Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Tfgjq2oHEHj2YQiUGWu8AY8XcfE.roa
File: Tfgjq2oHEHj2YQiUGWu8AY8XcfE.roa (raw, json)
Hash identifier: IZiQ0TiQ6EGvJu9iMW3Xyd+/pomV9BDd69ypUUF2H8k=
Subject key identifier: 4D:F8:23:AB:6A:07:10:78:F6:61:08:94:19:6B:BC:01:8F:17:71:F1
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 9B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Tfgjq2oHEHj2YQiUGWu8AY8XcfE.roa
Signing time: Fri 10 Feb 2023 07:45:41 +0000
ROA not before: Fri 10 Feb 2023 07:45:41 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 146979
IP address blocks: 202.236.90.234/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 10 07:45:41 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=4DF823AB6A071078F6610894196BBC018F1771F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:f7:10:ad:4f:c3:85:78:79:13:b3:61:f3:
3f:38:2e:d9:6f:7e:c7:a2:6d:5b:7f:b9:89:c1:3c:
a6:0d:e3:04:39:5f:86:b7:86:21:5b:db:6d:f5:e3:
69:69:25:46:2d:24:e6:de:bd:9d:26:bd:3d:68:65:
44:f2:25:c9:ba:31:d2:94:ad:0b:c1:e9:4e:e3:e9:
9a:28:c9:94:e6:f3:71:53:c1:ae:13:ac:a0:da:16:
dd:cf:2c:d2:fd:9d:9e:e7:24:50:c1:1c:dc:ed:b4:
ad:25:bf:fa:1b:25:e7:08:49:f6:6f:39:3d:5c:34:
d9:d2:84:28:b0:5d:bf:40:50:2f:9f:55:74:3a:bc:
3b:48:0a:25:d5:b4:46:2b:15:b3:aa:81:18:4c:9b:
d5:d2:13:ae:47:d9:91:c1:0e:c2:0d:e4:11:de:b3:
77:a5:bd:86:25:7f:dd:fc:a9:61:91:57:af:e9:06:
98:1b:2b:ea:48:75:35:67:1b:e6:17:42:78:d8:94:
f5:45:a1:3c:e7:e0:b4:b4:b1:b9:bb:61:62:2a:53:
30:54:6e:1d:4f:fb:23:6d:30:dd:4a:dd:08:1f:31:
b2:e0:08:b3:82:49:f2:fc:64:ca:83:92:f2:32:92:
d2:8e:02:7b:27:bf:e1:78:8a:d4:5d:60:5e:d4:9a:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:23:AB:6A:07:10:78:F6:61:08:94:19:6B:BC:01:8F:17:71:F1
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Tfgjq2oHEHj2YQiUGWu8AY8XcfE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.234/32
Signature Algorithm: sha256WithRSAEncryption
5a:8f:e4:15:5a:fe:85:7f:00:6a:d5:52:1b:b5:1c:20:07:0a:
fc:eb:ac:d8:fa:44:e7:c6:0e:70:4c:30:b8:f6:1d:ba:09:f1:
8f:70:e7:6a:a2:d9:dc:02:0f:12:1a:94:9c:ae:53:98:f9:56:
f7:68:4c:00:8a:a8:be:83:8e:4b:5a:7d:56:b9:2a:03:3d:31:
6a:21:8b:83:01:40:d3:c1:b2:34:67:54:28:ae:8a:89:3f:84:
de:34:e4:93:e6:b1:66:3f:54:f7:69:9d:b4:e8:54:7e:24:99:
bb:b7:f0:d4:28:bf:61:38:94:0a:04:af:26:cb:d7:2a:8e:5f:
5d:38:e0:2c:a6:b1:26:5b:c0:b7:44:5d:5a:38:39:de:c8:4b:
42:19:c6:e1:82:c8:f1:ad:a2:70:d4:60:d3:2e:72:97:13:0e:
40:db:15:91:81:42:f3:4a:2c:41:79:f4:bd:62:1e:fe:1e:30:
a1:43:59:36:85:b3:0d:a3:0a:67:91:5a:17:8b:1f:a6:2d:85:
6b:9e:56:96:cd:ca:db:1e:36:a2:c8:64:61:af:87:5b:04:fc:
2e:c3:20:69:48:b8:69:fe:3d:ea:4e:91:3a:f5:45:4c:6e:04:
18:f9:71:61:d8:62:43:da:ef:ee:84:46:b4:05:ad:af:2e:39:
8a:53:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org