Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa
File: kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa (raw, json)
Hash identifier: UxO4uPAqiubdQ0FkkQM5cwjYti8NkC08KRfDH+tpE2Q=
Subject key identifier: 92:99:31:A3:65:79:0E:78:DB:32:4D:65:41:9C:1F:E8:04:1C:B2:A4
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 90
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa
Signing time: Fri 10 Feb 2023 07:45:38 +0000
ROA not before: Fri 10 Feb 2023 07:45:38 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 146979
IP address blocks: 202.236.90.84/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 10 07:45:38 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=929931A365790E78DB324D65419C1FE8041CB2A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:45:4e:8f:ca:b6:8d:4e:66:34:1c:2f:31:
79:90:ec:c5:f9:01:c3:34:a1:7e:f3:73:09:91:09:
f3:35:f9:eb:68:56:b5:58:0a:02:b4:56:e6:b5:7a:
cc:5f:a2:4d:f1:0a:d1:fd:67:b5:26:ab:60:d1:e1:
56:32:4c:5b:8e:bd:5a:45:df:a3:01:ca:8b:86:ba:
4a:26:29:b4:0a:48:6c:50:a7:dd:a3:58:9f:03:9b:
a4:d1:c9:c2:d0:41:ac:83:3e:ae:64:8a:ea:d1:7e:
2e:80:21:c5:4c:7e:10:47:42:de:5a:1a:4d:7a:57:
2f:4b:80:ed:78:4f:57:72:c4:6e:51:c3:2d:61:a0:
de:69:1f:69:9a:2f:12:8f:d8:ce:7a:96:67:fd:48:
bb:75:e1:a3:97:3d:29:a7:a1:5f:ff:fe:7e:4b:0d:
f2:c0:7a:2e:af:fc:52:bb:df:02:7b:fe:c5:f8:45:
e8:36:79:71:3a:28:1a:69:09:9d:07:ee:b6:42:95:
6a:a7:2c:25:4f:0e:9b:4d:ab:b6:3e:a5:16:09:8a:
43:aa:33:c3:d7:25:d8:6c:55:53:c5:86:e3:78:40:
a7:67:00:ab:50:ff:6a:8d:5d:db:c3:16:f4:73:8a:
e9:d6:5b:ca:9b:44:23:1e:23:b2:6b:cd:de:b9:f5:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:99:31:A3:65:79:0E:78:DB:32:4D:65:41:9C:1F:E8:04:1C:B2:A4
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kpkxo2V5DnjbMk1lQZwf6AQcsqQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.84/32
Signature Algorithm: sha256WithRSAEncryption
2d:39:48:21:a5:cb:3b:a8:48:57:2b:7f:98:ea:0d:9c:49:5c:
43:93:8d:93:e7:9a:97:ea:bd:14:8b:ea:fc:ec:73:f0:69:0a:
d9:ed:c1:5b:30:da:2e:26:d1:ab:23:db:42:7e:d4:bc:33:84:
3f:09:b9:0a:ff:2c:11:67:11:17:a0:df:e6:cc:51:7d:e9:42:
5b:f7:e3:b4:fd:24:8d:3e:8d:99:05:49:f7:2b:24:06:65:2f:
79:b8:88:a1:b9:b0:5e:74:14:bc:77:a8:c1:3e:f2:45:3c:4e:
fe:54:2d:15:a8:c2:25:1c:04:a7:47:5a:be:f2:25:d7:50:64:
f0:b4:68:82:f4:fe:2e:76:e5:22:d8:6d:ad:bd:88:9d:f4:ca:
ee:8a:5c:9d:b4:b3:f4:f7:9b:a4:b1:a7:fb:43:fd:21:e7:4b:
eb:da:e1:13:93:c2:05:94:44:3a:6e:ab:7e:e7:fd:ad:74:f1:
88:05:8e:1e:2d:d2:d2:b9:3f:56:5b:40:1c:5b:90:93:47:fb:
4b:ad:d6:4b:79:ac:76:b2:90:25:41:8b:72:e6:a2:d4:cd:ff:
57:0c:41:53:f1:5a:1c:cb:ab:f5:9d:2e:18:d4:11:51:b2:54:
f4:ba:7e:1d:d0:83:58:d5:a9:19:50:37:52:04:86:c8:dc:48:
71:a5:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:18 2025 by rpki-client