Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/gxAMEkfIpzXsejae0giTOYGE-1E.roa
File: gxAMEkfIpzXsejae0giTOYGE-1E.roa (raw, json)
Hash identifier: YGGf5TaqpDSMN6menVRoVDgKViyFXedqKxWP1Fi2d6k=
Subject key identifier: 83:10:0C:12:47:C8:A7:35:EC:7A:36:9E:D2:08:93:39:81:84:FB:51
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: 3B
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gxAMEkfIpzXsejae0giTOYGE-1E.roa
Signing time: Tue 01 Feb 2022 01:31:07 +0000
ROA not before: Tue 01 Feb 2022 01:31:07 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 9621
IP address blocks: 119.59.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Feb 1 01:31:07 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=83100C1247C8A735EC7A369ED20893398184FB51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:c5:ce:5f:25:cd:c9:be:96:9a:8e:3f:21:
c6:98:c9:26:ee:90:fa:d8:3b:fe:e5:09:7d:54:46:
c3:f3:5e:54:6f:20:ad:5d:45:81:e4:1c:85:d7:4b:
4f:f4:68:98:ed:39:b8:6b:59:26:62:3f:34:10:3c:
4c:a3:f9:85:1d:05:ab:e0:68:ef:9f:c1:0d:c1:5d:
bc:4d:fc:62:86:64:f7:b4:b4:f1:4f:3a:f6:1b:ad:
f8:72:d7:41:f5:12:85:09:15:19:4d:8e:ad:2d:73:
ea:a1:c6:e4:14:53:9e:3e:5c:79:22:91:0c:1a:a6:
26:91:89:af:59:66:48:f9:ff:a4:7b:f9:14:fe:5e:
5a:6a:b5:5d:cc:f8:7a:2a:14:3d:5a:ba:0e:d8:27:
2a:5d:46:c8:9a:d8:f4:e1:1a:94:8a:f2:e0:82:03:
87:67:17:26:f2:60:0f:cc:8b:09:30:65:d5:a5:74:
75:c5:2a:7b:7e:d7:f5:72:a5:1d:f0:2b:97:8b:37:
6d:67:51:83:40:15:fb:99:73:72:0f:e1:fe:80:f5:
78:9c:0c:92:58:5b:8c:31:7f:85:f5:27:25:00:5b:
cc:53:ca:e5:20:8d:26:7b:74:dd:e8:4f:a1:50:0b:
01:4d:12:7b:d4:5f:ac:ff:7a:5e:f7:ba:1f:a9:76:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:0C:12:47:C8:A7:35:EC:7A:36:9E:D2:08:93:39:81:84:FB:51
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gxAMEkfIpzXsejae0giTOYGE-1E.roa
sbgp-ipAddrBlock: critical
IPv4:
119.59.88.0/21
Signature Algorithm: sha256WithRSAEncryption
83:43:69:c2:cb:d3:f4:ff:19:5c:9f:12:6e:ed:a7:1b:54:54:
bf:16:22:52:20:54:ac:00:b4:67:a7:fc:bd:d4:ed:7a:52:8f:
79:ee:a0:5b:91:f8:a4:7b:06:81:04:e3:11:cd:d7:14:4c:a0:
ca:d2:40:0b:c6:75:01:be:9c:4f:f3:3a:da:e6:da:6e:68:7e:
8b:57:95:40:4a:45:46:9b:c1:d6:e9:04:2b:88:25:3e:89:b4:
a7:01:94:84:92:ec:27:e2:61:f6:0b:b8:fa:cf:b8:58:3f:9d:
cb:86:90:54:bb:62:e5:d9:11:fa:50:a4:ef:87:3c:ef:b1:cc:
5d:28:f8:a3:74:b0:46:57:a3:6d:6a:8e:9e:1e:d6:08:15:b5:
a2:08:4e:c8:03:d6:84:e9:87:d1:a2:7d:f5:ab:9b:ba:60:8d:
20:75:15:45:17:6e:cf:92:40:7d:49:f7:60:cd:2f:c1:04:95:
69:f5:88:02:2c:29:ea:0c:9d:ee:8e:02:f4:7e:56:af:21:84:
3b:07:58:50:72:49:f0:ec:5b:b0:81:42:82:cd:2b:e5:bc:51:
86:d6:95:bd:9e:a4:ab:9a:56:f3:f4:d6:81:9a:a8:73:b6:ac:
78:d7:b0:51:3e:31:31:b8:5e:23:d4:64:74:ff:a2:f7:4e:f1:
06:60:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org