:d6:bd:6c:71:c7:f9:96:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:F4:9E:11:F9:F8:36:78:D9:E5:20:41:DD:F5:A1:6B:94:16:D8
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/kB_0nhH5-DZ42eUgQd31oWuUFtg.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:5f:9b:dd:ba:d3:71:2a:f1:2f:45:95:02:3d:a8:bb:81:76:
7d:91:bd:0c:e3:56:26:69:70:81:1f:6f:9d:0f:cd:07:8f:53:
60:e0:06:b4:a4:7c:58:11:56:20:2c:8f:26:b9:f4:bb:b7:e1:
8b:54:97:dd:86:86:4a:38:82:85:c7:6a:81:4b:db:29:81:15:
47:3d:42:e0:68:1f:f1:03:26:81:e3:95:6f:10:52:40:b3:69:
c8:5d:53:e1:6f:66:95:de:46:a2:e0:6a:2b:81:77:d8:ef:e0:
2e:17:3a:44:03:4e:9c:08:1e:15:33:54:ad:c1:d8:35:33:d6:
af:f7:79:07:82:52:27:28:03:bf:d9:e2:03:df:51:ad:25:4c:
d1:6c:1e:8e:2e:77:bb:cd:02:00:d8:12:27:81:c6:95:2e:59:
a5:a5:b1:5c:9a:94:22:2b:6d:d6:6e:15:f2:d5:e7:7e:ad:69:
80:e6:0c:0e:21:5b:05:f4:b1:9b:9f:e6:3d:4e:20:1c:ef:ef:
0e:27:5b:65:97:6b:95:d4:6b:cb:fb:3d:53:48:a9:85:63:6b:
c2:6a:3d:4c:28:d6:b2:23:83:f8:f8:83:08:a0:fb:52:68:a5:
bd:5b:d3:98:8a:61:4e:82:79:7f:0e:ee:23:5e:6e:20:89:ba:
0e:12:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:55 2025 by rpki-client