Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NsrDCvRrvTYy-3hMPrds7sIRCIw.roa
File: NsrDCvRrvTYy-3hMPrds7sIRCIw.roa (raw, json)
Hash identifier: JFVpcXfwznkwn4DLJ3uxKLkUvLl+nQrgPQ4gqBEMQzg=
Subject key identifier: 36:CA:C3:0A:F4:6B:BD:36:32:FB:78:4C:3E:B7:6C:EE:C2:11:08:8C
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 016B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NsrDCvRrvTYy-3hMPrds7sIRCIw.roa
Signing time: Thu 01 Dec 2022 01:28:28 +0000
ROA not before: Thu 01 Dec 2022 01:28:28 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 9371
IP address blocks: 210.188.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Dec 1 01:28:28 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=36CAC30AF46BBD3632FB784C3EB76CEEC211088C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:d6:74:d3:04:ed:1f:3e:44:ed:71:90:61:
24:d6:f8:d8:28:29:0b:bc:c9:f4:2b:68:39:74:6e:
6e:70:92:37:46:96:50:d9:a5:b3:7f:49:e0:88:9b:
2a:9e:85:37:bd:d7:f3:8a:6c:f6:18:2a:3a:1d:d7:
1e:c2:2d:e2:00:cb:4f:91:7a:e7:be:8e:00:07:4a:
e2:92:ec:51:9e:7c:56:f2:41:f3:c9:e7:4f:bc:21:
1a:14:59:3a:6a:14:34:20:21:56:9d:45:68:ac:ba:
f8:ca:76:77:f1:2e:be:e0:f5:2c:99:6d:d7:81:5c:
2e:21:5f:c5:14:e6:fe:8e:69:75:50:55:b6:03:f7:
a9:01:7e:b1:71:05:32:8f:80:cc:ce:1a:86:6a:f7:
c0:de:ef:83:de:f8:1c:c6:f3:4e:dd:f1:fb:ef:9a:
09:e8:f4:c4:fd:20:87:7c:27:77:de:7b:dc:5b:54:
8c:49:34:f9:44:64:13:25:26:f6:53:14:19:f7:0c:
f1:37:dd:92:ef:0f:4c:4b:c2:05:2b:e8:4c:6a:7b:
c4:43:3e:e6:82:66:fc:2c:52:5a:76:a1:d2:60:79:
ce:35:d4:90:d7:f0:16:d5:37:5b:6f:f9:d1:2a:b6:
1a:28:87:ac:ca:1b:56:cd:70:2e:73:64:c2:bd:1b:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CA:C3:0A:F4:6B:BD:36:32:FB:78:4C:3E:B7:6C:EE:C2:11:08:8C
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NsrDCvRrvTYy-3hMPrds7sIRCIw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.188.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:0b:69:ce:4f:d7:88:ff:e7:89:04:2a:76:8e:75:60:4d:a2:
92:26:b4:b0:47:fe:d6:04:c5:95:80:d3:73:48:95:bd:49:86:
ca:a6:ac:50:00:21:32:6a:06:0b:85:7d:b9:6d:ef:1d:f0:0a:
f3:a6:f7:a8:3a:45:78:72:c4:23:67:09:f6:95:5c:0d:38:3b:
8c:fc:88:8e:03:14:16:41:22:09:50:95:e3:88:14:57:a1:1d:
6c:96:72:48:b9:20:19:78:2f:59:96:b6:74:c7:6b:a4:d7:2e:
7b:39:13:4a:ea:7b:7a:d7:e7:92:ab:75:f0:39:50:21:61:6c:
a7:d9:3c:a2:c0:2b:81:29:0d:f8:e4:3f:09:dd:52:8c:fe:2c:
0a:48:30:6f:9f:f6:4c:10:56:ee:45:6d:58:18:4d:81:ef:fb:
8d:cd:eb:28:c7:02:f2:e4:b1:42:a6:ea:e3:8e:eb:0f:2b:81:
f1:3d:f5:75:2a:7a:da:07:ba:72:94:37:23:b6:86:8a:0a:a6:
a8:36:7e:44:c6:90:09:f8:4f:ad:3d:dd:60:d1:fc:8a:50:7d:
b8:a3:7f:54:d8:f8:90:20:7a:a2:7d:ab:16:0e:bc:5f:25:8c:
d7:52:fc:ed:cc:f9:79:98:66:c4:63:6d:de:07:c3:45:34:82:
ab:68:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org