Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jDJaxd0UGxdmYO5OR853I_HEZas.roa
File: jDJaxd0UGxdmYO5OR853I_HEZas.roa (raw, json)
Hash identifier: Tly3Ds3LZYtKU/IL8u53hvhpmsCULv1ohU03cybqN1A=
Subject key identifier: 8C:32:5A:C5:DD:14:1B:17:66:60:EE:4E:47:CE:77:23:F1:C4:65:AB
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 25
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jDJaxd0UGxdmYO5OR853I_HEZas.roa
Signing time: Wed 01 Mar 2023 23:28:32 +0000
ROA not before: Wed 01 Mar 2023 23:28:32 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 4694
IP address blocks: 61.203.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 1 23:28:32 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=8C325AC5DD141B176660EE4E47CE7723F1C465AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:34:54:c0:b9:af:80:e2:df:e8:c2:2b:a1:
0f:73:16:20:ae:7d:4c:03:0d:78:45:af:7d:e4:cd:
8e:d9:65:65:3b:39:0c:29:06:4b:8c:2e:85:83:66:
40:9e:34:2b:b7:0d:02:db:dc:98:9e:ef:ad:62:75:
b7:24:0f:29:95:29:e9:f0:58:5f:47:ab:f2:6f:a7:
69:46:9e:ad:8f:70:f1:fb:74:a8:4d:71:e4:5b:6d:
07:ca:f3:be:8e:1e:a2:4e:47:d7:7b:c9:1a:72:5a:
83:88:29:1b:c6:04:b9:5c:8f:ed:24:71:32:3d:0f:
44:9d:86:d8:78:09:74:91:17:93:04:78:7c:eb:22:
fd:70:63:48:5f:aa:30:40:f5:ba:79:f2:0f:86:c1:
7a:68:8e:3b:17:4b:db:32:f4:d8:17:03:48:e7:f8:
e7:f1:96:12:57:a8:dd:70:2c:2c:fe:6e:df:15:44:
ae:24:ce:0d:6c:a0:6a:cf:7f:d2:00:92:86:56:16:
a5:42:f7:bb:32:09:db:42:4a:c1:4c:f9:06:59:c9:
4e:c6:92:bf:75:0c:8a:87:57:07:e1:30:b8:63:47:
59:f9:76:03:a1:f4:c7:73:21:de:e3:49:37:0f:f6:
bb:67:99:2d:ea:11:a2:5c:b1:e6:06:6a:36:54:a7:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:5A:C5:DD:14:1B:17:66:60:EE:4E:47:CE:77:23:F1:C4:65:AB
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jDJaxd0UGxdmYO5OR853I_HEZas.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.203.176.0/20
Signature Algorithm: sha256WithRSAEncryption
40:d3:cc:e3:ea:15:a6:5c:71:33:c5:ee:23:42:24:ee:cd:6b:
f9:c7:01:e7:9e:6b:37:f8:18:21:9e:7d:63:a2:9a:a8:83:40:
59:c1:d1:75:bd:f5:4f:be:5d:33:77:d5:2e:04:b1:65:be:c6:
1b:ed:b5:b2:43:dd:31:3c:13:57:e6:ab:03:15:6a:ef:1b:e0:
a5:3f:cb:e3:ab:95:b7:66:98:b9:5e:b0:89:e1:33:29:8c:c9:
b0:46:a0:94:0d:d5:73:ca:ed:7f:ca:43:d4:2c:40:95:30:ff:
be:08:43:16:e0:e0:ae:78:85:1c:8c:76:4a:85:bb:29:7d:04:
49:60:f4:5a:d5:87:a6:95:f1:a3:78:75:2b:e0:e3:75:cc:2b:
21:51:29:d0:65:c5:38:c4:c4:09:ad:55:4f:ca:0e:82:3e:7e:
26:6d:a3:f1:2e:8c:a7:10:8b:69:d5:ed:35:24:6c:cb:6d:27:
91:3a:d6:f9:84:4d:43:55:f0:08:01:c9:61:de:b4:d0:80:c9:
dd:2e:b8:17:f2:67:57:5f:3d:24:18:9e:ef:dc:0b:7c:88:f9:
ac:ef:c8:74:2e:72:b4:4e:0a:a7:7f:1f:83:5e:26:87:ea:5d:
95:c2:36:2d:a9:e8:94:55:28:ec:a9:40:90:ff:13:fc:25:ee:
1e:dc:80:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org