Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YIheTFEHTj8BkC797OCNoN3xrBg.roa
File: YIheTFEHTj8BkC797OCNoN3xrBg.roa (raw, json)
Hash identifier: tRusa5gF19V0lmpR9dYTIaQ8jJAFa7VPxvwOVoaedBk=
Subject key identifier: 60:88:5E:4C:51:07:4E:3F:01:90:2E:FD:EC:E0:8D:A0:DD:F1:AC:18
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 42
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YIheTFEHTj8BkC797OCNoN3xrBg.roa
Signing time: Wed 01 Feb 2023 01:29:43 +0000
ROA not before: Wed 01 Feb 2023 01:29:43 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 6220
IP address blocks: 61.200.83.64/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Feb 1 01:29:43 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=60885E4C51074E3F01902EFDECE08DA0DDF1AC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:27:a7:ea:33:89:70:44:ef:7e:ad:03:47:
fa:8f:1f:68:5d:96:1d:62:1c:1f:0a:04:8e:bc:32:
ce:2d:e1:0f:0c:62:01:31:e4:07:59:d2:35:48:6f:
14:52:15:68:09:32:62:37:1d:13:67:89:e3:61:94:
eb:b3:14:cd:fa:9d:ad:4e:97:87:6f:44:83:99:b0:
82:21:3c:18:f6:57:17:05:92:2f:bf:40:f6:a7:c5:
3d:2f:0a:97:67:a4:4e:1a:88:11:9f:44:7d:15:27:
23:a0:1b:2a:52:48:d8:6d:e3:3c:3d:71:df:1d:0f:
08:94:47:e2:42:9a:01:1d:a3:6e:26:a1:52:e3:5b:
40:18:cd:7a:7e:57:78:4a:e9:96:4c:fa:c2:8c:02:
2f:a9:9c:d2:29:ef:74:b0:c1:27:d6:9d:21:a3:36:
75:60:f7:0d:06:e0:2d:92:88:6c:3f:3a:2a:e9:f6:
46:65:d4:1a:b5:9d:a7:ed:ba:08:b1:84:c0:ef:55:
2f:5e:41:26:84:4e:62:de:f0:f8:45:88:ba:28:d7:
05:dc:f6:b4:86:ca:1f:31:4b:50:4f:d7:39:e1:7e:
3a:1a:7f:44:47:c9:6d:37:be:d5:a0:aa:20:c6:88:
f3:ba:8b:43:b5:6d:25:0c:27:7e:a3:f8:0c:dc:e7:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:88:5E:4C:51:07:4E:3F:01:90:2E:FD:EC:E0:8D:A0:DD:F1:AC:18
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/YIheTFEHTj8BkC797OCNoN3xrBg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.200.83.64/28
Signature Algorithm: sha256WithRSAEncryption
0b:5f:d2:fe:51:d5:aa:96:e9:41:6d:66:a9:15:a1:41:31:a2:
07:7c:7e:7b:2e:c3:72:63:97:c3:3d:0e:8d:c0:f2:01:97:1e:
69:f4:f0:9d:34:82:9c:18:53:e5:29:5e:55:13:cf:28:b3:c7:
36:0e:35:bf:fb:06:24:b1:5f:6e:9b:fb:56:5c:b1:de:e9:36:
df:db:0f:a9:22:78:86:82:6e:f3:03:57:07:6f:67:61:77:d1:
c2:79:7a:67:51:18:4d:4f:f6:11:2e:43:1f:75:70:71:27:21:
60:4a:d3:da:28:3c:24:97:60:48:e3:86:dd:0c:cc:b4:43:cb:
64:dc:1c:52:e7:53:eb:0b:29:b0:83:e4:a6:fa:8c:e7:d4:b8:
5f:31:4d:ac:f8:99:18:93:b3:9a:dc:c5:a3:e3:3b:73:cd:34:
5c:37:ae:d6:92:60:e4:d8:a4:28:df:07:cf:7b:bf:7b:ee:e2:
ef:12:e2:8e:52:b5:0d:c8:db:08:d1:a2:5c:11:35:84:53:b7:
15:75:5a:19:9a:5e:0e:80:ce:04:27:c7:dd:8d:a4:44:b2:22:
0b:90:5d:06:00:d7:c3:b7:29:26:4a:58:ba:51:7e:93:39:70:
94:77:e9:49:74:72:ff:77:ea:76:71:3a:e3:d6:35:7d:2e:4d:
c5:23:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org