Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/YEIYkkfXyW2D66zJbKwmxZDaw3M.roa
File: YEIYkkfXyW2D66zJbKwmxZDaw3M.roa (raw, json)
Hash identifier: /xqqUex4GPrBt/q08GGgIfsHfYa28GMWe0wgCiAeKEw=
Subject key identifier: 60:42:18:92:47:D7:C9:6D:83:EB:AC:C9:6C:AC:26:C5:90:DA:C3:73
Certificate issuer: /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial: 1C
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YEIYkkfXyW2D66zJbKwmxZDaw3M.roa
Signing time: Tue 01 Feb 2022 01:31:16 +0000
ROA not before: Tue 01 Feb 2022 01:31:16 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 2527
IP address blocks: 92.202.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Validity
Not Before: Feb 1 01:31:16 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=6042189247D7C96D83EBACC96CAC26C590DAC373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:2c:75:52:60:08:c0:65:2d:0c:ca:10:89:
4e:ea:1d:bf:e6:b7:0d:42:3c:97:e6:3d:2b:3e:42:
fc:2a:2f:a7:dc:da:8c:7b:4c:e8:28:9e:16:96:35:
0f:14:fb:b0:2a:b6:3c:22:a0:e4:88:c8:cc:cd:7e:
5c:6f:bf:1f:aa:4c:c9:9c:44:4d:b7:7d:4f:9c:81:
9b:23:31:96:42:25:e4:8f:83:12:ff:59:29:8a:24:
f0:d0:fe:9f:e6:ff:69:c3:d0:55:cc:68:54:f5:5b:
2b:83:df:b4:05:46:04:30:02:1e:70:24:31:87:3d:
a1:d3:97:50:27:da:e3:3e:e1:12:92:a6:c9:4b:4e:
d4:12:61:05:d1:82:48:06:3f:33:13:3e:35:a2:60:
f0:5e:7d:2c:05:a8:35:2c:de:67:d5:b1:fe:a9:2f:
e9:29:e0:bf:76:08:92:7b:95:43:2c:8c:b0:06:16:
84:6d:b4:7e:cc:11:f4:2e:ad:b2:18:62:d3:8e:58:
74:6f:9e:5e:76:e6:dd:2d:05:ca:37:4d:0f:f1:af:
cc:e6:bb:dc:fe:5c:73:cc:69:ba:28:9f:d3:63:98:
5f:97:76:df:09:4c:d7:ac:cf:d0:6f:6c:b2:f5:46:
a8:1f:e1:51:1f:75:67:08:8b:65:4c:c0:a5:44:06:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:18:92:47:D7:C9:6D:83:EB:AC:C9:6C:AC:26:C5:90:DA:C3:73
X509v3 Authority Key Identifier:
keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YEIYkkfXyW2D66zJbKwmxZDaw3M.roa
sbgp-ipAddrBlock: critical
IPv4:
92.202.0.0/15
Signature Algorithm: sha256WithRSAEncryption
61:66:e0:ea:8b:ec:3b:0d:74:5e:1e:ac:e1:f9:ca:0a:5e:0b:
5b:cf:5d:4c:fd:81:47:04:0b:83:d0:6d:80:6a:1d:a4:b3:e0:
a6:74:7d:c2:fb:10:ac:8c:c1:d6:84:7f:ae:46:e5:ce:9f:2a:
fd:3c:e8:87:96:a8:4c:2a:ac:fc:31:d6:88:5a:7a:95:94:0d:
a0:bc:0b:e3:5d:20:23:2d:86:59:8b:21:4a:5f:48:b2:82:d6:
fa:29:34:02:6e:fb:48:52:e0:d9:01:e6:52:ab:6a:eb:e4:d6:
97:ab:66:9b:40:4d:3a:11:c9:65:2f:ce:ec:7b:06:be:05:b3:
30:07:64:08:5c:1a:85:4d:67:fe:80:f0:ae:8b:11:e3:f5:f9:
70:ad:ed:3f:cc:a8:75:81:36:49:41:11:64:bc:bd:fd:3c:4c:
95:bb:5b:45:98:7b:60:47:db:47:e0:d4:c3:3d:0b:09:dc:93:
5e:dd:0e:07:17:42:0b:41:23:2f:7f:a2:82:18:b3:40:6a:93:
eb:b2:9e:35:c2:06:66:26:34:7a:26:cf:2c:95:3d:38:b8:52:
09:5f:3f:f5:a8:ce:53:2d:af:03:6a:34:30:8a:ef:35:1f:a1:
08:59:f7:d2:86:2f:9f:84:f1:1a:25:cc:e2:d7:af:77:3f:2c:
ba:ae:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:32 2025 by rpki-client