Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QKkgn_lkJRisOYYreZnCNflKeMA.roa
File: QKkgn_lkJRisOYYreZnCNflKeMA.roa (raw, json)
Hash identifier: eF75n4vFdBYRS2VAJ50tkuzCsibCjUOGVg6ZJ6RDtXI=
Subject key identifier: 40:A9:20:9F:F9:64:25:18:AC:39:86:2B:79:99:C2:35:F9:4A:78:C0
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0355
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QKkgn_lkJRisOYYreZnCNflKeMA.roa
Signing time: Tue 25 May 2021 02:43:06 +0000
ROA not before: Tue 25 May 2021 02:43:06 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 219.96.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:43:06 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=40A9209FF9642518AC39862B7999C235F94A78C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:df:4e:67:cc:5d:dc:51:ef:e0:8b:a9:44:
74:dd:0d:b6:19:da:41:d3:ba:a0:f6:eb:14:03:7e:
de:bb:46:68:ea:b8:c5:16:19:f7:c4:00:e7:09:66:
55:64:02:66:9e:31:68:f8:e6:1c:1d:63:51:81:d6:
df:eb:c5:34:7e:18:04:e9:78:5c:a9:3d:0c:25:be:
94:49:a9:0f:c8:68:e6:68:8d:c9:fe:8f:fc:6a:b6:
0a:e4:64:5d:3e:56:ef:8e:36:93:78:87:6e:ac:70:
61:a5:34:8d:c9:2b:5a:06:8c:e8:8d:21:e3:07:45:
ad:80:a5:8f:fa:65:10:56:8e:b5:97:58:ba:16:ee:
13:95:75:f3:01:63:11:cd:99:d2:10:a5:f1:d0:1f:
6b:be:3a:3f:6a:23:82:15:50:09:d8:bd:9f:d6:3c:
0e:e9:62:e1:33:72:a6:fc:0e:92:91:8b:bd:98:d3:
1e:7f:85:57:d3:a4:1b:03:34:67:ba:10:bb:58:ee:
3c:fb:09:38:a5:b5:18:e5:0d:43:30:f2:2a:32:c7:
80:60:14:53:1f:49:c8:84:7a:bd:5b:d4:a5:ce:25:
a3:d8:94:db:cc:eb:03:64:ac:21:69:77:fc:64:bf:
a6:4e:39:fa:42:11:21:1b:6c:bb:09:14:e3:3c:04:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:20:9F:F9:64:25:18:AC:39:86:2B:79:99:C2:35:F9:4A:78:C0
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QKkgn_lkJRisOYYreZnCNflKeMA.roa
sbgp-ipAddrBlock: critical
IPv4:
219.96.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:d3:e6:c2:d5:79:60:51:61:11:69:93:d3:56:7a:11:3a:75:
7e:cf:3f:a2:6c:06:00:60:1b:f7:c2:80:cc:1a:9d:94:56:26:
a5:5f:40:2d:0a:93:f9:f2:01:29:1c:f0:6b:07:3b:9a:88:f2:
ec:25:dd:cb:08:cd:d7:6e:67:e4:b0:38:97:5c:8b:e3:12:1f:
47:fa:5d:33:ae:ee:75:13:17:17:4c:25:29:45:49:20:45:22:
ed:47:b0:43:1a:14:4e:54:3e:61:77:d2:6e:0b:10:35:2a:dd:
b9:db:48:ea:7b:87:37:5e:84:64:0f:63:84:60:ee:dc:99:d4:
c3:a8:89:52:0e:f8:c8:2f:80:79:51:0b:54:70:18:4a:67:fc:
21:90:4f:f2:96:eb:d2:04:4f:d5:f4:1c:fe:25:9d:f5:19:a7:
5d:ad:07:ad:d9:a0:57:65:94:2c:9e:78:86:82:02:da:43:64:
0b:6c:38:fb:cc:1f:80:87:1b:80:9a:e9:6a:54:16:c7:03:dd:
ff:ed:69:30:be:34:e3:51:5f:4a:6b:a8:42:d6:46:df:0e:e0:
87:89:bb:35:df:b7:82:56:e1:b0:00:3b:4e:d4:67:92:b1:7a:
47:57:f7:d7:8c:d5:d8:4b:21:4f:4c:bc:60:fc:e7:00:72:a1:
ff:d9:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org