Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/8B3wEAIhin8_MaOJ4IMLoxk0VGQ.roa
File: 8B3wEAIhin8_MaOJ4IMLoxk0VGQ.roa (raw, json)
Hash identifier: mu20nWXWS/5Ep3kmB7yhf2poMlzhGvs3EGO0rdkXVk0=
Subject key identifier: F0:1D:F0:10:02:21:8A:7F:3F:31:A3:89:E0:83:0B:A3:19:34:54:64
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0435
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8B3wEAIhin8_MaOJ4IMLoxk0VGQ.roa
Signing time: Thu 13 Apr 2023 09:55:26 +0000
ROA not before: Thu 13 Apr 2023 09:55:26 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 10010
IP address blocks: 116.68.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Apr 13 09:55:26 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=F01DF01002218A7F3F31A389E0830BA319345464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:e8:b0:ac:ef:73:c8:d7:56:ee:21:f5:35:
3f:36:c8:ca:a2:b5:91:5a:4b:b0:da:0c:e2:a8:14:
2b:b3:a9:01:a8:32:cd:3a:00:7e:60:ad:f3:16:4b:
83:b7:4b:2e:e2:27:35:90:78:36:0d:6b:7b:87:22:
b3:ea:13:df:f7:be:de:89:49:3b:7e:ff:98:da:c3:
3a:df:23:8b:b3:29:68:89:21:92:da:d3:35:45:d2:
67:f2:db:ea:b0:e4:49:a7:ab:de:7c:e1:a1:34:98:
83:20:9f:f4:92:21:98:c8:e1:d5:69:53:03:50:5a:
2f:77:22:c5:29:e5:f2:10:e8:d5:ab:15:b4:8b:37:
e5:5b:d4:c1:7a:cd:4a:6a:ac:a4:18:13:e0:d4:2a:
b2:3b:f4:2f:33:89:5d:7b:4f:b4:22:b4:5a:6b:59:
9e:44:c8:1b:e9:55:17:a2:af:0e:dd:4f:aa:fb:44:
7e:27:12:2e:c5:25:06:20:50:df:2f:c5:57:0b:9b:
16:14:90:5c:9b:8e:c9:21:6a:e0:92:17:5f:50:19:
14:f8:4e:65:c8:e7:0d:4b:ab:c5:6a:27:7a:f9:a1:
69:33:aa:b8:61:5f:b9:9f:c3:13:25:e4:e9:de:27:
82:e1:b7:70:48:54:91:5b:22:a6:1c:55:f5:fe:1a:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:F0:10:02:21:8A:7F:3F:31:A3:89:E0:83:0B:A3:19:34:54:64
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8B3wEAIhin8_MaOJ4IMLoxk0VGQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.68.218.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e8:f6:f4:19:8c:32:cd:49:2f:14:38:3f:e7:a3:f9:cd:55:
57:84:d6:d4:99:04:7c:b1:88:0e:fe:fc:92:52:0a:a1:be:f7:
91:5f:ad:87:4e:15:4f:8a:56:50:e8:72:31:01:32:23:6f:19:
de:06:d7:3c:56:27:fb:66:43:99:d1:7b:9b:77:ca:21:d2:95:
09:e8:d7:0b:03:69:96:cc:2c:db:c7:0f:35:38:bf:ca:1a:26:
40:31:66:ab:31:e4:14:82:3f:40:05:50:8d:c4:73:2b:36:58:
62:d3:78:5d:be:4f:36:0b:9b:27:ed:c4:48:5c:03:6e:46:77:
a1:0a:0e:ed:b2:ec:4c:cd:a5:76:42:21:74:12:78:b0:46:db:
28:2c:bd:2f:04:fa:7e:42:d3:28:da:99:1e:46:29:78:57:2b:
ac:20:bd:a2:b3:ee:46:7f:46:2c:ca:2f:aa:af:52:b6:30:d8:
32:a7:77:27:80:44:eb:50:82:e2:99:0b:67:33:32:a8:eb:1d:
64:fd:64:3d:20:13:f6:22:1a:74:c4:d6:1e:42:2a:0e:28:f9:
2b:ce:dc:1d:13:ac:51:63:c1:3a:07:a7:9b:20:5b:f2:ee:2e:
aa:84:81:16:80:e6:4a:cc:ea:0f:e6:ee:37:89:33:6b:65:ee:
0c:61:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org