Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/PMiOzYhByzkIme_znn4tFEyhgco.roa
File: PMiOzYhByzkIme_znn4tFEyhgco.roa (raw, json)
Hash identifier: qFyBSFV3sbGWfnZ1fxMTc05WkuCJkQzbN4MM48BxESc=
Subject key identifier: 3C:C8:8E:CD:88:41:CB:39:08:99:EF:F3:9E:7E:2D:14:4C:A1:81:CA
Certificate issuer: /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial: 25
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/PMiOzYhByzkIme_znn4tFEyhgco.roa
Signing time: Sun 01 May 2022 01:30:49 +0000
ROA not before: Sun 01 May 2022 01:30:49 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 2907
IP address blocks: 202.253.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Validity
Not Before: May 1 01:30:49 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=3CC88ECD8841CB390899EFF39E7E2D144CA181CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b7:52:81:74:77:c0:0c:f5:13:8a:ca:1e:3e:
35:b1:54:ef:b6:95:07:d8:28:23:c2:66:f3:a9:cc:
20:42:98:3f:4e:13:07:31:56:c6:d1:1e:91:dc:d9:
99:aa:a2:59:80:45:aa:0d:d8:e3:27:e5:b7:58:72:
16:11:d2:a8:9d:18:a2:2f:a1:36:d0:b1:a6:0c:d2:
24:57:49:80:35:b4:07:34:81:3e:44:aa:d8:00:33:
63:12:b5:0d:fe:aa:2f:19:6e:1d:0a:56:31:87:b4:
b6:ec:73:67:b0:48:bb:50:db:35:f3:47:6a:e0:ab:
85:fc:b6:c4:88:67:f7:ef:52:11:d0:ce:68:87:66:
27:9c:3e:60:f2:ff:9e:aa:3f:8b:d3:9d:34:93:ca:
bf:c2:96:81:1c:c6:da:b6:86:65:56:98:fe:48:eb:
2f:22:a4:c5:3b:71:73:dd:4e:25:00:bb:25:9a:6b:
82:35:14:81:fc:51:06:be:99:b8:3d:6c:e4:f1:2e:
dc:45:a5:d2:e0:23:d9:02:07:4d:2c:a2:f6:90:05:
b3:e0:93:c5:11:ca:5b:a3:9b:6c:b7:ca:83:0a:0f:
0d:3b:6c:d5:9c:23:71:84:58:3a:c8:97:90:c0:96:
07:85:ee:85:a4:91:45:89:dc:a9:f3:77:3b:ad:cf:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C8:8E:CD:88:41:CB:39:08:99:EF:F3:9E:7E:2D:14:4C:A1:81:CA
X509v3 Authority Key Identifier:
keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/PMiOzYhByzkIme_znn4tFEyhgco.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.253.88.0/22
Signature Algorithm: sha256WithRSAEncryption
40:5f:81:6b:28:48:3c:6e:87:48:14:05:30:2d:33:12:58:39:
46:89:76:87:a1:9b:c0:91:01:76:45:9d:70:e7:d0:2d:f5:d4:
a5:90:82:c4:f8:96:9b:63:cc:ad:72:64:f0:06:6b:3d:22:9c:
ea:db:2a:bb:07:0d:19:b7:40:c0:ca:57:96:ad:d3:1e:da:a8:
a0:0a:b7:c2:04:90:cf:03:c8:e8:5a:b2:41:28:f8:4f:23:08:
2b:25:64:43:38:5b:26:31:b5:22:29:5a:da:d8:15:93:f3:b4:
bd:c6:5a:80:92:9d:18:dc:4e:ec:c5:39:cf:70:8f:5e:06:31:
5a:b0:b7:2c:73:99:9f:34:24:74:1e:67:a3:fb:52:b9:85:4c:
c5:6a:09:23:85:e6:3b:8b:39:99:60:64:9d:9f:17:5b:b5:af:
06:74:cd:9c:b0:2b:a1:90:71:6d:e0:5b:44:04:c1:1f:93:42:
cd:99:95:81:21:6b:42:ca:f8:2c:77:29:9c:e7:15:11:d0:37:
64:11:21:52:85:2d:d7:e1:31:46:ad:6a:f7:6f:29:14:8d:64:
49:34:71:83:fc:fa:9e:d4:58:1d:73:58:4a:1f:d4:97:ff:dc:
20:b4:c0:46:c5:ea:ab:c1:e8:1e:c3:fd:66:5c:b1:25:7b:e1:
57:21:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:12 2023 by rpki-client on console-ams.rpki-client.org