Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TS2mCiHKxVDk9-GMruxxkXwaFdc.roa
File: TS2mCiHKxVDk9-GMruxxkXwaFdc.roa (raw, json)
Hash identifier: 9Dpo/XkMn0X/C3BGJrTi2kao0x7qRFkENrHZJi/cReU=
Subject key identifier: 4D:2D:A6:0A:21:CA:C5:50:E4:F7:E1:8C:AE:EC:71:91:7C:1A:15:D7
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0266
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TS2mCiHKxVDk9-GMruxxkXwaFdc.roa
Signing time: Mon 20 Feb 2023 08:03:25 +0000
ROA not before: Mon 20 Feb 2023 08:03:25 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.242/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:03:25 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=4D2DA60A21CAC550E4F7E18CAEEC71917C1A15D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:05:ec:ee:5d:0c:ac:f5:f5:fd:c3:f8:d3:
52:f6:c5:2e:13:24:3b:34:29:f1:5c:be:7c:69:83:
ee:ce:80:2b:59:01:ba:08:91:45:cc:9a:19:bb:cd:
be:85:81:be:f2:63:0f:7f:bc:48:46:fb:b1:59:3f:
50:29:bc:93:2e:bf:9b:fc:c6:c7:ae:a9:1b:38:1e:
c1:9b:f2:0f:b3:3d:46:55:3d:fa:02:4b:25:ec:66:
0b:6f:68:65:06:04:b0:a6:44:01:dc:31:31:bb:ab:
ef:6d:d0:55:b6:5b:b4:1d:45:06:ea:22:3e:32:62:
28:ec:33:17:23:6b:19:7b:80:98:35:de:41:f5:b6:
12:68:f6:e2:96:48:66:b8:89:c0:77:19:3a:83:02:
c2:1d:26:11:e6:e8:a6:56:19:88:5c:58:9b:e2:ff:
8e:3f:17:01:61:ed:12:f1:e1:11:22:75:d1:11:d6:
52:de:dc:cd:a3:a5:2e:07:1c:81:05:27:21:8f:d7:
a4:63:22:25:66:7d:c1:b9:33:9b:99:10:42:fa:bc:
7a:4f:13:50:40:71:c6:8e:22:c0:2a:b7:92:29:7c:
61:86:95:1a:a3:97:c9:92:2d:60:9d:e2:8d:4c:1d:
6e:19:e4:5e:77:9e:c0:42:16:05:7a:a1:45:b4:31:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:A6:0A:21:CA:C5:50:E4:F7:E1:8C:AE:EC:71:91:7C:1A:15:D7
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TS2mCiHKxVDk9-GMruxxkXwaFdc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.242/32
Signature Algorithm: sha256WithRSAEncryption
12:8a:68:7c:38:5a:b3:63:24:60:2b:92:ce:82:e2:50:f6:28:
70:4d:49:18:eb:4d:69:b8:d9:9d:e5:92:ff:b4:00:2d:fe:04:
42:94:fa:e7:75:ab:42:96:64:92:d1:c8:c7:2f:c6:aa:45:57:
ad:be:75:61:4e:32:30:41:e1:c9:72:d8:c8:4f:11:65:14:2b:
a0:36:50:a7:a8:cf:d0:68:d2:12:20:a4:4b:ca:f7:c4:f2:81:
71:ef:18:77:a8:86:64:e8:87:9f:d7:24:fa:33:1c:58:a6:90:
73:55:dc:39:ed:26:36:46:b6:c6:05:ae:0b:51:a7:db:55:a8:
76:2e:78:64:43:17:a9:bb:93:cc:92:cb:cc:1e:0f:86:fc:8a:
24:62:e3:2b:41:f7:61:d8:05:56:ca:25:18:bd:cd:e1:ca:ad:
4f:60:2b:d4:8b:87:a2:45:3b:14:5a:5b:27:ce:4c:f7:7a:2e:
0d:06:ae:56:d5:86:44:83:48:7f:29:4c:ba:8f:3f:cf:71:75:
a0:b5:43:9b:e7:88:73:da:78:49:c2:9b:76:dd:d2:9b:f7:9c:
c2:eb:55:38:7e:d3:41:08:2e:70:19:46:64:81:64:42:0a:b7:
46:bc:61:62:c5:ad:e9:44:b0:9f:7f:5b:c0:95:74:a8:6d:9b:
ad:51:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:13 2025 by rpki-client