Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/2ECEPGush6AcaE45ZqdxPR6AOAk.roa
File: 2ECEPGush6AcaE45ZqdxPR6AOAk.roa (raw, json)
Hash identifier: zBasO0QnKBZtAT7e+reBQTyK2pyNUAJ19aKpFX3LIcI=
Subject key identifier: D8:40:84:3C:6B:AC:87:A0:1C:68:4E:39:66:A7:71:3D:1E:80:38:09
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 3A
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/2ECEPGush6AcaE45ZqdxPR6AOAk.roa
Signing time: Tue 01 Mar 2022 08:34:01 +0000
ROA not before: Tue 01 Mar 2022 08:34:01 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 202.91.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:34:01 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=D840843C6BAC87A01C684E3966A7713D1E803809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:a1:81:5e:5c:7d:91:f4:27:05:15:2b:fb:
63:1c:14:c3:9a:4f:76:db:09:4c:1a:3e:6e:d4:a9:
a7:2b:58:38:fe:f3:e9:06:a5:31:a6:5e:b1:f1:9a:
d5:ce:be:44:df:8b:b0:0c:fa:fe:67:75:a5:5a:50:
81:30:56:36:f6:32:52:c8:dd:6d:ea:b4:16:00:aa:
0b:d5:7b:ff:93:85:de:96:9a:6b:f2:7c:29:13:57:
d1:45:c8:55:85:a2:c0:db:dc:81:2f:d9:5d:28:bc:
97:e6:e1:4f:69:f2:1a:68:9b:c4:b3:ad:e7:09:34:
95:ae:50:0d:12:60:f1:25:f7:09:cc:77:ff:85:2a:
f2:20:7c:97:49:dc:5f:f8:05:ef:f5:4b:2a:b6:54:
48:06:69:44:89:28:8b:46:9d:33:ad:1e:ef:34:f1:
9f:7a:58:aa:d0:9f:6c:2a:67:3c:f6:09:b4:cc:58:
35:3e:d9:b7:b0:6f:8c:2e:12:db:d7:a2:ea:a3:1f:
fa:24:bc:c7:71:1a:36:08:d1:a4:f1:f9:b4:f4:ba:
53:0b:ff:63:77:f1:70:d9:e4:8a:83:9b:6c:d7:60:
79:61:6e:f9:91:48:23:e1:3b:dd:d3:7b:e7:15:70:
3a:29:47:e7:bf:19:6b:f1:e5:5c:a0:4f:d3:18:44:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:84:3C:6B:AC:87:A0:1C:68:4E:39:66:A7:71:3D:1E:80:38:09
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/2ECEPGush6AcaE45ZqdxPR6AOAk.roa
sbgp-ipAddrBlock: critical
IPv4:
202.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
80:94:64:20:10:e4:5e:72:8e:0c:04:18:b9:94:a6:ee:53:81:
e0:99:2b:91:b0:70:67:d4:e0:09:d5:61:1e:f6:a2:07:6a:01:
6f:a4:16:c1:c3:55:95:21:3f:1c:88:93:f2:a4:9b:3f:fd:94:
35:c8:b9:f2:54:e1:3a:7a:20:38:2c:9f:59:da:51:7a:fe:b8:
53:c6:39:1a:70:cd:55:37:e4:65:7e:82:42:f5:a9:ab:74:c6:
27:72:b7:23:d5:e5:60:4d:1b:ba:f5:ee:4e:64:59:80:fc:fb:
7d:15:47:01:71:38:e9:1d:af:44:27:57:64:6f:00:1a:f1:8b:
f3:4c:20:cd:34:e5:15:59:97:00:25:d7:94:ca:ad:9f:7c:7c:
7a:d8:da:7c:e6:ef:be:e7:8a:82:d8:1f:e5:ad:30:b6:6c:b3:
35:f0:76:bf:ff:19:61:78:b4:e0:64:7f:6c:f9:39:36:e4:a3:
10:ef:b4:23:2b:c9:33:12:62:db:1c:89:f6:e6:40:fd:1a:9f:
02:d2:ed:a0:cf:e5:07:23:1d:a9:8e:f6:6a:00:58:56:84:59:
f2:06:ed:f3:48:7e:be:0f:60:64:9e:0f:12:e2:ec:66:a1:d4:
81:49:87:c6:38:96:b4:8d:b9:02:12:55:25:ba:db:1b:bb:b7:
e7:6c:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org