Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/40GuQ5g4SoxXbTyiu1tz8dICVAY.roa
File: 40GuQ5g4SoxXbTyiu1tz8dICVAY.roa (raw, json)
Hash identifier: X/yM22tG+pBDRvXSAOIiXSthp8bEbKuKJRxe4TMV3xM=
Subject key identifier: E3:41:AE:43:98:38:4A:8C:57:6D:3C:A2:BB:5B:73:F1:D2:02:54:06
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 54
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/40GuQ5g4SoxXbTyiu1tz8dICVAY.roa
Signing time: Sun 01 Jan 2023 01:29:22 +0000
ROA not before: Sun 01 Jan 2023 01:29:22 +0000
ROA not after: Fri 15 Dec 2023 01:30:02 +0000
asID: 9621
IP address blocks: 202.81.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Jan 1 01:29:22 2023 GMT
Not After : Dec 15 01:30:02 2023 GMT
Subject: CN=E341AE4398384A8C576D3CA2BB5B73F1D2025406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:30:bd:78:08:6c:20:fe:49:b7:cd:05:d3:ed:
13:fa:4d:3a:cc:81:89:a1:cf:57:a9:c2:f7:a8:9f:
62:ab:b6:cd:83:8c:ef:cb:25:fa:34:57:c2:11:ff:
4a:e0:5d:d7:3c:98:56:c0:c2:ba:04:13:09:14:0e:
a1:cd:bc:d1:a9:e4:cb:28:a7:ec:81:24:f0:4d:50:
10:c6:b3:a8:da:a6:b7:d1:77:e9:21:52:4a:c4:e2:
08:4e:e2:46:74:84:c8:8e:2d:20:ea:a6:d2:2b:6b:
4c:1d:7b:d1:39:b0:35:eb:3d:05:f4:fb:a5:90:8a:
9c:aa:78:1b:1c:ab:e6:ef:39:5e:1b:07:37:7e:69:
2c:58:56:64:2f:02:90:5a:ce:16:3c:af:5f:0f:34:
cc:03:b3:2a:90:fe:ce:e7:7c:34:bb:4c:45:c1:29:
4d:3a:0d:67:c9:af:36:2f:59:5d:38:f2:83:d2:92:
a3:44:f2:1b:e2:bb:5a:52:9a:7e:92:82:14:88:44:
e0:bc:b2:fd:4e:50:ff:ad:59:2f:c8:7e:23:d5:23:
2f:89:9c:fa:fb:60:54:ce:b9:f3:32:e0:20:1e:a0:
24:91:e3:7b:c8:6b:c0:09:3a:be:c2:d7:33:e0:60:
75:b3:83:8a:64:90:0b:0b:f1:fd:fa:b4:a8:09:fc:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:AE:43:98:38:4A:8C:57:6D:3C:A2:BB:5B:73:F1:D2:02:54:06
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/40GuQ5g4SoxXbTyiu1tz8dICVAY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.81.8.0/21
Signature Algorithm: sha256WithRSAEncryption
94:77:42:4e:71:12:9a:78:00:42:a5:20:8e:e4:c6:e8:1d:84:
7c:e0:cd:32:9f:14:57:4d:e8:32:2f:a3:f6:c8:1c:97:60:f4:
57:7c:9a:fe:36:b3:33:d3:5f:9a:f1:8b:bc:84:cc:06:da:d3:
47:7f:7b:84:b8:01:f9:d4:0c:4c:93:1b:f6:87:34:9b:af:e8:
09:2b:d4:f2:d3:34:a6:27:57:79:7b:07:e2:83:50:15:ad:98:
21:13:59:ee:22:4e:be:2f:97:b7:1f:45:21:b3:42:ac:7e:e0:
e5:94:95:a8:38:01:af:74:61:e9:ba:21:31:75:78:6b:5a:a9:
d9:a7:5b:0d:80:df:4e:b6:9e:23:93:bd:22:01:dd:0d:31:41:
b4:b1:ea:9c:69:18:82:6a:d3:7b:41:e4:e9:a0:ef:48:25:11:
4f:b2:92:7e:28:d2:d9:52:8d:0c:68:aa:f9:75:d6:a3:b2:46:
bb:a4:d3:79:3f:ea:29:14:5c:9f:ba:ea:00:85:4f:21:f0:90:
8a:f5:81:e0:56:62:f4:90:43:47:61:3c:1c:50:42:f5:21:07:
57:f3:41:e8:73:dd:3b:1a:f3:be:df:bd:6a:dd:23:ba:3b:eb:
19:5a:4e:78:10:a2:35:cc:2d:9d:07:9b:e4:ff:7c:f8:21:2d:
91:38:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org