Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/_-nKq0HnolvImF9iC8vKktJfloI.roa
File: _-nKq0HnolvImF9iC8vKktJfloI.roa (raw, json)
Hash identifier: PHvPd65elNRDVmRSZ+SuU5WcBEOCHu+NhUmZeoO+XcI=
Subject key identifier: FF:E9:CA:AB:41:E7:A2:5B:C8:98:5F:62:0B:CB:CA:92:D2:5F:96:82
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 38
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/_-nKq0HnolvImF9iC8vKktJfloI.roa
Signing time: Tue 01 Mar 2022 08:34:01 +0000
ROA not before: Tue 01 Mar 2022 08:34:01 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 113.20.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:34:01 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=FFE9CAAB41E7A25BC8985F620BCBCA92D25F9682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:ed:40:60:5d:c3:6e:d5:ce:04:ab:4f:55:
77:7c:24:54:f7:4f:cd:e3:b5:db:c2:53:1e:60:d1:
d9:35:8b:ef:6e:d6:a1:17:22:cf:35:e7:31:c9:48:
26:79:76:77:3a:cd:69:2f:09:58:90:d9:1f:68:61:
a5:e1:d9:2f:0e:58:45:a6:12:b4:ea:b6:c9:f8:48:
b3:40:fc:2c:12:a2:e1:17:67:4f:bb:b5:7c:8c:d4:
e4:3e:3b:79:96:94:b2:18:91:d4:c8:78:06:2a:5c:
33:50:95:10:47:af:eb:dc:d4:3d:21:6c:ba:e3:86:
5e:09:65:a5:d8:40:65:0c:50:a2:09:88:db:2b:02:
07:b1:fd:f2:63:dc:99:ce:85:cb:68:43:9d:11:81:
05:e0:87:b2:6a:51:df:d3:e3:a2:2e:d9:b6:93:6e:
c6:6b:66:12:33:33:b4:c1:84:58:ff:6c:1f:5f:a3:
48:5c:ee:e0:8d:90:d4:8a:90:44:b4:e3:c0:80:05:
51:55:aa:48:a6:6d:13:52:b5:cf:fe:1a:5e:6a:9e:
e7:99:df:5d:15:16:7f:db:bf:ca:60:13:ae:a8:53:
2e:74:6a:71:06:8c:46:34:a9:b8:84:0a:05:2d:1b:
0f:1e:aa:a6:2c:fd:3c:eb:d1:3d:4c:d4:eb:15:a5:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:CA:AB:41:E7:A2:5B:C8:98:5F:62:0B:CB:CA:92:D2:5F:96:82
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/_-nKq0HnolvImF9iC8vKktJfloI.roa
sbgp-ipAddrBlock: critical
IPv4:
113.20.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:a9:d9:bb:72:1d:3a:9f:0a:f6:f6:cf:e3:c0:5f:18:eb:b8:
39:23:ad:fb:f3:86:dc:b7:27:d0:e1:97:9f:d1:56:10:58:7f:
e4:8d:bf:14:37:3e:e9:ab:eb:88:a2:f5:90:ba:8f:d7:16:2e:
2f:ee:ac:c3:63:54:79:95:a1:30:d9:5b:8c:95:0c:85:08:17:
b8:4a:c3:bf:ef:8f:8a:f6:e6:1d:61:f0:e6:af:b3:7b:01:f8:
6e:14:55:ec:06:31:08:3f:d5:07:17:0b:fc:70:a0:35:3b:f2:
d9:a2:8c:01:6d:3c:78:05:f6:e0:bc:a2:ed:24:59:ce:82:e4:
8d:02:71:ea:9a:0b:b6:53:bf:cf:c2:65:82:10:30:d8:9e:f1:
69:a7:5c:00:a7:76:4b:bf:93:3d:0b:ea:3d:21:8b:f2:16:5c:
79:3c:63:f6:aa:7d:bc:18:cd:8a:fa:b6:9a:0d:d0:f8:db:b8:
e3:5f:bf:14:05:4d:9e:51:f1:fa:69:fb:57:3a:7e:45:5c:4b:
ae:9f:2c:b3:fa:c6:5b:61:fd:a8:e4:1e:af:48:77:9e:83:ac:
39:d6:2f:7d:80:0c:63:11:ae:46:fa:c7:56:bf:9c:1e:1a:8e:
31:36:48:6a:6f:75:00:54:e8:e6:9d:27:ec:95:30:60:07:ad:
af:89:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org