Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/puopXBzdORKOm1OUiBG9GRNOpVM.roa
File: puopXBzdORKOm1OUiBG9GRNOpVM.roa (raw, json)
Hash identifier: foyVy/Ywa5OIhKH8GjFcClfQQf8JTO3Rbzsh7/eyxDM=
Subject key identifier: A6:EA:29:5C:1C:DD:39:12:8E:9B:53:94:88:11:BD:19:13:4E:A5:53
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 3C
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/puopXBzdORKOm1OUiBG9GRNOpVM.roa
Signing time: Tue 15 Aug 2023 01:35:50 +0000
ROA not before: Tue 15 Aug 2023 01:35:50 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 4694
IP address blocks: 210.189.208.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Aug 15 01:35:50 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=A6EA295C1CDD39128E9B53948811BD19134EA553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:d3:b7:64:b1:e3:e2:cd:e6:eb:67:0f:b4:
17:b8:54:d5:26:22:0b:3e:f8:2c:b5:21:bb:a4:65:
fb:09:eb:fc:59:9f:96:42:dd:62:c2:e9:cb:0a:92:
59:ca:01:26:b8:26:1f:97:d1:af:9a:00:8a:53:35:
42:0c:57:b9:30:bf:c6:78:c4:1d:1a:35:4c:94:3b:
d0:b3:32:cd:b9:ef:12:80:c4:ed:48:75:30:85:c8:
c6:71:de:9b:ca:87:2d:38:c5:da:83:ef:7f:e2:89:
f2:b8:cf:cc:c3:7b:e9:86:b6:d8:8b:71:89:2e:9c:
de:cc:f1:cf:89:9b:ac:25:96:d0:39:01:af:99:ee:
7c:57:66:0e:5a:8c:ad:98:eb:9c:6f:66:01:ea:41:
6d:4a:fd:64:84:4d:4d:3e:1b:6f:ec:15:15:92:84:
bb:19:d6:8b:4c:ea:2d:94:46:1c:24:a4:6c:e9:72:
c0:58:65:61:68:eb:69:1b:bc:a5:e5:67:6d:c9:a0:
48:1e:0f:dc:82:5e:d0:61:3a:7c:51:1b:ca:de:20:
35:0c:b5:5c:b6:4c:84:70:c1:d0:a8:23:5f:40:7f:
e5:9d:5d:97:fa:a3:f6:ea:bd:84:8a:a9:ec:61:49:
63:fe:7b:48:64:8b:4c:9f:dd:51:f0:4c:91:5d:54:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:29:5C:1C:DD:39:12:8E:9B:53:94:88:11:BD:19:13:4E:A5:53
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/puopXBzdORKOm1OUiBG9GRNOpVM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.189.208.0/20
Signature Algorithm: sha256WithRSAEncryption
83:76:5c:e6:a3:be:e5:a2:38:d4:d2:37:93:0c:b7:04:76:15:
bf:c6:9b:4c:90:72:e6:bd:f8:37:15:a2:e8:38:9a:87:05:51:
cd:78:9b:c6:c8:67:f6:1f:1f:4b:4c:e2:4f:34:8b:b9:97:21:
e3:d0:45:2b:3c:a8:6d:e1:de:3f:e6:46:79:5c:9f:af:51:e4:
a5:37:e6:1b:7a:d4:a1:b2:67:e8:ea:2c:a8:66:0a:e2:dc:c0:
38:97:75:5a:8c:b4:0e:8d:8b:d7:a9:29:c8:61:ed:33:43:9d:
2a:7b:ce:ad:64:85:92:12:37:4d:e0:60:6f:af:04:27:e5:50:
5c:67:bb:4e:16:17:af:57:b1:6c:f2:a7:36:55:57:57:55:3f:
d6:62:51:47:4f:0e:7b:dc:60:cc:58:b7:7e:3b:18:6f:a0:0e:
40:93:2d:5e:9d:59:16:6e:59:02:4d:38:41:d4:11:b6:45:22:
b1:92:f7:c5:0b:9f:ef:b1:e1:d4:a1:88:3d:dc:e4:a9:77:b5:
42:7b:ab:77:15:e8:d4:67:9c:bb:43:76:35:0c:9c:dc:e1:fd:
d5:29:32:29:bd:f4:cd:69:d6:0b:0d:ba:f4:80:39:ec:c9:32:
17:2e:08:43:66:41:37:64:ae:ab:14:2a:3e:9b:4b:69:50:7c:
07:4f:24:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:35 2025 by rpki-client