Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/6kjT6T7ibEpRSZIRLPFc2RurQ4c.roa
File: 6kjT6T7ibEpRSZIRLPFc2RurQ4c.roa (raw, json)
Hash identifier: arvl2ynxYKHame6Q5AaHzsaL/Jt6LEt12a5Tx6cowA0=
Subject key identifier: EA:48:D3:E9:3E:E2:6C:4A:51:49:92:11:2C:F1:5C:D9:1B:AB:43:87
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 35
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/6kjT6T7ibEpRSZIRLPFc2RurQ4c.roa
Signing time: Wed 01 Dec 2021 01:28:56 +0000
ROA not before: Wed 01 Dec 2021 01:28:56 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 9621
IP address blocks: 119.59.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Dec 1 01:28:56 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=EA48D3E93EE26C4A514992112CF15CD91BAB4387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:dd:ea:dc:3a:13:88:d8:e8:38:3b:1f:10:
3f:b3:68:77:bf:d0:05:a0:eb:86:56:11:41:eb:33:
bc:11:b3:b7:1d:9d:86:d7:41:69:3d:9b:5e:37:3f:
c3:5b:01:41:31:3f:49:65:31:96:f5:4e:f3:4b:b8:
fd:99:2b:39:39:35:41:e4:20:ad:72:96:9b:57:0f:
4e:b9:d5:da:29:bb:95:f5:ca:f4:0a:2c:f9:3a:fb:
b7:57:e3:84:ae:a3:96:39:d6:05:1f:5e:ee:dd:e4:
90:93:22:8e:32:12:b5:0a:b5:7c:91:0e:b8:53:bd:
8a:28:07:6c:a2:6f:9c:ad:5d:bf:19:34:ce:d5:d0:
26:a5:cc:ef:e4:07:8e:bd:aa:aa:c6:69:d9:c7:24:
ba:40:0f:f2:53:dd:f2:71:17:5e:98:12:0b:b7:2b:
8c:fb:9d:d7:cf:83:dc:57:30:83:66:7f:7f:13:4e:
d1:de:e8:b2:e0:30:11:71:6d:ef:cb:92:ab:2b:ad:
fa:05:8e:9e:99:f6:56:eb:8d:37:29:73:a8:77:d1:
5a:23:04:92:8a:c8:85:62:e3:6c:57:83:99:41:f6:
33:12:40:79:60:c2:8a:7b:df:1b:d5:12:ed:77:59:
b7:a1:f9:b1:d1:20:4a:fa:97:34:49:17:fc:7d:97:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:D3:E9:3E:E2:6C:4A:51:49:92:11:2C:F1:5C:D9:1B:AB:43:87
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/6kjT6T7ibEpRSZIRLPFc2RurQ4c.roa
sbgp-ipAddrBlock: critical
IPv4:
119.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
52:4a:e1:de:c4:eb:76:ca:d0:d4:fa:89:1d:06:b3:ec:d7:90:
7f:14:0f:92:40:e6:9e:8c:18:65:0d:ed:3b:90:d5:a2:34:c2:
d4:a1:78:b9:dc:06:91:d4:a1:50:8b:84:d3:da:d9:3f:23:b6:
f0:ec:f1:e2:c2:82:21:d1:5d:13:e9:28:2f:6d:4e:d4:fe:74:
71:9f:6d:90:3b:10:9f:34:7b:2e:b5:0a:bf:27:72:2f:40:98:
b4:dd:ee:cc:bf:99:76:1e:11:c4:86:9c:db:f8:91:33:36:a1:
c6:1a:ea:c5:06:c6:15:0c:bc:52:a3:01:3e:f0:3c:c4:9f:14:
dc:f0:f1:76:d7:50:49:2d:66:75:1a:37:20:ec:8f:c2:67:3f:
2b:a8:b0:f0:64:5c:c1:20:14:2f:3b:6d:e2:f9:99:51:81:a2:
6b:61:e5:d1:03:89:57:9c:fc:0a:c0:ab:31:81:b1:78:19:0f:
6c:f6:9b:22:62:8a:a2:35:39:0c:cb:79:2b:37:78:99:68:09:
4a:14:43:6e:3b:c5:e1:9b:0b:d9:ff:8d:80:3b:0f:dd:3e:61:
52:33:8d:4c:14:38:53:2e:24:d4:2c:19:36:e4:01:df:50:2b:
99:19:e0:5e:05:7a:01:60:a1:d5:a2:ed:23:02:fa:7b:32:4c:
03:43:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org