Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZtQIqkShX14PZ9mP9b_rZ6TyMNk.roa
File: ZtQIqkShX14PZ9mP9b_rZ6TyMNk.roa (raw, json)
Hash identifier: HN11Gjc8qkKstd4mCvoFl1Yj6bdwMwvKolhy0EROSc0=
Subject key identifier: 66:D4:08:AA:44:A1:5F:5E:0F:67:D9:8F:F5:BF:EB:67:A4:F2:30:D9
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0357
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZtQIqkShX14PZ9mP9b_rZ6TyMNk.roa
Signing time: Tue 25 May 2021 02:43:06 +0000
ROA not before: Tue 25 May 2021 02:43:06 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 116.68.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855 (0x357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:43:06 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=66D408AA44A15F5E0F67D98FF5BFEB67A4F230D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:4a:d9:c6:78:1f:8f:c8:7d:aa:7f:a8:a1:
bc:12:b4:19:e5:e8:a4:de:9f:fd:e9:0e:ca:1e:8f:
2c:ab:af:45:f1:b0:30:4b:39:09:c2:00:37:44:dc:
29:8e:66:45:dd:89:95:dd:9e:55:2a:99:a6:5e:ce:
84:26:22:8b:8f:10:8f:df:a8:bb:29:04:0a:9d:64:
74:8d:86:80:cb:2f:9b:a2:71:ff:b8:ca:b7:37:e9:
9e:3a:40:50:91:a5:69:e0:53:4a:cd:69:96:d3:87:
27:80:a7:89:66:ed:3c:de:38:76:60:41:ee:e8:09:
7f:b2:d5:0f:06:cb:5d:4a:e1:c6:48:da:04:5d:da:
ab:99:4e:53:a6:42:42:2c:96:c6:4e:bf:28:4b:eb:
0d:00:9c:df:ec:0a:b3:a8:5b:cb:18:b9:05:50:ea:
27:ea:32:70:0f:22:5f:9e:a9:38:53:67:0e:b2:f8:
13:b2:19:e9:d9:1d:51:ab:38:7d:b1:79:3f:0d:66:
4a:44:19:b6:e2:f4:58:ed:09:ba:8e:97:ed:77:0b:
38:17:8b:94:cf:85:d8:73:6d:61:8e:98:02:03:fe:
0a:b7:4d:10:ce:d8:98:f3:dd:cf:f4:c4:22:b8:75:
28:49:b5:fa:f2:3d:a2:95:13:2f:a6:5a:d3:ef:4a:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:08:AA:44:A1:5F:5E:0F:67:D9:8F:F5:BF:EB:67:A4:F2:30:D9
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZtQIqkShX14PZ9mP9b_rZ6TyMNk.roa
sbgp-ipAddrBlock: critical
IPv4:
116.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1c:06:dc:eb:51:d0:82:31:f7:6a:48:43:33:4b:62:a1:65:
e3:fc:fa:cb:85:6c:59:61:15:8d:b0:90:3e:01:36:2e:b7:14:
a4:04:7c:01:94:12:b6:1b:ed:d1:4f:32:82:9c:40:de:e0:3e:
10:bf:11:33:ce:0e:6b:9d:49:88:c0:ae:da:94:74:cc:a6:24:
2c:0d:7a:e7:05:49:4d:4c:c6:ef:8d:50:9f:ce:89:e0:6d:86:
60:a4:19:56:82:3b:aa:bc:df:65:4e:a3:23:cf:36:10:90:8f:
c1:85:49:1e:d1:48:06:97:11:bb:44:90:71:7b:0b:a0:3d:06:
05:9b:57:5e:06:88:9e:c8:4d:93:42:5d:aa:09:30:ec:b3:17:
c5:fb:2a:b8:c2:df:ed:18:5f:d5:13:92:af:ce:82:a2:dd:7c:
4b:08:c2:62:77:92:db:12:4b:8f:af:ee:e5:40:e5:d6:30:f2:
9e:0d:1f:1d:04:81:03:d6:40:2a:30:59:30:64:e1:54:8b:52:
66:ef:82:a3:40:dc:a1:4b:95:41:ae:72:a1:41:41:07:71:ec:
9a:8d:6a:16:a3:a8:52:1c:22:65:d2:ec:d5:fe:7d:f3:7b:ee:
cc:63:42:34:0d:2c:dc:cf:36:0b:2e:53:ef:59:ec:e1:11:88:
11:12:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org