Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/qa3Y5KZUVvrotjh-fjTtMHurhfo.roa
File: qa3Y5KZUVvrotjh-fjTtMHurhfo.roa (raw, json)
Hash identifier: 720d3mraWylM7WPM9/kaKGwTkM0XhZ7y/kG3AphLs+4=
Subject key identifier: A9:AD:D8:E4:A6:54:56:FA:E8:B6:38:7E:7E:34:ED:30:7B:AB:85:FA
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 59
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/qa3Y5KZUVvrotjh-fjTtMHurhfo.roa
Signing time: Tue 03 Aug 2021 00:47:08 +0000
ROA not before: Tue 03 Aug 2021 00:47:08 +0000
ROA not after: Fri 15 Jul 2022 01:30:02 +0000
asID: 8220
IP address blocks: 103.87.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Aug 3 00:47:08 2021 GMT
Not After : Jul 15 01:30:02 2022 GMT
Subject: CN=A9ADD8E4A65456FAE8B6387E7E34ED307BAB85FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:67:5a:ef:44:80:b1:93:e1:c9:d4:e0:9c:
e8:6d:80:b2:10:bc:a2:b2:23:9d:5d:83:04:5c:9c:
b3:98:0d:43:e0:d5:2b:1f:f5:bc:d1:a9:c3:96:46:
82:3c:c9:bb:aa:3f:40:e1:90:ab:c9:4c:bc:59:5f:
f7:8c:a2:f7:06:f1:b3:82:8e:ee:ce:59:2c:96:43:
58:21:80:fc:d8:97:f4:a7:23:c4:66:4c:c3:85:97:
1f:b9:61:a4:9d:e5:06:46:92:4d:e7:22:2e:7d:d3:
8c:c2:20:33:a1:4c:bb:b1:cf:1b:e2:5c:b4:db:a4:
a2:11:00:61:d4:44:f8:99:10:6b:d4:52:bb:54:db:
92:2a:d3:76:c0:17:74:df:b1:a6:71:27:9c:45:20:
e9:05:64:65:ac:11:0f:69:8a:64:83:80:3d:0a:7e:
9c:cf:f6:dc:1a:60:87:53:93:68:65:7d:1b:24:5d:
d9:ab:b5:3f:ca:17:80:37:6e:91:ee:38:1c:a1:b1:
da:78:f7:f2:fc:01:c7:bf:a9:28:2e:1f:08:d3:9e:
c0:cb:ca:8f:d6:45:9c:15:9f:73:b4:7c:68:84:40:
5b:91:92:87:0e:0b:d1:1a:38:a0:26:60:12:2a:f8:
32:be:63:f6:c1:52:30:b6:91:2f:7d:1b:69:15:35:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:D8:E4:A6:54:56:FA:E8:B6:38:7E:7E:34:ED:30:7B:AB:85:FA
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/qa3Y5KZUVvrotjh-fjTtMHurhfo.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:0a:48:9c:04:eb:e8:26:19:c1:7c:b6:2b:f0:e5:d4:c0:30:
02:b9:3c:86:a7:1a:a4:e8:67:c3:24:9f:9d:9c:b9:c4:2a:c1:
8b:07:fe:b3:01:5c:34:b6:dd:6c:70:57:b6:36:11:24:e4:b7:
d7:22:83:35:5a:7a:50:60:ed:05:d0:6b:57:31:9b:81:d5:34:
fe:02:fe:4a:3a:1a:d4:bf:73:38:52:78:ab:2d:d4:da:70:69:
10:73:60:62:8f:88:9c:b9:2f:af:08:30:c5:cc:ca:52:39:a3:
a5:96:69:7c:3f:72:d8:75:a9:03:83:91:a5:6a:42:c0:62:21:
f5:10:6d:ca:93:73:5d:dd:24:dd:32:45:ca:93:3f:39:d5:20:
72:08:e7:c9:d3:f5:f0:06:29:3b:2d:69:95:89:d7:f5:a7:64:
5b:44:fa:0e:84:c3:74:51:e1:15:b5:6f:2f:90:f7:3b:bc:e3:
16:f0:b3:b7:1a:34:e0:ee:25:11:d9:a5:43:ad:97:c4:5d:a4:
66:e1:f5:a6:7a:4f:6f:58:b9:06:79:cb:27:be:af:c8:da:aa:
13:79:21:16:7a:54:79:32:05:e1:3d:44:96:6a:ce:b4:74:06:
b9:26:51:72:eb:75:5b:84:a9:ab:c6:6a:73:89:d2:68:53:86:
b7:c3:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org