Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/xNkDbv3d71edPDxc7N-VRw0EoZ0.roa
File: xNkDbv3d71edPDxc7N-VRw0EoZ0.roa (raw, json)
Hash identifier: ys6wQdeRstbpA9+wLMp5bIGiABfj2t456/Sf8e1p4gc=
Subject key identifier: C4:D9:03:6E:FD:DD:EF:57:9D:3C:3C:5C:EC:DF:95:47:0D:04:A1:9D
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 4F
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/xNkDbv3d71edPDxc7N-VRw0EoZ0.roa
Signing time: Wed 01 Feb 2023 01:29:56 +0000
ROA not before: Wed 01 Feb 2023 01:29:56 +0000
ROA not after: Mon 15 Jan 2024 01:30:02 +0000
asID: 9351
IP address blocks: 202.60.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Feb 1 01:29:56 2023 GMT
Not After : Jan 15 01:30:02 2024 GMT
Subject: CN=C4D9036EFDDDEF579D3C3C5CECDF95470D04A19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:8f:f4:55:85:9b:52:60:87:7e:23:74:48:
b0:0f:fd:02:08:32:3a:0c:43:62:a2:6a:65:6f:fe:
97:d9:17:fc:97:52:6b:0a:36:69:ce:a4:ea:96:24:
08:72:0a:ac:29:27:8f:b3:69:78:7d:4f:eb:29:f7:
e2:ca:3c:e1:06:0e:5e:3b:7d:d0:b7:8e:89:8d:99:
8e:33:6f:6a:65:48:4c:b4:d6:35:2d:f2:ed:c6:13:
a1:e1:18:5c:ac:25:ff:92:0e:a8:57:f2:f5:04:36:
2d:41:f0:c7:ad:14:a0:1f:80:c0:2c:3a:38:41:ab:
a2:13:88:db:f0:56:ae:32:77:79:9b:d9:58:52:20:
1c:36:54:56:17:2a:fb:9f:42:91:aa:0a:5c:2f:2f:
f6:83:eb:15:d4:c5:3a:c7:c7:fd:27:f8:3f:18:79:
ee:bd:2b:16:0e:41:05:31:ad:2d:45:2e:da:23:68:
20:33:9d:01:b2:7b:d2:3c:9f:38:9b:10:b7:bf:e4:
da:d0:5f:e2:b3:a8:39:95:a3:ec:f4:9c:0d:83:ef:
04:d9:85:c0:9c:98:0d:d8:53:ed:6f:40:35:07:ea:
06:fc:13:47:8b:8c:01:86:cc:e4:eb:e9:ad:f3:2c:
e9:66:6b:e3:53:ef:dc:d9:60:9a:ae:c3:a9:84:33:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:03:6E:FD:DD:EF:57:9D:3C:3C:5C:EC:DF:95:47:0D:04:A1:9D
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/xNkDbv3d71edPDxc7N-VRw0EoZ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.60.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:d3:0f:1b:be:c8:df:fd:2e:88:07:08:5b:66:45:8e:c7:96:
d9:9c:6d:d7:d7:ac:5e:6d:3f:d8:ba:61:40:90:06:14:91:10:
4a:25:5c:2f:57:bd:46:2f:a5:26:f5:91:f9:93:c6:bb:8d:0d:
c2:18:47:88:bb:98:13:d0:07:ed:26:23:07:a3:58:41:74:f2:
39:ea:18:92:56:79:56:e7:8f:d5:30:29:6e:3a:d6:72:d5:dd:
ac:0f:b7:c1:f7:9f:a9:02:bd:7e:36:b8:bb:a4:62:a3:8d:8d:
20:7d:27:f3:50:c3:61:8c:c2:50:09:11:89:f4:c1:f8:b0:fd:
f2:4a:16:47:9e:8c:2e:c4:95:f6:e2:63:ba:62:87:35:06:0e:
ff:60:37:25:78:56:72:60:69:b1:43:43:b1:bd:b0:1c:ad:58:
78:20:5b:f1:38:6a:b2:4c:ea:64:8a:38:2c:11:84:b4:be:8a:
f7:33:57:09:58:f4:0f:48:a9:b5:2d:7a:6c:39:35:33:ca:17:
86:4a:a5:53:12:3f:21:35:b4:c4:14:ba:f2:78:68:49:1d:91:
fb:d6:d4:2a:9f:de:ab:86:b5:f5:86:a0:53:12:b1:4a:59:72:
b0:06:be:e7:a6:3e:07:07:8b:60:25:97:03:5a:f0:1c:aa:e1:
02:58:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org