Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XkhztqHNGeV3DW28XWl2VhT7v7U.roa
File: XkhztqHNGeV3DW28XWl2VhT7v7U.roa (raw, json)
Hash identifier: 3VxoZwr7oYM4ubDo7TMQkBcgtWGLTEsBkn9apcR7/JI=
Subject key identifier: 5E:48:73:B6:A1:CD:19:E5:77:0D:6D:BC:5D:69:76:56:14:FB:BF:B5
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 028E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XkhztqHNGeV3DW28XWl2VhT7v7U.roa
Signing time: Mon 20 Feb 2023 08:03:39 +0000
ROA not before: Mon 20 Feb 2023 08:03:39 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.94/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 20 08:03:39 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=5E4873B6A1CD19E5770D6DBC5D69765614FBBFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:82:80:22:43:4d:5d:d5:16:20:b2:f0:a7:
46:fa:ab:7e:38:0c:86:5e:c5:fa:19:a4:37:72:9d:
0f:03:0a:5b:63:bc:ee:36:f1:74:a0:fc:fa:d7:8f:
c7:c6:39:c1:fe:14:22:fa:84:46:f8:eb:65:e0:17:
64:9f:bb:51:2a:fd:e0:6f:f7:40:24:49:0c:8a:89:
9d:29:fb:f3:10:35:7e:f3:8e:ba:d2:ac:ee:7e:0d:
c6:90:45:4f:d3:e2:61:de:57:fc:13:a5:e2:ce:ee:
c0:09:98:89:81:26:39:e0:60:73:a2:1f:e9:92:83:
b3:84:2c:2f:9f:9c:ce:3a:d6:c6:a0:aa:7d:1f:69:
92:ec:86:b6:1b:d0:74:cc:2b:d4:13:06:41:fd:fa:
9c:b6:2f:69:96:ec:0a:72:34:d3:64:b1:74:10:2d:
f3:73:0b:49:26:ef:0b:db:50:1d:7d:ae:37:c8:d9:
7b:d1:18:d3:d8:e8:9c:db:38:b6:c0:39:c6:f3:84:
e0:71:8e:92:53:ae:d2:ef:94:70:b1:34:37:63:be:
ac:5e:2a:90:8a:c8:dd:10:32:bc:57:fa:82:81:cc:
30:d1:a7:58:b2:48:03:f2:c5:bb:99:af:26:56:e9:
64:30:ce:af:70:c8:30:3d:90:c7:71:57:f8:1f:95:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:73:B6:A1:CD:19:E5:77:0D:6D:BC:5D:69:76:56:14:FB:BF:B5
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XkhztqHNGeV3DW28XWl2VhT7v7U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.94/32
Signature Algorithm: sha256WithRSAEncryption
11:ba:15:70:4b:97:19:3a:ab:4d:52:6c:02:b1:ed:54:78:01:
8e:67:ba:bb:dc:05:cf:98:bf:9d:b1:da:59:1a:86:d4:28:b8:
af:9d:26:1f:29:f7:02:99:fd:56:ad:e8:c4:43:47:58:4d:d0:
7d:eb:6c:49:7f:10:25:b8:d3:8d:41:7f:08:9f:66:e8:cf:9a:
dd:8d:3d:0c:7a:c2:e1:9a:cc:b3:38:ed:87:b9:15:ab:f0:2b:
85:a9:b1:7d:ab:6a:4c:63:35:6c:17:60:fd:5f:12:44:4a:3a:
63:f8:c3:a6:53:e4:c2:92:21:46:6d:5b:67:b1:b8:c1:1f:45:
05:35:a6:72:72:32:d4:6e:24:27:5c:10:6d:3c:74:ae:06:b8:
01:88:75:a5:92:e6:bc:d0:b2:ec:00:ad:1d:f2:aa:d2:77:83:
69:eb:1c:11:07:a9:07:5b:e3:a7:f8:cd:e1:aa:61:d4:a3:67:
68:d1:3a:7c:b0:1d:81:ab:89:92:87:81:25:e8:f4:d8:08:a4:
df:84:44:d0:8e:7b:7c:2f:75:0b:ab:1e:21:5d:3d:b3:1b:af:
ee:52:13:8b:be:45:57:14:d9:a2:ac:03:79:29:5d:1f:69:08:
9c:02:63:01:52:3e:b9:68:26:04:a8:ff:09:53:4c:f6:37:27:
2b:36:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org