Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ui1of820cN5NAgE5_66hbs1d1NI.roa
File: Ui1of820cN5NAgE5_66hbs1d1NI.roa (raw, json)
Hash identifier: gWjl//ISASvr2DaK7DERDA5NTmgCs4EM8M6ZzdAp77k=
Subject key identifier: 52:2D:68:7F:CD:B4:70:DE:4D:02:01:39:FF:AE:A1:6E:CD:5D:D4:D2
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 72
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ui1of820cN5NAgE5_66hbs1d1NI.roa
Signing time: Fri 10 Feb 2023 07:43:40 +0000
ROA not before: Fri 10 Feb 2023 07:43:40 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 146979
IP address blocks: 202.236.90.101/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 10 07:43:40 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=522D687FCDB470DE4D020139FFAEA16ECD5DD4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:e1:16:b7:a9:72:67:22:12:3f:85:20:5c:
d9:29:70:1e:e2:4f:d4:96:d8:91:01:86:05:2f:24:
31:81:d5:56:67:2e:bf:96:89:09:8b:85:c0:11:39:
5b:e3:f6:62:dc:b4:19:87:4a:6d:ce:07:c5:1f:2c:
f4:d3:99:35:69:7a:03:c2:c5:d2:59:a0:26:b1:36:
ca:b4:ea:28:f1:6e:02:ba:d5:d8:3b:38:23:15:2b:
53:d6:9f:9d:91:c5:c9:4e:0d:83:1b:31:38:58:32:
5f:92:57:75:33:70:c0:85:1e:3c:a8:6f:70:e4:c4:
45:21:9b:9e:d3:48:13:13:29:9d:c6:6c:ab:c0:b1:
76:fe:5e:b5:c3:ae:bc:5d:84:25:f3:c2:c3:6b:f0:
a9:47:60:c9:a8:65:b9:9e:15:28:24:dc:23:f8:87:
69:07:d3:ab:e0:21:d3:7e:82:fd:b6:0b:ce:18:47:
9a:40:5d:b8:54:c9:db:f8:93:b7:2b:c7:17:c8:b7:
76:d4:51:04:27:7e:43:ed:a6:3e:5c:aa:14:5f:60:
23:15:2a:7f:ba:bb:c9:67:b2:42:c8:73:4f:71:81:
36:d6:e1:a9:8d:ae:3a:51:f4:81:8a:52:a9:90:3e:
5c:c3:69:61:af:52:b1:9c:bb:7c:9f:e7:1e:89:91:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2D:68:7F:CD:B4:70:DE:4D:02:01:39:FF:AE:A1:6E:CD:5D:D4:D2
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ui1of820cN5NAgE5_66hbs1d1NI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.101/32
Signature Algorithm: sha256WithRSAEncryption
45:7c:e3:d4:c9:93:c0:a0:54:7a:70:59:16:72:24:1e:de:e3:
89:06:66:5f:f2:4b:81:00:f0:43:14:74:26:6c:7d:92:7b:42:
04:ad:19:25:72:72:c3:26:0d:cd:b6:04:df:87:97:a0:76:1c:
c5:13:62:a5:bd:cf:e1:cc:8d:34:0d:04:06:dc:a9:63:c3:70:
ef:12:4b:45:dd:b7:bc:44:14:00:70:ff:fc:de:e8:ff:f4:90:
e9:9a:21:68:38:aa:2b:09:1d:3e:53:47:d7:98:b4:d7:60:a3:
c2:89:42:ab:5e:fb:a3:76:fb:30:3e:96:b0:7c:06:52:7e:6b:
22:47:cf:c5:39:c9:fe:4a:dc:bb:3c:65:b2:b0:92:a6:69:17:
af:e4:54:4d:67:af:3c:33:08:78:19:0c:29:94:5f:ae:7d:87:
41:3b:fc:9e:e1:d8:1a:e4:7a:94:23:8a:ae:d5:49:b8:a1:a8:
9a:27:e4:da:b3:10:9b:92:01:c6:9e:41:8f:e1:8a:5a:e9:d8:
e9:fc:e8:5b:85:a0:6e:6a:33:56:4a:e8:4c:4d:71:29:a0:c4:
7c:36:75:8e:af:97:63:bf:9f:a2:e5:20:25:ea:4e:4e:67:b2:
14:f9:58:12:fd:36:40:ab:70:7f:d1:f6:83:5d:e2:93:2b:47:
28:0a:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:53 2025 by rpki-client