Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/pEnWsT8uGuMlaxP82grAHtuw8oo.roa
File: pEnWsT8uGuMlaxP82grAHtuw8oo.roa (raw, json)
Hash identifier: ukJiRoNND8Pv/cNoCmWH9FzFnZEuQIN9bHRg+Lj3T4w=
Subject key identifier: A4:49:D6:B1:3F:2E:1A:E3:25:6B:13:FC:DA:0A:C0:1E:DB:B0:F2:8A
Certificate issuer: /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial: 34
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/pEnWsT8uGuMlaxP82grAHtuw8oo.roa
Signing time: Thu 13 Apr 2023 09:54:13 +0000
ROA not before: Thu 13 Apr 2023 09:54:13 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 2504
IP address blocks: 192.50.26.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Validity
Not Before: Apr 13 09:54:13 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=A449D6B13F2E1AE3256B13FCDA0AC01EDBB0F28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:7d:9c:5d:18:e5:79:79:b5:ec:81:d1:bb:
97:3c:09:2f:01:79:44:b7:cf:37:d3:cb:1a:a9:90:
d8:e8:80:92:5d:79:3c:5d:5c:c9:f8:d4:f2:25:61:
08:ff:80:e8:1e:84:90:66:70:cc:cc:ee:6c:df:6a:
66:05:24:ec:61:42:6b:e8:98:6a:e2:23:14:a6:29:
63:10:10:a4:a4:9e:c2:4c:a8:ae:47:bd:6c:d3:11:
ff:11:d2:de:b6:37:c5:c5:eb:00:b3:bf:a6:85:a6:
7f:e7:0a:74:75:da:ea:3c:8c:71:8f:c3:76:36:9c:
e5:c2:c4:98:07:5b:8e:ae:58:bf:c9:9e:31:15:12:
a7:76:5c:a1:87:2c:51:b7:7e:a7:88:58:2f:c8:a7:
8e:47:df:11:00:3b:be:d4:56:e3:b5:ff:7b:8b:1f:
93:d4:bb:92:4d:f0:a3:0a:b5:48:39:56:f9:cc:12:
3d:77:40:f2:6b:1d:5e:e8:44:ad:ca:c7:a6:7e:77:
a4:90:f6:a3:f8:2e:b2:1b:a4:26:64:fb:69:88:86:
0e:63:17:3a:2b:74:f5:5f:eb:73:19:6b:1e:1f:76:
57:83:e5:2d:d1:8c:3d:6b:c9:b5:04:ec:31:7f:b9:
c1:07:9c:2b:8f:d6:57:9d:af:5c:11:58:85:24:60:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:49:D6:B1:3F:2E:1A:E3:25:6B:13:FC:DA:0A:C0:1E:DB:B0:F2:8A
X509v3 Authority Key Identifier:
keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/pEnWsT8uGuMlaxP82grAHtuw8oo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.50.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e2:07:d1:56:87:86:26:2c:79:ea:07:84:dc:15:21:bc:8a:
7e:f6:2f:57:c2:86:67:19:8d:2b:f9:88:16:d6:53:eb:f7:f0:
70:77:8c:08:bf:54:a8:bb:10:cb:ca:fb:12:ec:65:f7:c6:8d:
e4:29:14:2f:32:83:e6:e2:14:5a:a6:1f:31:5a:8d:d0:f2:14:
b2:c2:98:88:18:1e:13:63:cf:80:a7:0a:62:bd:b5:81:c7:05:
5d:0c:aa:8a:01:ec:d3:e6:f4:9b:e0:b2:90:af:f2:32:3f:80:
03:cd:d3:8b:8e:61:5e:f0:25:57:e6:b6:93:f5:d9:37:3d:ac:
3c:97:f4:4d:86:8d:42:b0:5d:d7:dd:94:ab:ea:58:65:33:92:
41:fb:04:70:21:18:a5:1a:ed:bd:40:37:d2:1d:dc:9a:55:85:
61:70:e1:8b:47:d6:36:68:52:1e:36:90:3e:ed:cb:d3:91:1a:
66:48:45:ec:86:46:db:42:98:a8:5b:8c:1d:77:21:1e:f3:59:
22:7e:99:bf:0c:7e:19:22:0a:46:11:26:e7:1c:49:3a:b6:10:
9d:bb:5a:cd:73:32:40:f5:52:6d:dc:88:03:af:45:cf:2b:8b:
8d:71:af:6e:9a:e9:86:74:b8:14:02:dc:79:3c:80:75:2e:f8:
24:12:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org