Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/riG1RMI-YvQL7PVPzzjlUKRQ510.roa
File: riG1RMI-YvQL7PVPzzjlUKRQ510.roa (raw, json)
Hash identifier: P9zIVBy57chhcpaMkly4Yd4dqru3JvHD4LDDKCjl5Cw=
Subject key identifier: AE:21:B5:44:C2:3E:62:F4:0B:EC:F5:4F:CF:38:E5:50:A4:50:E7:5D
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: A6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/riG1RMI-YvQL7PVPzzjlUKRQ510.roa
Signing time: Fri 10 Feb 2023 07:45:45 +0000
ROA not before: Fri 10 Feb 2023 07:45:45 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 146979
IP address blocks: 202.236.90.79/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 10 07:45:45 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=AE21B544C23E62F40BECF54FCF38E550A450E75D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:14:99:ed:f0:fa:0b:b1:13:0d:81:9a:e7:
56:26:97:2e:db:c4:82:c0:61:e2:be:30:89:9f:eb:
10:2b:12:2b:4b:a9:30:ef:df:e6:81:9c:40:70:f0:
29:e3:4c:0a:42:e0:27:90:cc:2d:cc:7d:26:9a:14:
94:09:fa:77:54:b0:a5:82:4f:52:bc:62:0c:6c:b1:
67:0b:37:37:a9:14:3f:88:02:43:4f:7c:f1:94:67:
56:d1:e5:30:cc:2d:3d:c4:9b:96:85:87:f9:cb:a8:
f8:df:7e:c8:c9:53:d5:eb:73:04:7d:25:0a:99:c9:
d1:e7:5c:61:f2:90:fc:8d:fb:1a:bd:05:98:38:fa:
43:77:98:fe:76:ad:5b:5f:30:3a:c4:53:a2:d7:7f:
e6:49:3a:c1:33:60:77:f8:cb:58:0a:5d:82:3c:e4:
ae:3f:b4:05:eb:eb:83:1d:7c:21:cc:25:65:71:47:
c4:9a:ef:49:32:a6:bc:88:99:a0:15:7b:7d:43:a0:
e9:6b:9c:1e:d9:3e:a9:6c:b7:6b:98:43:6b:89:79:
f8:44:20:98:4f:02:76:c5:14:f1:9d:be:4f:bf:2c:
33:7c:42:e6:61:72:c0:b0:4b:3e:f4:7e:ed:db:3c:
5f:d6:e5:05:50:ee:6b:d8:40:50:b6:0b:0a:0c:ea:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:B5:44:C2:3E:62:F4:0B:EC:F5:4F:CF:38:E5:50:A4:50:E7:5D
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/riG1RMI-YvQL7PVPzzjlUKRQ510.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.79/32
Signature Algorithm: sha256WithRSAEncryption
0a:c3:90:f2:e5:10:49:b4:a1:a6:e4:08:c1:bb:14:0b:25:30:
67:72:55:22:2b:a6:83:eb:b1:a5:42:99:b2:6a:ea:3c:7d:71:
17:a5:7a:01:a6:2a:1e:4e:3d:8e:f7:e0:aa:44:0b:5b:b4:b5:
6e:a8:d1:b6:0d:b1:e8:47:fc:18:96:18:84:58:66:4a:dc:b0:
3f:29:44:51:d2:24:b9:f4:9f:e0:5a:cc:30:6c:86:b5:79:57:
7f:ff:7d:45:8d:db:a0:db:62:43:9a:dc:ee:e8:c0:20:86:2d:
ab:12:82:ab:69:29:77:43:6f:2e:7b:0d:c7:f4:2e:9d:c8:e6:
e3:22:26:79:4a:8b:20:c8:14:22:17:ea:6a:4b:b5:cf:d5:16:
63:d8:ba:e7:8d:5a:89:da:67:81:94:88:6e:5f:ca:17:ef:1e:
62:b8:2a:55:6b:04:e9:05:62:42:8d:98:01:fd:2b:9b:0e:75:
5b:f7:7d:54:bc:2c:25:b7:6b:65:29:8e:8f:05:75:a8:02:ad:
f3:70:4f:65:e7:29:9b:ae:a9:93:98:ba:34:3e:55:c0:8c:85:
1b:3e:4b:b6:87:2c:08:56:bf:d2:f0:68:bb:dd:f4:52:97:0d:
be:70:6f:b4:08:19:00:f4:2f:07:d5:ad:07:b5:fa:bd:f4:9c:
85:01:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org