Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/yyCUEFgUGJVxYVG8mA94D7dVDFU.roa
File: yyCUEFgUGJVxYVG8mA94D7dVDFU.roa (raw, json)
Hash identifier: 8JZ/6nlkCybRIDX7uuhWfZ8dnwRWjH1a1o1jSnVIPqw=
Subject key identifier: CB:20:94:10:58:14:18:95:71:61:51:BC:98:0F:78:0F:B7:55:0C:55
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: AD
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/yyCUEFgUGJVxYVG8mA94D7dVDFU.roa
Signing time: Tue 01 Nov 2022 01:28:09 +0000
ROA not before: Tue 01 Nov 2022 01:28:09 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 10021
IP address blocks: 202.95.216.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Nov 1 01:28:09 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=CB20941058141895716151BC980F780FB7550C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:62:76:51:4e:fa:ac:9a:58:ff:b6:02:5d:
91:2d:34:e4:8e:b9:03:9e:65:16:aa:3f:5f:08:b0:
f5:2f:f4:d9:c7:9e:bd:43:68:d9:20:b0:ae:21:a2:
af:7c:83:00:0b:e1:80:81:da:23:3f:bf:89:73:bb:
07:6c:7e:86:c4:bb:a2:b1:a8:1a:35:47:7b:ab:a4:
7d:f3:3c:69:52:53:54:cd:43:a8:e8:af:c1:eb:17:
0e:b5:76:3e:06:3b:d1:57:3c:70:0b:7e:3d:20:d8:
7e:38:ae:b3:ad:a4:30:c7:8e:2b:1f:ab:2f:96:8f:
e0:be:55:6e:7c:b8:14:29:af:d0:00:25:4e:05:6a:
e5:8f:53:5d:b6:64:66:92:dd:62:88:30:81:3a:4d:
b0:44:36:4d:18:80:70:56:dc:f4:b5:83:81:c3:51:
c5:72:5f:2a:9a:a8:8f:fa:b6:be:fe:47:b5:79:ea:
96:56:b2:e5:1b:a2:a5:d6:d9:73:0e:13:2e:a2:61:
d1:36:9a:ec:62:c3:9f:cf:82:9d:8b:97:b6:49:6f:
6c:87:24:27:30:91:0b:72:34:39:35:5b:63:03:de:
01:fb:a9:45:0a:0a:06:91:c9:4e:88:ae:44:88:ba:
09:25:7a:18:8d:4d:ab:1c:10:91:cc:7e:bb:ba:e5:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:94:10:58:14:18:95:71:61:51:BC:98:0F:78:0F:B7:55:0C:55
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/yyCUEFgUGJVxYVG8mA94D7dVDFU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.95.216.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:2c:c5:51:5c:a8:17:05:9b:ae:c5:52:01:1c:f3:0a:d9:b8:
55:ef:c2:29:af:03:77:18:df:8d:5d:b9:04:cd:d6:d5:64:2f:
f2:b4:65:a9:5c:c6:d2:76:5b:2a:c9:bd:58:13:b3:ad:67:c3:
1f:9f:76:fa:f9:71:b8:bc:54:89:5b:42:b3:0c:0e:38:9e:50:
72:b5:c3:9b:83:94:95:66:3e:18:bd:35:b6:d4:69:f8:ec:4d:
62:65:40:bb:fe:5b:a9:ae:0e:0e:f3:b7:90:9f:10:1a:c9:61:
da:87:af:3c:1d:76:36:af:f5:8f:27:91:c8:31:59:59:b9:ed:
89:0e:cc:1a:3b:58:7a:07:c5:0f:50:0a:2b:00:eb:b2:43:b0:
1a:a6:d1:cf:5b:c2:63:a0:be:7f:86:7e:62:75:36:47:fe:f0:
63:a7:24:0c:1d:27:06:f3:10:41:7e:be:4d:34:71:82:d0:46:
ac:9d:ab:9a:4c:1f:13:c9:d6:dc:1f:59:ec:d9:3a:e0:94:43:
30:5d:a0:f5:3d:12:52:68:9d:7b:4e:67:97:e3:bd:9e:d9:90:
99:2a:80:50:a4:e3:68:9e:27:f0:26:1b:8b:3c:de:71:e2:5e:
80:58:36:43:8c:e0:63:31:95:e4:01:de:39:72:b7:f6:dd:ce:
6f:da:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org