Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/S76qb-5sxz6OIE5rvZnXhYap5Ck.roa
File: S76qb-5sxz6OIE5rvZnXhYap5Ck.roa (raw, json)
Hash identifier: V2OXf6t9UT0SdF4c3QOUII0U0/5hanFTz2GezeMV1xU=
Subject key identifier: 4B:BE:AA:6F:EE:6C:C7:3E:8E:20:4E:6B:BD:99:D7:85:86:A9:E4:29
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 76
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/S76qb-5sxz6OIE5rvZnXhYap5Ck.roa
Signing time: Mon 01 Jan 2024 01:28:18 +0000
ROA not before: Mon 01 Jan 2024 01:28:18 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 9351
IP address blocks: 202.60.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Jan 1 01:28:18 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=4BBEAA6FEE6CC73E8E204E6BBD99D78586A9E429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c8:1a:a4:de:eb:71:59:82:ea:dd:39:c1:4d:
a0:59:ec:7e:cb:b9:bf:0f:17:19:d3:c4:18:d1:13:
ae:75:ee:d7:93:b1:ee:54:d9:07:00:37:a5:42:c4:
07:cd:64:ec:f3:bf:2f:1b:76:a6:1e:5c:d7:90:74:
3d:90:a9:59:71:02:b0:7f:8f:cf:58:4c:84:be:bf:
5c:d3:80:dc:e1:9f:fc:67:66:c7:2b:42:53:bf:9e:
e2:d9:8e:fe:c7:83:20:21:ac:0c:0b:16:f6:5d:cd:
74:5f:75:1e:5a:e3:e0:3b:11:54:3b:4c:1d:a7:94:
49:17:38:aa:f8:e3:20:0e:be:dd:09:0b:58:14:5a:
8b:f2:8c:d4:eb:3d:88:24:4a:9a:b6:16:f4:15:44:
23:b6:11:35:03:b8:f4:14:19:45:34:ed:7d:7b:4c:
59:61:ad:7f:e8:5a:b7:69:65:09:df:10:64:9b:2e:
7a:3c:c7:38:9a:06:6a:b9:3b:87:88:52:29:e4:d7:
79:9d:2c:2f:21:82:16:76:38:46:df:08:64:20:95:
77:a1:19:73:db:d2:f8:88:6f:4a:18:a9:e4:4e:73:
62:9d:ff:36:10:1d:ad:3b:e4:a1:49:55:66:04:e1:
da:8c:4c:3a:c4:63:f7:8d:f0:b4:83:1c:e0:88:1b:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BE:AA:6F:EE:6C:C7:3E:8E:20:4E:6B:BD:99:D7:85:86:A9:E4:29
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/S76qb-5sxz6OIE5rvZnXhYap5Ck.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.60.160.0/19
Signature Algorithm: sha256WithRSAEncryption
c5:4a:0b:e9:67:4b:71:01:2d:c8:41:66:56:e3:31:36:da:2e:
99:33:b7:08:bc:52:e1:44:bf:69:a6:fc:05:2c:77:bb:b1:12:
53:78:47:fc:cb:eb:76:e6:3b:02:f0:f0:1e:10:ea:26:8a:5f:
33:92:6a:e2:f3:e3:d7:88:8d:dd:55:12:77:a0:2d:17:cd:24:
ff:c4:a2:f2:e6:29:ab:02:90:df:48:a3:fb:9f:97:f3:c6:38:
39:51:ad:28:b3:96:01:77:d7:01:75:76:62:58:f5:d9:ee:51:
ac:6a:f6:0f:d0:e4:46:db:74:33:14:cc:bd:6a:a0:33:80:6e:
89:bc:6b:97:cb:66:4a:0f:6d:44:92:78:75:11:20:a0:b2:13:
15:db:76:06:45:87:94:35:f1:0d:72:b0:f8:6b:9d:fd:0e:f4:
5e:87:94:09:d3:7f:d6:db:0d:fd:8e:98:97:72:9f:ed:3e:2b:
87:50:ba:aa:68:3f:06:6c:05:0f:0f:66:f3:84:3e:ec:42:5f:
00:58:66:08:45:de:a3:5b:9e:80:48:14:af:a8:8e:b3:24:87:
5f:0f:93:9f:94:e1:3d:f1:d4:f4:7d:9b:cf:25:6f:f1:98:da:
31:51:10:03:64:38:14:88:dc:3a:0d:14:4a:4d:89:0b:3c:6f:
6c:30:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:15 2025 by rpki-client