Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/8ZrnkGzq7pit7bpIZksAYKeQy2Q.roa
File: 8ZrnkGzq7pit7bpIZksAYKeQy2Q.roa (raw, json)
Hash identifier: Q2eg1GfKicuIImvC0IS3uoxJLePhBdIWnWYNXK0QsNQ=
Subject key identifier: F1:9A:E7:90:6C:EA:EE:98:AD:ED:BA:48:66:4B:00:60:A7:90:CB:64
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 53
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/8ZrnkGzq7pit7bpIZksAYKeQy2Q.roa
Signing time: Wed 01 Feb 2023 01:29:59 +0000
ROA not before: Wed 01 Feb 2023 01:29:59 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 9351
IP address blocks: 218.216.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Feb 1 01:29:59 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=F19AE7906CEAEE98ADEDBA48664B0060A790CB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9e:9e:e1:8f:cf:5d:76:16:bd:01:88:c8:5d:
fb:27:df:fc:6c:f9:35:2c:b5:7b:18:fb:62:a3:14:
ac:0e:fb:c6:3c:ed:d7:48:8f:18:7f:92:dc:47:f8:
de:27:c6:8e:52:ca:fc:23:7f:30:c9:6c:2c:da:8a:
97:7d:4c:d7:23:b1:70:36:22:71:d7:ce:3c:e8:32:
01:d5:41:b8:88:82:c9:7d:8a:ed:d2:48:ca:2d:b0:
6a:aa:14:2e:f9:d7:2a:13:04:93:f6:c6:2f:b0:86:
97:d1:bd:57:32:88:a4:77:7f:92:9a:a4:69:27:5a:
90:5d:31:a8:05:7e:94:24:bf:97:6e:2c:87:5f:b0:
5d:5f:2d:f4:1c:67:15:76:69:d1:36:14:6d:e4:15:
3e:88:95:da:71:d8:36:f6:99:33:9b:ab:15:fb:76:
89:f4:46:a7:91:58:f9:b1:b0:54:5c:55:6e:16:23:
d6:86:ca:ab:7a:a5:11:80:94:b7:14:2d:c1:1f:96:
85:06:ed:cc:1e:82:02:33:8a:a0:5e:d9:2f:9e:25:
17:f7:38:88:cb:c3:9d:80:b2:ea:4b:03:a6:05:6d:
f2:e4:bc:24:45:f6:c8:ef:d6:2e:25:34:02:38:29:
3f:5f:35:7b:6b:24:5d:86:6f:d1:98:a5:50:fd:7c:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:E7:90:6C:EA:EE:98:AD:ED:BA:48:66:4B:00:60:A7:90:CB:64
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/8ZrnkGzq7pit7bpIZksAYKeQy2Q.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.216.160.0/20
Signature Algorithm: sha256WithRSAEncryption
74:0d:df:da:31:60:a9:0f:84:a4:54:da:fe:c5:5a:b6:0f:0e:
e5:dd:f3:4e:5c:ca:57:f0:bf:56:e9:27:34:d8:75:bb:b4:a2:
32:fb:fb:24:82:7c:65:06:c3:2f:92:40:59:1c:8a:57:09:12:
9f:86:d7:55:e9:97:2f:9c:5f:56:5e:a4:66:59:8c:75:c9:9a:
b9:d8:dc:7d:e1:7d:bf:7d:d5:f1:11:79:ce:82:1f:6f:3d:19:
7b:b3:d0:57:c8:20:f7:f2:76:e8:e1:e4:c6:08:77:b9:3a:43:
8e:39:94:67:12:b2:5c:a9:97:f6:05:e7:4d:69:72:e5:b9:a9:
95:68:3f:a2:fa:85:74:f0:e5:f9:f8:8f:71:04:70:af:bf:95:
cf:d7:f3:1b:36:de:71:26:66:93:a1:a9:1d:de:e5:5e:32:5b:
9c:1b:51:6b:cc:a0:c8:a4:6e:ec:7d:16:f8:e2:dc:fc:6c:c1:
07:47:4f:dc:a8:42:b8:60:0d:6b:1f:2e:b8:47:8d:4c:3f:e2:
07:18:45:d2:7f:7a:13:d2:2e:12:4a:4f:4e:b1:46:c0:13:81:
b8:fa:96:e0:16:4c:e2:07:74:16:69:ea:f3:44:96:da:71:eb:
42:fe:ac:35:a0:61:3b:78:97:b9:e4:c3:e0:a4:2e:65:5e:d8:
34:c6:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org