Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/p3e3nKwiu8eYsMaNxrPDYTKBKhc.roa
File: p3e3nKwiu8eYsMaNxrPDYTKBKhc.roa (raw, json)
Hash identifier: TH4XLYHTqgwQsCHQFxfunQAay7aGy4hD7i1SBpAcfX4=
Subject key identifier: A7:77:B7:9C:AC:22:BB:C7:98:B0:C6:8D:C6:B3:C3:61:32:81:2A:17
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: C6
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p3e3nKwiu8eYsMaNxrPDYTKBKhc.roa
Signing time: Sat 01 Oct 2022 01:29:25 +0000
ROA not before: Sat 01 Oct 2022 01:29:25 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2497
IP address blocks: 202.238.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Oct 1 01:29:25 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=A777B79CAC22BBC798B0C68DC6B3C36132812A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:c6:61:86:b2:9d:5d:fb:cb:60:4f:4f:3e:
a8:e5:15:d2:b9:22:dd:8f:4f:b9:af:66:37:c0:bc:
7a:fc:23:aa:bc:23:b4:37:08:85:e2:36:35:69:fa:
96:ef:6c:5c:dc:04:f3:30:41:d2:6b:93:d1:16:aa:
73:c7:a0:2f:12:c3:7d:61:c6:3f:f1:aa:96:97:62:
13:fa:68:76:77:9d:97:1e:eb:83:1d:69:24:39:6b:
9b:0a:33:65:3e:a8:29:d2:ac:5c:5d:f2:68:5e:06:
ec:5f:a1:18:bd:4d:b3:5f:92:6e:3a:ee:83:f1:fd:
b3:31:9d:79:56:31:72:3e:79:3c:0a:e8:bd:be:a1:
18:b2:76:d4:23:09:f7:55:91:ac:6a:fc:67:a3:fb:
a2:88:c0:8d:53:b8:15:8b:76:88:db:d3:d6:df:85:
68:12:e4:41:dc:96:14:ff:14:74:ea:dd:9f:39:dc:
ff:6b:d2:e1:45:3e:c2:12:5c:22:99:de:bb:40:66:
fd:85:65:21:eb:37:4c:93:0b:1a:0e:06:41:fa:86:
2f:21:41:ea:d1:12:06:d1:ad:aa:14:50:8c:17:fa:
29:de:da:61:49:6f:68:a6:3f:bd:05:ec:ca:60:3d:
d6:e5:f3:a4:c7:55:9a:1a:3f:7f:97:38:37:f0:f9:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:77:B7:9C:AC:22:BB:C7:98:B0:C6:8D:C6:B3:C3:61:32:81:2A:17
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p3e3nKwiu8eYsMaNxrPDYTKBKhc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.238.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:76:09:73:dd:06:ad:83:18:3a:74:db:44:ee:05:f6:b6:5d:
45:b9:d0:50:1f:a4:44:4c:2a:40:c4:d9:a0:d5:4c:cd:c7:ab:
80:43:e9:20:dd:2b:ee:13:ea:84:64:68:43:de:30:6a:28:3b:
64:9f:75:ff:8d:ec:45:ee:dc:19:1f:ee:76:4b:4c:ea:45:98:
c3:69:53:ee:6e:27:79:01:b4:b4:28:65:37:37:ce:24:23:a8:
fe:0a:f3:c9:b1:67:09:22:04:fa:cb:e7:9a:40:96:4e:62:fd:
19:87:f0:48:9b:3a:50:bf:e2:72:cb:91:3b:9e:25:18:84:66:
0f:30:de:d1:9a:d9:18:db:6b:f6:00:2c:dc:11:84:54:50:29:
fd:81:3a:b0:c6:ef:71:53:92:1b:85:14:23:0e:34:f8:85:5d:
34:bc:da:b6:5b:30:b3:06:64:3f:1f:5f:f4:6a:cf:5d:14:41:
e6:71:4a:0e:82:d6:04:84:c4:e7:06:2f:9a:8b:2f:39:aa:e4:
a0:84:c8:0a:44:5a:82:7e:5b:a4:69:50:16:a6:ea:0b:63:51:
8f:97:41:61:e6:e7:2f:f5:ec:6c:58:34:a8:23:9d:76:df:f6:
97:30:de:5c:a2:28:60:d3:5d:22:dc:56:a4:7f:55:6e:cb:37:
c1:c7:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org