Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/nswHJNLpmT1S4b4WUuTHkPWexhE.roa
File: nswHJNLpmT1S4b4WUuTHkPWexhE.roa (raw, json)
Hash identifier: hcMIs0g/xunYiUCa5wERwala6NW7GzuuTPkDAyas1jU=
Subject key identifier: 9E:CC:07:24:D2:E9:99:3D:52:E1:BE:16:52:E4:C7:90:F5:9E:C6:11
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0315
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nswHJNLpmT1S4b4WUuTHkPWexhE.roa
Signing time: Tue 25 May 2021 02:42:04 +0000
ROA not before: Tue 25 May 2021 02:42:04 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 10010
IP address blocks: 203.114.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: May 25 02:42:04 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=9ECC0724D2E9993D52E1BE1652E4C790F59EC611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:86:ab:32:0d:f5:66:d5:31:ab:f6:e6:ba:
a0:7f:cf:8e:20:11:e0:c5:a7:85:c9:c4:2d:17:cf:
ec:63:9e:cf:17:44:68:e3:e6:09:e0:48:ca:ab:a5:
20:c5:e9:23:14:62:50:ee:7f:10:9f:49:24:2e:2b:
c6:de:42:80:d3:cb:34:35:5d:59:ad:5a:bf:0a:81:
fc:7a:ad:c6:a0:2b:d4:50:b2:54:3b:96:34:0b:70:
a1:c7:b1:76:4b:6f:97:44:3d:5a:0d:82:a1:f5:d6:
bf:13:67:e5:d8:d0:0f:f5:60:12:f3:bd:fd:a0:90:
fa:04:33:6b:cb:f3:db:c2:38:1e:69:2d:06:a1:d0:
03:b0:1d:dc:fa:7a:8e:66:a1:b2:fc:8a:8b:74:01:
c4:44:2a:53:cf:7e:b3:1b:c7:79:31:a0:28:6c:e2:
a0:6e:a8:91:dd:6a:aa:8e:3f:11:4b:cc:a6:62:55:
34:08:3f:94:ef:bf:d3:19:08:0f:69:a9:7b:fa:d1:
ee:f1:9e:50:b8:cc:c1:81:71:9b:29:00:47:60:07:
a3:d6:d7:dd:47:22:29:40:16:19:18:a3:6a:56:cd:
20:7c:74:b6:17:5f:ab:dc:b1:48:7a:1c:c8:b0:bf:
56:41:aa:27:fd:c1:c4:dd:c7:45:46:08:e0:eb:3a:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:07:24:D2:E9:99:3D:52:E1:BE:16:52:E4:C7:90:F5:9E:C6:11
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nswHJNLpmT1S4b4WUuTHkPWexhE.roa
sbgp-ipAddrBlock: critical
IPv4:
203.114.228.0/22
Signature Algorithm: sha256WithRSAEncryption
36:66:1e:d3:9b:45:46:29:16:14:db:b4:32:0d:aa:22:4a:f5:
18:6b:02:00:d7:73:b9:ba:e4:5a:85:7c:eb:49:d9:ea:65:c8:
b6:0f:b5:dd:ee:cd:fa:90:b1:ca:25:3f:c4:29:40:9c:1a:4f:
84:92:53:ad:f9:88:c1:77:24:77:c6:0b:c5:ef:a2:aa:02:95:
a9:e0:eb:70:c3:29:5f:ab:f3:2a:ae:87:c3:45:60:a9:6f:e0:
d0:d3:94:49:22:28:4d:81:c3:f8:f6:82:ee:81:6e:07:f7:2b:
e2:66:03:93:78:ab:a2:36:9c:b2:93:90:0c:ea:fa:87:e9:e4:
82:31:b7:2f:d4:26:25:18:9f:90:ed:47:8c:4d:e7:52:49:87:
1a:e7:ad:8c:08:bb:5c:d3:2b:ad:65:9b:41:ff:f9:e1:2d:ed:
7a:ae:41:97:f7:c4:8c:bb:20:65:45:59:18:af:79:e0:21:21:
da:1e:72:bb:8f:7c:09:83:2f:0e:9b:d8:85:7b:23:97:6c:b2:
af:b4:a2:ac:1f:93:bd:39:cd:2c:b8:37:79:47:dd:95:4f:54:
ad:c6:32:6a:4d:bc:b9:13:db:85:5d:72:77:84:69:e7:5f:47:
08:f0:3e:8c:1f:2b:ad:a3:9c:74:49:14:92:ac:ee:96:5a:db:
3d:22:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org