Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2154/YAyfj8Qgo_dVna4RCuA3RiQJoUE.roa
File: YAyfj8Qgo_dVna4RCuA3RiQJoUE.roa (raw, json)
Hash identifier: kiS17GQnOjTQ5UR8CKvxlX85AGiF9kPubUSyurN3rxA=
Subject key identifier: 60:0C:9F:8F:C4:20:A3:F7:55:9D:AE:11:0A:E0:37:46:24:09:A1:41
Certificate issuer: /CN=35892143C493B9B2CC1E79133F5231C72E152685
Certificate serial: 0F
Authority key identifier: 35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/YAyfj8Qgo_dVna4RCuA3RiQJoUE.roa
Signing time: Tue 01 Feb 2022 01:31:39 +0000
ROA not before: Tue 01 Feb 2022 01:31:39 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 396982
IP address blocks: 202.250.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35892143C493B9B2CC1E79133F5231C72E152685
Validity
Not Before: Feb 1 01:31:39 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=600C9F8FC420A3F7559DAE110AE037462409A141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:49:02:81:42:9d:c3:83:df:ac:9f:a1:1f:
fa:0e:a3:0e:73:17:78:cc:a4:7f:5e:b1:76:1f:8e:
37:54:d0:a7:55:e7:19:be:a5:41:17:6f:85:d2:58:
e3:cf:f2:e5:f1:ac:04:80:56:4e:c1:e1:51:a1:47:
78:ef:e5:a3:35:bf:aa:04:4e:7d:b4:f2:18:f6:a5:
e7:7d:a7:6b:38:76:c4:60:ce:8c:ba:71:d2:4e:40:
04:a2:bd:bc:51:ba:74:0c:a0:69:c4:d4:11:16:82:
bb:a9:a4:1a:7b:36:97:3f:46:16:21:22:bd:95:c0:
f2:00:37:e6:c4:71:34:f6:d9:b9:fb:33:c8:d0:ff:
7c:aa:0d:07:81:25:80:7b:c0:c6:40:35:16:22:0f:
e7:c6:7f:96:ac:ba:ca:1e:c6:70:16:0a:03:54:03:
34:9f:c8:e7:8f:c7:56:11:f1:7f:0a:ca:df:e6:51:
59:13:3b:63:43:c3:8c:9f:6c:07:31:85:a2:dc:14:
83:5b:20:a6:3d:a8:78:fb:1f:5c:5f:33:ea:c0:94:
8f:5a:5a:a1:1f:dd:6d:cc:d8:eb:9b:68:8b:b2:7a:
fd:e2:c4:15:fd:97:4e:10:e1:a4:3d:50:04:c2:05:
c9:6c:5d:f5:7d:bf:09:36:ba:12:6f:b5:3f:2a:b6:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:9F:8F:C4:20:A3:F7:55:9D:AE:11:0A:E0:37:46:24:09:A1:41
X509v3 Authority Key Identifier:
keyid:35:89:21:43:C4:93:B9:B2:CC:1E:79:13:3F:52:31:C7:2E:15:26:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/NYkhQ8STubLMHnkTP1Ixxy4VJoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NYkhQ8STubLMHnkTP1Ixxy4VJoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2154/YAyfj8Qgo_dVna4RCuA3RiQJoUE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.250.28.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3b:9c:b0:65:29:36:af:70:62:c7:3f:1d:63:e1:70:ad:26:
95:3d:5e:b4:01:b3:4d:c3:d6:80:a2:bf:31:2f:44:54:98:e7:
b8:fd:be:30:2b:97:b8:62:43:02:16:98:05:b7:4f:ad:f1:ed:
88:4a:69:9b:45:f6:8f:1b:58:3d:d8:5d:92:d5:94:ae:a8:6e:
10:61:a2:ce:77:58:4a:5b:69:da:02:20:fd:07:13:d5:bc:21:
5d:63:fc:27:85:62:e5:60:4b:cc:3a:d6:b0:36:a8:ae:e5:ae:
6f:2b:ec:91:74:0d:e5:8c:0a:54:f3:f8:15:05:04:52:97:fa:
b5:94:29:0e:c5:e7:65:68:80:7f:6f:33:e7:c8:0a:fb:0d:5b:
2a:a0:f1:43:ff:b4:d1:8c:68:da:03:30:07:9d:98:c9:e8:8e:
f4:b9:42:6b:13:87:20:64:99:8e:46:29:1f:9f:8b:7b:a1:b9:
4b:77:31:e0:10:9e:7c:c7:4c:b1:5b:88:20:2e:a5:37:9e:15:
14:24:5d:ee:f5:a4:e1:bf:0c:a8:1b:23:29:30:7b:87:4e:18:
f3:7f:08:74:1c:ab:d8:76:f5:2e:e9:73:35:ec:2f:14:d8:40:
48:8e:a4:b5:11:47:49:9b:70:36:58:77:9b:1c:74:7d:91:64:
55:3b:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:12 2023 by rpki-client on console-ams.rpki-client.org