Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/x3S-9UKtyUV7KrOC79JceiXoUzM.roa
File: x3S-9UKtyUV7KrOC79JceiXoUzM.roa (raw, json)
Hash identifier: t2+md5/g4k9ED/zjYRhUDgE4X5A9gTR6XZDkkMOYdH8=
Subject key identifier: C7:74:BE:F5:42:AD:C9:45:7B:2A:B3:82:EF:D2:5C:7A:25:E8:53:33
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 44
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/x3S-9UKtyUV7KrOC79JceiXoUzM.roa
Signing time: Tue 02 Mar 2021 08:41:36 +0000
ROA not before: Tue 02 Mar 2021 08:41:36 +0000
ROA not after: Tue 15 Feb 2022 01:30:02 +0000
asID: 8220
IP address blocks: 114.31.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 2 08:41:36 2021 GMT
Not After : Feb 15 01:30:02 2022 GMT
Subject: CN=C774BEF542ADC9457B2AB382EFD25C7A25E85333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:03:7a:30:4a:a4:a5:28:de:e3:71:57:87:
35:8a:06:b3:9a:af:81:0c:21:0b:2f:aa:0e:74:76:
22:c5:13:b6:c8:f5:90:9b:97:de:33:53:8c:a4:88:
76:b5:b2:8c:33:a4:4a:e3:69:33:b5:d5:f2:b1:a7:
b3:9d:26:e2:28:d9:c5:64:29:d0:b4:19:6f:75:28:
ee:56:25:99:f3:7e:a8:2f:3a:76:ea:1c:0a:f8:78:
c4:05:8f:85:46:32:29:66:58:8b:5f:bb:b0:a3:fd:
27:55:f6:ce:3d:02:61:e6:6c:10:8d:3a:b0:bd:28:
bd:24:76:79:bf:70:40:bb:a1:20:d3:48:e3:30:31:
79:02:72:a6:a3:66:4e:3b:ec:4c:09:67:af:ed:0a:
d8:83:a2:b5:9a:a4:5c:2f:d0:05:a0:71:51:8f:79:
91:5a:1b:bc:03:f1:ed:66:47:06:d3:04:c3:6b:9b:
80:b7:80:10:53:21:13:a3:19:05:7a:a3:0a:59:fe:
53:39:82:ce:2d:53:be:32:57:a2:f6:f8:e3:e0:ea:
0f:3b:12:03:f8:58:df:36:c6:f1:69:99:39:b9:71:
38:f3:bc:4a:11:10:a0:71:5a:7d:71:a0:8c:e5:c5:
05:ac:7e:5a:d1:50:ac:aa:cb:8e:2f:93:e2:87:27:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:BE:F5:42:AD:C9:45:7B:2A:B3:82:EF:D2:5C:7A:25:E8:53:33
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/x3S-9UKtyUV7KrOC79JceiXoUzM.roa
sbgp-ipAddrBlock: critical
IPv4:
114.31.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:2e:f3:09:81:e2:50:8b:30:7a:2f:ae:a3:18:49:e4:1b:96:
2b:5d:60:e0:5a:e6:27:ba:cb:f3:84:9f:64:a4:6a:20:0c:82:
23:22:12:53:0a:d0:52:54:f6:6d:4b:75:f6:8c:77:b1:02:b6:
03:fc:5e:0a:a0:b8:90:3b:5d:ba:69:b6:72:b2:cd:89:5c:9b:
bb:e6:63:65:82:60:2e:9e:39:54:84:f2:06:1d:71:de:ea:00:
96:19:fe:49:95:c5:3d:da:f1:44:83:b3:a3:1c:6a:18:5b:27:
27:57:12:5e:7d:ef:dc:49:d0:fa:ba:10:82:0a:cc:43:80:86:
56:e8:22:87:5c:fc:2c:67:b6:e4:d5:ba:ad:19:75:38:84:c2:
54:23:0c:5f:8f:a1:9c:50:f8:70:d2:d4:28:88:f5:9a:d7:47:
37:58:d0:9a:e5:77:a8:eb:1d:c3:d7:d7:3d:f1:c2:00:1c:1e:
4d:f4:93:c0:ac:25:46:20:87:1d:95:03:0c:9c:87:76:72:d4:
7f:22:29:f7:f5:7b:5c:cc:73:10:7c:e7:16:f8:f7:11:bf:0f:
78:0c:0d:80:1e:09:48:10:4d:2a:b1:05:84:69:05:5b:50:6e:
42:77:65:3a:c8:45:06:9c:fe:d0:bf:77:cd:8c:c7:68:48:69:
b4:84:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org