Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/yTi2AQARHlLnbLUHYDW55teuLFc.roa
File: yTi2AQARHlLnbLUHYDW55teuLFc.roa (raw, json)
Hash identifier: KsNahaNP/hdrv6KpWkPWiMPPetquNcGss94nUaWNoP4=
Subject key identifier: C9:38:B6:01:00:11:1E:52:E7:6C:B5:07:60:35:B9:E6:D7:AE:2C:57
Certificate issuer: /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial: 11
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/yTi2AQARHlLnbLUHYDW55teuLFc.roa
Signing time: Thu 21 Oct 2021 08:44:28 +0000
ROA not before: Thu 21 Oct 2021 08:44:28 +0000
ROA not after: Sat 15 Oct 2022 01:30:02 +0000
asID: 38651
IP address blocks: 103.109.240.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Validity
Not Before: Oct 21 08:44:28 2021 GMT
Not After : Oct 15 01:30:02 2022 GMT
Subject: CN=C938B60100111E52E76CB5076035B9E6D7AE2C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:1e:85:1e:88:de:d5:45:a3:3a:77:87:47:
8e:c1:99:aa:4d:b3:ea:d8:15:82:43:3c:67:c0:a6:
55:1a:38:87:95:16:da:24:cc:2b:3c:7f:d0:82:9c:
5a:da:4e:c3:6c:d8:d7:b6:9a:18:7f:c2:a6:fe:75:
c2:14:eb:a0:f9:e5:18:ca:fb:93:a8:1d:a6:f7:58:
77:51:44:b5:51:27:e2:76:ce:7f:f2:da:c1:76:c3:
38:c5:26:28:5a:c3:9e:ba:19:95:e6:81:91:d9:93:
ff:0b:7d:6c:35:8c:ce:5d:fc:5f:6b:b9:1b:00:3e:
dc:5e:4c:bf:ab:f5:88:a0:31:d6:3c:47:18:c5:3c:
96:9f:5c:57:a1:45:dc:30:6b:7a:68:d9:45:13:a8:
a7:5e:31:04:fa:a5:c9:80:9a:27:d7:9c:b2:8b:e0:
ab:e9:18:4a:1c:e0:88:ce:25:d3:a1:c9:30:42:7f:
ca:57:d6:67:15:66:25:c6:6f:7d:aa:c3:49:3e:f1:
37:8e:5a:c1:53:f4:36:5a:a4:38:31:e4:1e:d0:bc:
79:ca:9a:4d:3e:44:ad:a8:d1:2c:cc:b5:8a:36:ea:
57:6e:95:89:27:20:70:5e:4d:c2:76:56:42:e2:3f:
ef:18:51:3a:d6:df:d6:58:63:b8:a4:5f:31:4f:8e:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:B6:01:00:11:1E:52:E7:6C:B5:07:60:35:B9:E6:D7:AE:2C:57
X509v3 Authority Key Identifier:
keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/yTi2AQARHlLnbLUHYDW55teuLFc.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.240.0/22
Signature Algorithm: sha256WithRSAEncryption
18:99:11:62:26:32:ac:62:dc:b3:24:1a:f6:d2:ea:3d:58:0e:
80:ea:5e:11:00:9c:0e:ad:d6:d2:9d:6d:95:46:5e:8d:d0:af:
6e:26:5b:d9:28:c3:76:3c:94:23:41:ea:94:58:d2:01:14:69:
cc:6e:88:a3:e3:b2:c3:c2:a2:f9:8a:96:49:97:0c:a5:2e:ff:
f0:cb:58:65:30:4a:d8:22:c7:12:fd:c6:6f:76:a4:e6:d6:9d:
e3:31:5b:a4:1b:53:c8:69:45:10:59:ac:89:ea:6a:34:65:1c:
e0:f4:5f:6f:9f:2f:5e:58:3e:ce:2c:6b:8e:e3:82:b8:2b:51:
64:f0:29:0c:90:f5:03:86:7e:63:5d:f6:15:64:f1:21:89:ac:
6d:b7:02:d5:47:45:51:05:46:07:19:38:97:99:18:58:02:be:
d0:c4:2a:84:0c:5d:bd:53:ed:af:1b:d0:27:b4:35:08:25:0e:
6b:0a:5f:de:cc:e6:4d:0d:03:e2:6b:f6:aa:3c:5c:af:b1:43:
a7:97:c9:17:c6:ce:fe:8a:d6:62:41:dc:8f:3f:95:9b:68:ed:
3a:ce:f3:dd:61:0f:6e:8d:a0:d4:bd:9f:f3:0f:df:1a:c1:4c:
84:38:39:41:88:38:f1:59:df:c4:62:31:3b:83:59:27:ce:d0:
1d:4f:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org