Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/O7mFnhfOFrZF0kPJU3pTtS2keHk.roa
File: O7mFnhfOFrZF0kPJU3pTtS2keHk.roa (raw, json)
Hash identifier: HH+TpQKb58J84x+Lg1Up6gW5wY+3Z2jQAw3z1jXXfvs=
Subject key identifier: 3B:B9:85:9E:17:CE:16:B6:45:D2:43:C9:53:7A:53:B5:2D:A4:78:79
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0352
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O7mFnhfOFrZF0kPJU3pTtS2keHk.roa
Signing time: Tue 25 May 2021 02:43:05 +0000
ROA not before: Tue 25 May 2021 02:43:05 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 220.148.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:43:05 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=3BB9859E17CE16B645D243C9537A53B52DA47879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:b4:4d:6e:04:cc:dd:ed:6d:c0:72:e8:e9:
de:57:ed:c2:47:5c:bd:d6:fd:b7:fe:f8:6b:5f:f2:
be:2e:68:03:f1:d2:5d:c1:04:7c:51:2d:8c:a6:d1:
d6:8c:2e:cd:ce:94:f1:60:7d:79:8d:33:51:ec:72:
88:1f:b9:1f:ba:91:a5:a9:96:b5:56:d0:10:58:6d:
1c:7f:4c:68:e3:eb:46:77:ee:3a:fa:ce:fc:d6:a9:
0f:20:6e:44:90:c9:ed:cd:6f:8b:77:9b:87:6d:3c:
9b:04:fa:04:09:6b:c7:be:aa:32:9d:e8:dc:43:5a:
83:4b:d8:eb:51:cb:34:9e:ea:87:48:07:3d:ae:34:
e4:af:05:82:af:97:de:57:07:c3:75:d5:9d:0c:28:
b7:00:87:7f:23:c7:ec:3f:6a:88:26:b2:a5:e5:a0:
7c:03:bc:64:df:9f:e8:ed:11:d2:72:d5:7e:71:32:
38:c2:e1:ac:75:3c:09:a5:5f:5e:40:d4:23:c0:0e:
eb:a5:d2:2a:54:0e:da:88:c3:e9:f8:9a:0a:ae:ea:
63:a2:0d:6f:d9:02:06:7d:a4:fd:90:c2:ed:03:c9:
30:7b:f3:14:7f:57:5a:84:5a:7a:08:36:a8:8c:9d:
57:d2:f6:90:52:b7:c8:c4:d4:13:5a:b9:20:d1:aa:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:85:9E:17:CE:16:B6:45:D2:43:C9:53:7A:53:B5:2D:A4:78:79
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O7mFnhfOFrZF0kPJU3pTtS2keHk.roa
sbgp-ipAddrBlock: critical
IPv4:
220.148.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:2b:0a:ef:e2:34:f1:10:d1:37:af:b2:51:29:be:54:fc:6c:
4d:7b:1d:7f:f8:f7:a1:4b:7a:77:d5:19:da:7a:69:ba:2a:08:
85:3c:a5:bf:5c:8c:e7:60:f9:e5:c5:ca:3a:0a:f2:7e:04:2c:
b6:27:c3:87:8a:38:07:e8:ed:0c:c5:06:3d:01:11:8c:ab:b6:
7c:d9:17:35:ce:97:59:5d:0c:ed:0b:fc:76:23:df:e0:ab:e6:
fe:17:86:0b:4a:dd:58:5f:89:b3:d7:35:6c:b7:c8:bd:f1:da:
73:52:f3:7d:d1:c2:8a:04:0f:1e:c0:3d:40:42:d7:df:bd:74:
3c:e3:4c:a8:eb:94:f1:f7:f5:72:ca:65:c7:29:0e:28:42:8e:
4d:2b:d8:3f:a2:ab:17:36:22:54:31:cf:97:6f:58:7a:e7:cd:
ba:30:51:94:06:ce:ad:8f:c9:67:ef:08:d1:9f:cd:36:ae:81:
8a:92:84:b7:62:14:1c:b0:f8:67:ab:a2:d4:6e:6a:ef:d6:1f:
da:c2:66:19:9e:a5:2d:8a:74:c8:54:09:4e:65:f1:96:24:a7:
04:98:a3:bf:0b:93:bf:83:e7:f4:15:21:e4:90:f4:89:0e:9a:
f7:c4:be:ce:fc:f9:ba:bf:10:4b:09:30:75:ff:c3:49:e4:a0:
97:e7:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org