Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/s2ovEYVjOphbZTQDIr29s0xs1eE.roa
File: s2ovEYVjOphbZTQDIr29s0xs1eE.roa (raw, json)
Hash identifier: uZCmwbjovDa13oWr660hy3T+k1Idegpqq8mgbOqhPis=
Subject key identifier: B3:6A:2F:11:85:63:3A:98:5B:65:34:03:22:BD:BD:B3:4C:6C:D5:E1
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 4C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/s2ovEYVjOphbZTQDIr29s0xs1eE.roa
Signing time: Tue 02 Mar 2021 08:51:37 +0000
ROA not before: Tue 02 Mar 2021 08:51:37 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 8220
IP address blocks: 202.95.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:51:37 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=B36A2F1185633A985B65340322BDBDB34C6CD5E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:77:20:d8:5e:6c:77:53:3b:8e:37:85:4e:
b2:a6:8b:b5:e2:65:a6:81:7a:91:fa:c3:7a:49:31:
2a:94:7c:ec:7f:26:5e:3e:df:84:5c:e1:83:3d:60:
0b:57:e4:40:9d:b9:0b:4c:e3:c3:00:d3:7a:e1:36:
0c:46:94:9e:a4:98:13:c1:19:f2:a8:f2:d8:af:dc:
66:ac:e1:cb:64:8b:da:10:f8:b9:df:d7:1a:0b:c5:
a9:5e:46:a4:40:29:cf:df:17:3a:cc:f1:bf:f9:ae:
0a:95:4b:8c:27:b3:b7:09:41:7f:63:02:dd:59:24:
60:29:3a:97:d8:1e:ce:c5:42:b2:7a:e7:fa:70:2c:
92:12:05:3c:e4:ce:12:31:ed:05:fc:0b:25:61:05:
7f:a7:98:0b:b5:14:93:41:29:03:1c:c2:6a:94:de:
0d:9f:e1:ce:89:f6:5c:0e:3e:1e:08:8c:89:7f:d1:
b6:97:9f:30:b4:19:22:e8:f0:86:f5:b6:8a:77:b3:
23:49:d6:dd:4a:fb:63:82:24:73:d1:cd:3a:1c:8c:
18:57:49:76:84:a4:9b:b6:5a:bc:8b:7e:4b:56:d4:
6e:9e:18:70:d0:f9:0c:3b:f2:2c:87:40:a0:36:2d:
f0:14:a0:e4:45:21:12:53:82:7b:91:47:5e:30:91:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:2F:11:85:63:3A:98:5B:65:34:03:22:BD:BD:B3:4C:6C:D5:E1
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/s2ovEYVjOphbZTQDIr29s0xs1eE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.95.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:b7:d5:01:1b:9f:04:a0:46:b1:5d:61:83:05:e7:cb:f0:0b:
2d:fe:d3:aa:be:05:38:89:b0:00:0e:a1:76:a2:e1:da:ef:1b:
47:a4:1b:f2:1e:90:9b:f8:ff:9a:b3:01:72:85:79:73:19:24:
9d:52:09:08:84:4f:3c:18:77:7f:4e:bb:59:19:c0:21:34:ec:
28:7a:02:71:4f:f8:92:42:c3:f7:34:60:3d:ec:3e:a6:ea:6f:
89:52:f8:64:d0:32:c7:42:71:6a:1a:17:e2:56:df:a6:17:7d:
28:a0:a2:50:79:70:dd:d4:22:f1:c7:67:f0:7f:f0:71:0f:65:
2c:2b:b3:32:e7:e9:29:1e:3a:67:ca:e0:ab:2d:10:90:60:ad:
df:fd:2a:6b:ee:73:b0:5f:81:47:a5:b2:32:a3:2a:18:68:b8:
e1:e7:78:e6:3e:7c:3d:f1:87:78:d8:0e:2e:66:aa:53:94:3b:
be:7b:3f:55:85:eb:38:96:3b:9c:91:45:21:96:22:5e:f4:a1:
6c:fd:07:54:29:54:44:23:f2:1f:3d:e8:54:fe:f6:db:16:3e:
cd:cd:55:87:df:0b:f5:75:4c:79:68:68:16:f0:c5:fe:a6:97:
06:b8:c7:4f:5d:25:10:22:32:85:8d:f0:65:c2:f9:9b:e6:a7:
bc:63:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org