Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/4Qf7NkrTIHbZneVF8t-tsSJ92lQ.roa
File: 4Qf7NkrTIHbZneVF8t-tsSJ92lQ.roa (raw, json)
Hash identifier: 70AB1rsa/0sQOOCdAk9W31GmqxDdyvHkEez8ibAS0Dw=
Subject key identifier: E1:07:FB:36:4A:D3:20:76:D9:9D:E5:45:F2:DF:AD:B1:22:7D:DA:54
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 26
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/4Qf7NkrTIHbZneVF8t-tsSJ92lQ.roa
Signing time: Wed 20 Apr 2022 09:17:21 +0000
ROA not before: Wed 20 Apr 2022 09:17:21 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 210.174.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:17:21 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=E107FB364AD32076D99DE545F2DFADB1227DDA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:ee:43:e5:2f:f8:70:f9:94:78:34:e3:79:
8d:61:8a:7e:cc:f9:97:49:d3:37:fd:3b:67:5c:b7:
37:57:d6:28:99:16:91:b1:a6:71:01:ba:8e:d6:98:
88:f4:45:6e:ff:dc:b4:de:50:2e:48:19:4b:b9:94:
0a:45:fe:ad:7f:69:ab:d9:0f:73:b0:17:f1:f3:be:
1b:83:10:3e:88:ed:42:5c:42:2d:98:9e:18:46:ae:
98:50:34:4e:8a:6d:1d:e8:fd:de:88:d4:bf:47:fa:
9a:00:fa:4b:52:f6:ad:58:a6:76:8f:af:de:18:43:
83:4e:36:f6:aa:37:ed:67:6b:07:8f:c9:69:86:b1:
83:c8:f5:c7:a7:9b:49:78:8b:a9:eb:fb:03:95:30:
8d:c3:fe:76:c5:31:66:c4:9c:32:03:f5:e2:24:6e:
50:7a:76:bd:cc:7c:f9:b2:28:4e:ec:f6:69:66:3d:
e7:da:b1:4d:49:85:bb:cc:04:a0:a7:a3:bc:ad:38:
73:9b:ab:45:8f:73:57:cf:c3:53:c0:36:a5:d4:49:
30:a5:04:4e:59:66:a1:72:55:55:12:cc:97:37:ef:
13:43:00:f3:6e:08:85:d6:b9:8c:ed:5d:2b:c1:57:
d7:8f:fb:23:cf:48:80:be:4d:8d:12:8b:93:35:3d:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:FB:36:4A:D3:20:76:D9:9D:E5:45:F2:DF:AD:B1:22:7D:DA:54
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/4Qf7NkrTIHbZneVF8t-tsSJ92lQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.174.128.0/17
Signature Algorithm: sha256WithRSAEncryption
56:ba:6f:1c:08:63:61:89:ba:9b:c5:95:92:ab:4e:36:f5:77:
c5:d1:b4:98:50:f1:34:a6:78:37:38:14:4f:e2:aa:aa:4e:6c:
94:31:a4:a6:33:1b:99:df:49:3e:34:3b:e7:c6:c8:f1:80:40:
6f:42:a0:c0:37:12:30:d2:a9:d8:dd:f1:52:bf:c8:6a:89:ec:
ec:e9:07:84:13:93:aa:29:1c:ce:ea:60:db:e5:42:d9:5d:33:
e0:50:2e:f6:0c:63:28:0f:cb:35:6b:14:66:c5:dc:0c:5a:99:
e5:82:af:8d:a7:65:48:a9:7d:c1:0d:b6:09:d1:e3:fb:43:16:
68:b5:8a:92:54:e8:67:51:a6:11:12:07:ae:24:2b:cf:55:d4:
22:1e:04:e2:d5:ec:1a:9c:cc:5f:8c:95:50:23:6b:07:ce:8f:
91:3c:a1:8d:16:99:cd:02:61:be:9b:cd:ed:53:89:0a:21:37:
71:c5:6f:72:1a:83:8e:f9:c2:87:ee:ad:0e:f0:81:11:7d:cb:
12:34:73:0f:96:58:6f:fa:04:90:ea:be:51:90:21:e7:05:b8:
a5:aa:3e:6a:5a:2f:da:b6:2b:40:39:ed:9e:63:cb:b3:9a:27:
3b:9d:05:69:23:ea:1c:95:51:fc:a2:d7:c1:8a:3b:77:bb:c7:
00:e2:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org