Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/wGDfOxat3Z7-CMigjZI1mfyYdDo.roa
File: wGDfOxat3Z7-CMigjZI1mfyYdDo.roa (raw, json)
Hash identifier: HsFk3H06bsHOhaYRJVFl2rG2R9SBAjTrKzMLSfoUqL8=
Subject key identifier: C0:60:DF:3B:16:AD:DD:9E:FE:08:C8:A0:8D:92:35:99:FC:98:74:3A
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 0F
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/wGDfOxat3Z7-CMigjZI1mfyYdDo.roa
Signing time: Tue 16 Mar 2021 04:45:40 +0000
ROA not before: Tue 16 Mar 2021 04:45:39 +0000
ROA not after: Tue 15 Mar 2022 08:34:35 +0000
asID: 9351
IP address blocks: 202.91.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 16 04:45:39 2021 GMT
Not After : Mar 15 08:34:35 2022 GMT
Subject: CN=C060DF3B16ADDD9EFE08C8A08D923599FC98743A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:fb:39:3c:ce:65:a5:bf:9e:b2:ce:86:af:
26:76:2c:da:5d:a4:a0:65:1f:76:fc:33:e7:41:48:
6d:f8:91:31:11:de:97:43:f5:12:bd:c4:04:c9:3e:
a3:c3:ec:07:1c:44:d7:16:2e:02:b6:39:6b:87:82:
b2:0f:8e:09:04:88:9a:5b:2a:5f:df:b1:9d:d1:ef:
af:b2:da:21:44:8d:10:6a:f4:c0:0b:be:e8:7e:d5:
f4:1a:15:bc:2a:33:f7:5c:25:38:9d:5b:37:54:11:
28:a7:49:04:36:a7:c0:a7:12:1b:c8:9b:81:45:25:
ec:7e:ba:12:cb:ac:b2:4a:75:2a:b4:44:44:15:d3:
7f:d9:5b:64:7b:a8:1c:22:90:bc:71:5f:47:b8:b3:
0d:c1:72:8d:b6:ac:69:ca:8e:3b:3d:ff:db:79:98:
47:4b:a4:4e:a0:df:13:91:01:7e:0b:b7:80:db:c5:
f2:40:bf:58:56:a8:3f:c7:68:ed:86:91:d0:f2:98:
80:39:dc:c0:d3:71:0c:fc:24:74:f0:7b:12:66:e3:
bb:b3:84:d1:f7:b9:dd:b5:50:c4:7e:68:9a:70:43:
7d:55:94:14:b3:64:b0:43:7b:00:17:64:0f:5d:f4:
5c:1c:84:af:a4:f6:e5:4f:65:f4:3d:60:fe:39:56:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:DF:3B:16:AD:DD:9E:FE:08:C8:A0:8D:92:35:99:FC:98:74:3A
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/wGDfOxat3Z7-CMigjZI1mfyYdDo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:be:38:b3:1e:44:86:85:69:5d:2b:00:13:4b:21:44:ca:90:
4f:a1:e9:c5:dd:2b:09:6a:10:60:1a:41:70:6c:0b:df:53:8a:
ec:63:97:22:01:f3:dc:3e:69:56:05:0e:29:66:c7:2a:2f:39:
a9:1a:3e:84:ce:82:8c:1f:db:79:c9:97:ee:49:10:92:25:50:
9e:05:9e:fd:da:7e:02:bf:5a:1a:7f:29:36:a6:42:0a:7c:cb:
f7:7e:9f:6a:14:3c:6b:b6:2e:38:1b:57:e6:1c:eb:5a:c0:5f:
76:0d:83:aa:27:ea:ce:70:10:18:37:08:0f:59:36:ce:0f:10:
a8:56:d3:d7:c1:a7:42:59:1f:9c:d2:8a:0e:9e:88:f0:48:28:
9d:8f:84:aa:43:b2:f9:5e:28:f5:79:64:9d:69:85:96:b1:30:
1c:80:3a:3b:5b:31:5d:a5:4c:14:a8:7e:de:94:0d:6d:1d:59:
01:91:d1:42:df:c6:c3:dd:88:a7:bf:3c:54:ec:e3:06:1f:b3:
04:a9:b9:a8:37:6a:64:ba:cc:b9:19:6f:f4:a6:9d:62:e0:69:
cd:f3:87:2f:ff:1c:26:73:98:cd:ed:59:3c:b8:ee:2b:c9:b4:
7d:78:c1:b3:05:c8:5b:fc:3f:a2:b5:56:a9:ef:25:b5:bd:1a:
db:ba:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:16 2025 by rpki-client