Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/ED68otPm1dBFqxstWukQ3reg_XQ.roa
File: ED68otPm1dBFqxstWukQ3reg_XQ.roa (raw, json)
Hash identifier: lkBOQPHjRyLzYEQjKXRj3t2wjcPeZ/UzMhIu0HGnP9w=
Subject key identifier: 10:3E:BC:A2:D3:E6:D5:D0:45:AB:1B:2D:5A:E9:10:DE:B7:A0:FD:74
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 05
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/ED68otPm1dBFqxstWukQ3reg_XQ.roa
Signing time: Tue 29 Mar 2022 03:20:48 +0000
ROA not before: Tue 29 Mar 2022 03:20:48 +0000
ROA not after: Wed 29 Mar 2023 00:14:48 +0000
asID: 55385
IP address blocks: 202.174.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Mar 29 03:20:48 2022 GMT
Not After : Mar 29 00:14:48 2023 GMT
Subject: CN=103EBCA2D3E6D5D045AB1B2D5AE910DEB7A0FD74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:fe:a2:c9:87:fd:c4:4d:c1:ca:d9:cd:90:
d3:29:30:03:13:ca:e7:c8:b7:f9:5f:eb:b0:e3:70:
50:e7:a4:f4:26:c1:3c:c8:fb:ab:bc:c9:bf:dd:d6:
01:5d:8e:d8:e7:16:72:c1:8a:81:81:a2:2f:55:de:
d0:66:8d:16:7d:12:18:74:9c:e7:1a:0c:50:36:e3:
6e:9f:06:c1:c8:fd:af:db:fc:69:0b:40:37:9d:09:
2b:07:b1:0a:96:69:0d:e3:2c:85:41:a6:d1:59:f6:
fd:df:f4:80:0d:a8:fc:c3:42:df:ed:b4:f0:bf:4b:
39:17:de:9f:ea:45:54:f1:4e:14:24:bd:a1:60:2c:
9e:fd:d9:9c:34:ac:91:12:ee:29:57:e5:64:b8:0a:
51:c8:58:7a:07:de:50:51:81:df:14:1e:9f:e7:28:
ca:16:16:02:fb:25:d0:98:de:3b:c0:c3:0c:2e:0d:
95:ed:d3:d4:cb:90:72:26:ac:6b:96:e9:3b:2f:10:
4d:56:f8:ba:7a:27:64:e1:3e:a0:8b:a9:80:19:06:
20:54:a5:b5:d6:0d:10:a9:75:cf:6b:31:b2:d1:0d:
b2:7a:f2:12:6b:89:e0:b5:f2:71:50:a5:15:91:b4:
4d:33:3d:e2:c3:e0:34:d5:e7:a8:ee:99:68:7b:ad:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:BC:A2:D3:E6:D5:D0:45:AB:1B:2D:5A:E9:10:DE:B7:A0:FD:74
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/ED68otPm1dBFqxstWukQ3reg_XQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.174.58.0/23
Signature Algorithm: sha256WithRSAEncryption
40:62:5f:aa:46:38:be:38:45:42:f0:29:d8:9e:c8:09:0c:9a:
3d:e4:2e:1e:64:54:6f:b6:ab:56:cc:3b:a5:81:8a:77:d6:a1:
c4:5c:a1:e8:c0:96:70:78:4e:60:61:80:8b:5f:e6:db:dc:73:
5d:9a:fb:d0:13:0f:73:cb:f1:21:f8:54:b2:35:0f:c8:d6:c5:
d2:8c:c3:88:24:51:67:96:ae:18:f3:bb:9d:e3:a5:9a:23:97:
b8:79:64:65:9f:5f:bb:f6:67:a8:a3:38:79:f4:71:16:c8:22:
a1:7a:20:b7:a6:e7:37:6f:21:e9:0e:2a:d9:00:e2:5a:a4:af:
ca:14:15:85:50:c6:83:6b:29:78:b0:77:14:45:96:6b:63:05:
be:25:2b:99:8c:f9:17:af:43:75:cc:87:fa:2c:b0:95:84:87:
d7:3c:06:dd:41:c6:99:22:b9:7b:88:42:07:24:71:0d:0d:76:
f9:1d:d4:2e:e6:a0:15:03:63:89:01:8d:7f:80:35:48:cf:4e:
96:10:41:cf:91:4a:a0:4c:f1:9c:a3:1e:67:b5:92:a5:ae:01:
96:4e:e2:11:3d:b6:9a:37:b8:83:d9:b5:2e:36:e3:6e:82:bc:
1a:b6:75:b6:89:87:d8:c8:c6:1b:aa:b5:ad:b5:34:55:b4:d0:
7b:7b:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org