Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/mblEiUaZM4y3dVhGeD9B4eUoOO0.roa
File: mblEiUaZM4y3dVhGeD9B4eUoOO0.roa (raw, json)
Hash identifier: f5fnwYGRlNOGfolOhT/MbOyTLWAIVVHYZ6znoTgwB8E=
Subject key identifier: 99:B9:44:89:46:99:33:8C:B7:75:58:46:78:3F:41:E1:E5:28:38:ED
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 80
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mblEiUaZM4y3dVhGeD9B4eUoOO0.roa
Signing time: Tue 01 Feb 2022 01:30:59 +0000
ROA not before: Tue 01 Feb 2022 01:30:59 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 10021
IP address blocks: 61.120.192.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Feb 1 01:30:59 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=99B944894699338CB7755846783F41E1E52838ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:de:5f:34:86:1c:dd:9d:4d:43:f0:99:1c:
46:7a:79:d4:ed:f5:be:dc:eb:3e:a2:3c:d2:15:91:
f6:47:2f:24:21:0e:6e:fa:83:21:e8:ce:c9:fe:ac:
53:62:1f:c7:30:d4:e8:fc:e9:b2:65:e9:c2:67:e8:
d4:23:a5:29:64:6a:84:8e:a5:6d:90:d5:a3:6a:e0:
e8:78:df:8f:28:b2:0a:c4:23:e7:de:bb:55:2a:f3:
59:c4:b3:00:0d:ce:5c:cf:fe:7f:fd:17:c2:31:00:
60:a7:ee:ef:49:2a:0b:72:ee:70:82:90:a8:f2:56:
cd:e1:a5:b5:4b:4c:fb:a8:37:a8:c0:d3:e7:16:3e:
df:c4:b1:f2:9e:66:14:65:6d:7e:3f:e5:d6:e6:4c:
89:6f:78:46:47:6c:72:b1:37:dd:d3:b7:85:ba:f5:
7a:bc:3e:3f:b8:73:ca:62:57:a8:9b:fb:fb:47:8c:
69:0f:fd:59:3f:42:92:2d:dc:b8:7d:28:42:29:cc:
f1:32:37:4c:0c:a7:3d:8e:a5:d5:76:a4:e2:ad:8d:
46:5a:bd:ae:43:bc:34:75:25:6b:9e:9e:43:5e:08:
f1:1f:e1:c0:2f:a1:92:5b:9f:11:d5:d6:c2:57:d7:
71:31:a3:f8:cf:74:74:d1:c5:c8:6e:0f:ee:01:54:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:44:89:46:99:33:8C:B7:75:58:46:78:3F:41:E1:E5:28:38:ED
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/mblEiUaZM4y3dVhGeD9B4eUoOO0.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.192.0/21
Signature Algorithm: sha256WithRSAEncryption
03:1c:30:78:4b:d9:f2:69:be:35:b8:01:45:c9:ef:ab:07:ab:
62:8b:09:17:17:4c:18:30:be:ec:99:b0:44:e9:16:b8:7d:52:
7f:3c:e7:54:19:c4:b9:9b:07:88:71:a4:ee:f7:af:8e:0d:a6:
9f:34:17:47:87:07:a4:8a:22:00:38:78:b5:f7:02:c8:34:92:
48:05:1a:38:11:1d:cb:84:38:9b:14:47:35:37:1d:c3:96:92:
7c:b9:79:6e:1f:2f:09:63:35:14:60:d0:e5:2a:bf:ac:ee:7a:
9d:4a:e8:15:1e:b2:87:f5:ce:f6:50:f9:2f:be:e1:ac:17:3b:
e3:15:f9:56:3b:e6:fb:c5:d9:aa:35:86:ad:36:69:49:54:e4:
85:fb:90:6f:87:2f:46:45:00:60:86:f5:cd:11:c3:58:9e:b9:
b6:01:3d:6e:de:00:ec:0c:fd:d2:98:dc:03:38:9a:e6:68:35:
85:84:ac:61:16:83:11:90:d0:9b:2d:53:ba:f6:10:2a:b7:72:
d6:a8:47:e6:8a:f8:fb:aa:03:58:fe:9b:fb:ae:8a:f8:92:7a:
98:74:95:b8:52:cd:fe:d8:e6:ec:a7:ba:e1:56:ab:28:6f:ce:
f5:ad:93:99:16:82:73:e4:36:69:a6:f5:36:6a:a8:1e:97:ab:
62:2d:cd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org