Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Tio74S8yei3OUyl2QxH55SliOxo.roa
File: Tio74S8yei3OUyl2QxH55SliOxo.roa (raw, json)
Hash identifier: eGHSr2xb5YvhVLtDr55Ch6p9xMwSsLjqGBs+XU2I9c0=
Subject key identifier: 4E:2A:3B:E1:2F:32:7A:2D:CE:53:29:76:43:11:F9:E5:29:62:3B:1A
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0157
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Tio74S8yei3OUyl2QxH55SliOxo.roa
Signing time: Wed 15 Feb 2023 02:28:33 +0000
ROA not before: Wed 15 Feb 2023 02:28:33 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.13/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 15 02:28:33 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=4E2A3BE12F327A2DCE5329764311F9E529623B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:a8:0c:32:22:7a:f3:89:e5:80:27:7f:2c:
eb:69:fd:59:5e:ec:35:68:1b:85:ec:45:f0:3e:f9:
45:8d:9f:1c:d4:0c:cc:a9:74:7a:2f:fa:7a:a8:f0:
87:15:90:7b:35:a9:99:b6:ff:1a:84:84:50:e6:ee:
10:e9:3e:16:9e:c2:82:5d:07:53:6b:67:96:89:d2:
89:d1:63:0c:9a:84:3c:77:e2:8c:6c:db:77:f3:30:
44:70:9f:24:5d:7c:b7:8f:25:c5:18:77:88:8d:6c:
9e:b3:77:09:46:b7:69:db:b6:82:c5:6c:da:c3:51:
29:2c:8d:30:a4:ac:22:18:44:33:29:78:e9:46:19:
32:00:2f:16:c9:bf:3c:4b:f0:92:3a:fe:f9:1e:a3:
7b:ef:cd:f6:57:7d:11:ee:6d:fe:7f:ca:8f:85:d3:
d2:43:c1:0e:6a:ad:9e:5f:60:55:31:09:4a:f9:85:
db:2b:ba:8b:d7:e3:49:51:48:4a:92:69:09:99:23:
dd:0f:d2:fa:9f:41:37:78:73:0f:86:37:d0:f0:52:
95:01:92:64:f1:10:bd:05:43:6a:66:bc:9f:75:54:
3e:0e:0b:9a:0f:93:77:8a:20:61:81:e9:44:4d:9f:
82:d0:f4:10:ff:74:f6:3a:d6:80:23:1c:7b:9a:c1:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:3B:E1:2F:32:7A:2D:CE:53:29:76:43:11:F9:E5:29:62:3B:1A
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Tio74S8yei3OUyl2QxH55SliOxo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.13/32
Signature Algorithm: sha256WithRSAEncryption
4d:40:3a:92:19:fc:b1:60:7d:e7:35:69:91:d9:b4:3a:bc:eb:
b1:28:b5:43:3b:78:c7:80:db:ad:2f:ca:7b:92:03:78:c2:c4:
9d:a9:0e:4f:17:3f:18:74:98:b7:27:9f:89:53:4c:56:b9:61:
03:f9:aa:50:51:a0:54:50:68:cb:7a:6d:ec:63:72:c8:56:dc:
ae:1f:ff:18:8a:77:2d:60:7e:1c:cd:f2:a7:20:c5:66:2f:f3:
33:53:6e:81:53:b5:4f:b8:e9:a0:6d:de:e4:09:33:09:3e:f3:
c4:92:33:1e:4b:96:90:f5:df:7d:43:54:0a:ca:79:e4:72:ae:
db:b4:42:05:e4:b1:33:48:84:c2:71:db:00:be:74:3e:db:95:
17:13:5c:c9:09:6f:76:25:70:eb:0a:ae:7b:79:ec:70:08:72:
d3:ac:3e:d6:2f:90:7b:74:c4:a9:8e:36:0d:07:ee:55:e1:39:
c3:7c:56:42:f8:44:8c:dd:7b:92:27:e5:74:82:6a:1d:a5:7b:
cd:c9:58:52:12:9d:cb:e7:3a:63:f5:95:e0:35:f9:e6:da:b4:
f8:60:ac:7f:64:3a:17:c2:56:b4:1e:20:c6:98:05:60:13:01:
3d:51:05:54:e0:67:b9:a8:85:dc:92:d0:81:3a:28:17:de:d6:
94:44:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:48 2025 by rpki-client