Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0YbFDZhW7NOaDTCESgrXe3XTYdU.roa
File: 0YbFDZhW7NOaDTCESgrXe3XTYdU.roa (raw, json)
Hash identifier: sojTui9phW0Tov0HTxnk+lUILqe0HEQAGhO2XAUiebQ=
Subject key identifier: D1:86:C5:0D:98:56:EC:D3:9A:0D:30:84:4A:0A:D7:7B:75:D3:61:D5
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 01CD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0YbFDZhW7NOaDTCESgrXe3XTYdU.roa
Signing time: Mon 01 May 2023 01:32:16 +0000
ROA not before: Mon 01 May 2023 01:32:16 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 2516
IP address blocks: 222.3.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: May 1 01:32:16 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=D186C50D9856ECD39A0D30844A0AD77B75D361D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:29:63:87:4c:ad:7d:c7:f0:f4:57:49:58:
89:24:1a:29:e3:aa:fd:0f:3a:d4:eb:f3:54:52:27:
26:c3:4c:eb:31:ea:56:a6:a8:42:11:24:2b:e1:48:
ab:d5:80:a5:4e:2d:39:06:d2:c9:e0:b3:e8:bf:52:
ba:78:af:e1:72:e3:22:ef:38:b5:77:56:a5:0b:ba:
46:2f:ae:4f:9d:7d:38:b6:3e:31:29:cd:52:6c:b9:
6d:d5:d7:2b:60:44:7d:81:98:06:1a:8b:2d:c3:cc:
e5:7c:31:21:9e:2f:a7:c1:1b:00:d1:f5:cd:28:60:
3f:80:f6:61:75:29:e4:90:3a:37:f2:58:a0:e2:04:
8f:28:96:48:b8:71:89:d4:0f:26:05:66:1f:90:d1:
d9:1b:8e:74:c2:54:43:fb:9a:b4:90:a3:12:8c:03:
db:e4:31:ca:cb:a8:56:2c:0d:70:a3:4e:56:7b:81:
8c:83:36:02:aa:93:69:ba:e2:82:78:eb:2e:c5:66:
e9:f1:89:b3:19:09:28:0f:91:c9:fe:87:9c:71:68:
9d:08:71:cf:b5:d8:a8:de:4d:1c:33:37:98:1d:7e:
a4:59:b3:89:74:a7:c1:29:33:a1:16:44:e4:41:0f:
f2:42:db:09:19:5d:e4:2b:68:ec:17:4e:3a:1d:5b:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:C5:0D:98:56:EC:D3:9A:0D:30:84:4A:0A:D7:7B:75:D3:61:D5
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0YbFDZhW7NOaDTCESgrXe3XTYdU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:11:f5:8b:58:d0:84:65:ed:66:a1:58:a8:d5:d3:83:29:38:
a4:8d:33:81:a4:01:5f:55:7e:2b:ff:24:44:fc:10:df:6b:23:
f3:b7:69:29:59:c8:2d:f9:ce:77:a1:8a:31:0b:76:68:fa:50:
ce:89:73:fd:a7:ba:46:71:72:3f:7b:00:b7:ef:d5:e3:b2:25:
4f:f5:55:db:0d:fd:b1:b7:02:24:42:ec:d7:db:e2:1e:2f:dc:
e4:ab:b8:f5:60:d2:0a:d4:fd:54:5d:b8:02:cb:39:b4:75:68:
54:47:fd:5e:1d:7a:73:a2:78:8e:22:be:51:f6:1a:e3:e8:cc:
1b:46:f2:e2:be:0d:59:fa:c2:ec:d2:73:9f:33:85:28:e3:34:
3c:79:41:9c:d5:cb:e8:e8:09:9d:f3:f6:c6:fa:a5:ef:83:57:
28:1b:65:d3:0d:8e:8e:e0:72:3d:86:cb:bb:6c:6b:cc:6b:25:
9b:3d:5a:3a:06:3e:ff:98:96:bf:74:3b:0b:73:50:0c:bd:de:
1e:f5:50:71:6c:81:f9:2e:37:2b:29:f5:3f:59:4c:50:35:e0:
bd:28:19:55:0c:c3:43:77:29:e9:ee:57:c9:23:1a:0c:31:e1:
cd:30:26:3a:d0:bb:2d:b9:2e:3f:ec:55:00:b1:09:b3:6c:1e:
46:a4:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org