Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa
File: L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa (raw, json)
Hash identifier: CNBuWcx7kJfWRFpRxH42ofb8ZeAmwTiVd8eoWwLkPTE=
Subject key identifier: 2F:A9:29:7B:F7:4F:96:47:FD:CB:3C:32:C4:5E:05:5B:81:E8:67:52
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 01EC
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa
Signing time: Mon 20 Feb 2023 07:57:26 +0000
ROA not before: Mon 20 Feb 2023 07:57:26 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.235/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 07:57:26 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=2FA9297BF74F9647FDCB3C32C45E055B81E86752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:e4:93:34:75:ed:95:42:05:b7:20:f3:20:
18:7b:57:61:0b:bb:b2:66:d4:9d:80:93:4e:9e:4f:
ee:8e:af:65:c1:88:0e:b6:aa:40:78:85:d0:75:5a:
5d:a6:23:d4:cd:5c:91:47:6e:25:af:cf:62:bb:0e:
69:ac:2b:fd:dd:23:c0:46:f8:db:b4:04:0a:54:53:
91:66:72:1f:09:23:fb:43:d7:a2:6d:50:c6:20:af:
dd:ad:72:9c:08:72:30:0c:c9:69:1c:00:cd:a3:b0:
2f:24:3b:e7:37:3a:1d:9b:46:44:0e:5e:27:fe:5e:
9e:56:bd:60:08:bd:97:71:f9:e6:87:b6:6b:a9:61:
a1:ce:5e:58:d7:ba:ca:a6:83:b7:6c:76:94:f8:78:
b3:01:16:c4:7e:de:43:d1:ae:68:9b:d2:8a:7f:6f:
1c:41:da:b6:54:b1:f1:50:5c:96:0e:de:1e:9f:4b:
2a:fa:17:8b:99:83:ae:0f:e6:72:da:fd:61:aa:e5:
f7:a7:a9:84:6c:4c:fc:4e:36:44:7c:fe:43:2a:bf:
58:5c:66:e5:db:df:f6:49:37:c0:8d:90:e8:39:04:
ba:f9:de:c9:97:c2:1b:ab:67:17:14:8f:21:08:8c:
2a:f8:4f:71:e1:e9:b9:56:f9:60:b9:40:df:a2:47:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:29:7B:F7:4F:96:47:FD:CB:3C:32:C4:5E:05:5B:81:E8:67:52
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/L6kpe_dPlkf9yzwyxF4FW4HoZ1I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.235/32
Signature Algorithm: sha256WithRSAEncryption
a5:51:53:d1:1b:6b:4e:cf:e0:ad:28:0a:04:c1:39:2a:7c:3b:
63:00:d9:a3:d0:60:b7:8b:57:a1:f3:17:89:6a:78:54:23:24:
cc:cf:0c:02:e5:4f:74:ab:fa:36:7c:c2:2b:61:99:95:a5:14:
bb:13:aa:5c:e0:65:5e:ea:f9:f5:24:c0:af:47:ff:4d:85:fe:
e6:0c:80:f5:74:12:2d:3c:a4:20:a8:ec:13:a2:63:0f:54:4d:
d4:82:eb:ea:ad:df:51:0b:01:01:7c:6c:ad:46:0f:1d:b6:50:
44:8a:67:3c:fc:0c:ed:9e:de:c7:1c:96:80:f8:45:80:67:34:
f6:bd:19:af:20:0a:58:fd:44:fa:f8:ae:de:28:e4:ef:30:af:
79:75:e5:11:85:cf:b3:c9:c1:ed:54:1e:a4:a6:23:d7:f8:26:
dc:7b:25:96:db:8e:27:29:97:f4:a2:cf:01:bb:3c:b7:e9:ed:
55:cc:fd:18:fd:15:33:21:eb:39:b7:86:9f:86:1c:61:24:82:
c9:8a:14:e1:4b:4f:40:e8:88:e1:15:82:10:14:db:fd:cb:31:
f4:05:f8:da:c2:05:52:36:b2:cb:ff:59:57:79:08:b2:f1:eb:
8f:dd:b4:af:57:f5:76:2c:b7:49:37:cc:ad:32:e3:fe:22:58:
bb:fd:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:14 2025 by rpki-client