Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/YTyZI3rSdIx8yvTOvBQmR4oxemU.roa
File: YTyZI3rSdIx8yvTOvBQmR4oxemU.roa (raw, json)
Hash identifier: 4s109I0wvRoBb98VZ4eHep0DPI/IKccvR4dPgKrJXC4=
Subject key identifier: 61:3C:99:23:7A:D2:74:8C:7C:CA:F4:CE:BC:14:26:47:8A:31:7A:65
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 032A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YTyZI3rSdIx8yvTOvBQmR4oxemU.roa
Signing time: Tue 25 May 2021 02:42:52 +0000
ROA not before: Tue 25 May 2021 02:42:52 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 219.96.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:52 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=613C99237AD2748C7CCAF4CEBC1426478A317A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:1b:9a:d0:69:a9:ce:1a:f8:12:7a:48:c3:
78:54:8b:d5:93:25:d0:60:ab:37:90:f7:a6:5d:b4:
8c:91:df:dd:9f:5c:28:82:c3:4a:77:9b:a6:32:01:
23:50:50:29:21:cf:f0:8b:cb:b8:4a:79:3a:7e:16:
09:b4:c7:2f:1f:50:57:e2:34:42:83:b8:51:53:6d:
0c:9a:22:62:dd:04:23:09:dd:3e:d9:f5:f0:f9:18:
0d:30:62:e1:91:bf:82:a6:04:a2:13:a3:0a:6a:56:
0e:37:41:52:ca:da:c1:2a:fe:8e:20:c0:ac:41:e7:
1f:7d:56:c0:61:07:56:0c:02:cf:30:6b:bd:38:cc:
14:fe:82:71:50:00:eb:87:2b:e1:02:02:6e:de:aa:
7c:84:d1:ef:d5:65:61:b3:44:7d:6b:1a:09:d5:f1:
42:d4:eb:c3:88:db:6c:3a:72:49:3d:d1:91:c2:77:
02:75:f0:23:9a:4e:cb:be:8a:a1:bf:f7:f4:b6:67:
9a:a9:60:4c:d6:0b:65:88:79:08:7d:cd:48:32:84:
71:81:2f:2f:f9:f1:cf:41:2d:9b:71:87:85:63:ef:
76:83:33:b8:76:11:92:12:11:79:b8:93:47:c0:e0:
08:fa:65:a3:b9:52:cd:15:26:c0:07:16:36:c8:0e:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:99:23:7A:D2:74:8C:7C:CA:F4:CE:BC:14:26:47:8A:31:7A:65
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YTyZI3rSdIx8yvTOvBQmR4oxemU.roa
sbgp-ipAddrBlock: critical
IPv4:
219.96.0.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:f6:70:b4:9b:00:0f:ce:b3:be:23:1b:fd:f7:34:07:89:32:
00:23:ce:57:5c:85:8d:4e:e8:29:84:ed:42:95:4a:f0:c2:52:
03:91:6a:d9:f6:2e:e4:28:25:fa:91:0b:03:a8:94:6b:7b:51:
3a:bc:de:5a:df:75:ab:9a:17:79:46:c3:f9:fd:13:7e:d2:c2:
21:e1:00:01:80:49:a4:ab:76:a9:45:22:42:52:4a:06:16:d7:
3c:c6:52:3f:2e:50:bf:0c:6e:97:17:3e:f8:9a:17:cf:6a:72:
4d:8e:12:18:53:97:6d:5b:97:04:2e:6f:3d:e2:8e:a7:6f:0b:
2d:aa:56:98:03:f5:e2:80:41:34:66:9c:fc:80:22:17:55:10:
48:86:bb:c2:4e:09:6e:6c:55:ce:09:4e:40:4e:14:03:3d:d9:
ed:4b:85:ea:5a:31:08:49:a0:41:2d:1f:fa:5c:08:ec:3e:f0:
61:d6:c0:c6:af:92:18:09:7b:01:7c:54:c4:05:de:6a:82:c9:
62:2e:b5:13:80:33:c0:78:8e:d1:4c:51:ba:14:82:f5:b6:fc:
be:5c:f9:54:b0:05:d8:91:d6:1a:bd:df:cb:7b:60:ef:5f:eb:
33:80:e0:56:33:a6:c5:20:a6:9e:e8:cc:28:da:bb:4f:3e:b5:
a2:71:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org