Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ZkOyUYagkjCmdFddQo_uFllOYbU.roa
File: ZkOyUYagkjCmdFddQo_uFllOYbU.roa (raw, json)
Hash identifier: 7mHguPCBOrmSTgdiErNiDy07s8FGFN3TJVK66O/M8EQ=
Subject key identifier: 66:43:B2:51:86:A0:92:30:A6:74:57:5D:42:8F:EE:16:59:4E:61:B5
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 32
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ZkOyUYagkjCmdFddQo_uFllOYbU.roa
Signing time: Wed 01 Dec 2021 01:28:56 +0000
ROA not before: Wed 01 Dec 2021 01:28:56 +0000
ROA not after: Tue 15 Nov 2022 01:30:01 +0000
asID: 9621
IP address blocks: 119.59.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Dec 1 01:28:56 2021 GMT
Not After : Nov 15 01:30:01 2022 GMT
Subject: CN=6643B25186A09230A674575D428FEE16594E61B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:7a:2f:d1:bc:b1:9c:bf:5a:9b:37:73:13:
0f:d8:76:e8:c3:c3:da:ad:11:46:67:17:be:4d:09:
b1:04:0a:c7:9f:e8:51:32:36:a6:13:00:f2:26:28:
2e:89:d5:33:d1:be:fa:0c:b5:95:fd:c0:5e:0a:13:
96:e6:c4:08:b0:6d:de:74:2c:d9:7b:6f:e3:e4:95:
4d:56:b2:5f:8f:a0:1f:84:52:7c:88:cc:7d:68:75:
8c:e1:40:3f:52:67:14:a1:78:da:a9:f5:da:ee:f5:
ef:03:b2:f7:2a:17:ca:28:7d:dc:89:da:8e:03:bd:
96:7d:1b:c9:f5:7e:67:86:15:f8:69:3a:32:52:7f:
19:14:8d:38:6c:2d:57:4f:11:6a:ca:86:3c:2f:00:
d2:72:b8:58:1c:81:d5:ab:44:75:ed:46:54:53:99:
a8:ca:10:11:1b:1f:1b:5f:70:47:a6:6e:14:ce:47:
49:4f:80:85:63:2c:61:d0:9b:a2:f7:e2:08:04:66:
be:63:00:62:98:1e:d0:ea:11:01:51:53:cc:4c:9a:
97:b6:5b:36:98:57:05:51:01:59:03:fc:09:c9:92:
9e:16:a8:c9:f5:a6:58:96:72:dd:38:8d:ca:11:3b:
0c:5c:cd:70:50:84:e7:f0:ca:0c:2b:20:f3:58:36:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:43:B2:51:86:A0:92:30:A6:74:57:5D:42:8F:EE:16:59:4E:61:B5
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ZkOyUYagkjCmdFddQo_uFllOYbU.roa
sbgp-ipAddrBlock: critical
IPv4:
119.59.88.0/22
Signature Algorithm: sha256WithRSAEncryption
30:d1:73:9b:29:20:af:75:ec:b1:32:df:db:e1:b9:94:b1:41:
24:a4:ca:69:8c:72:b1:81:ff:8e:c9:8c:97:51:53:c4:4f:5e:
54:f0:9a:45:f6:bf:13:a8:c5:2c:a7:93:36:43:87:32:20:46:
16:b9:2a:82:12:ca:e2:bb:30:db:f2:92:fd:31:56:85:16:21:
34:1b:e9:b9:ae:a5:cf:b5:b1:34:4a:0e:a8:26:25:88:cd:8c:
63:31:df:04:33:82:85:73:e7:44:03:cb:80:e3:61:51:28:c5:
ec:11:5d:eb:8d:1a:84:7f:b9:86:90:b4:63:c8:f2:e7:df:61:
53:bd:0f:e6:b6:db:28:e9:ef:ba:f1:e7:4c:ea:95:c5:ee:34:
91:a9:6f:aa:2d:8a:8a:c0:8e:0f:e5:94:50:a2:d4:15:f5:01:
78:a7:b8:0c:8e:03:59:61:31:99:68:4b:a0:13:86:1e:c6:c7:
ad:ac:ee:10:e6:9a:4c:e4:ba:7b:b2:f7:ff:55:c2:f3:76:91:
9d:80:f9:ef:92:56:34:d4:74:f4:cf:a8:0e:bb:5e:48:ba:51:
eb:3d:fe:b2:8c:48:b0:f7:60:b5:b9:bb:0c:09:ba:25:9b:44:
27:23:78:7d:5c:68:66:4f:ed:f9:b7:af:f1:c1:30:d1:92:05:
ea:f1:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org