Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/rUPy6J_al46laSpwzv1J78YOP3A.roa
File: rUPy6J_al46laSpwzv1J78YOP3A.roa (raw, json)
Hash identifier: yO4Y5z6HtQlk3lohfjFlKh4PEQDNoO/xmj4/08Ppjr4=
Subject key identifier: AD:43:F2:E8:9F:DA:97:8E:A5:69:2A:70:CE:FD:49:EF:C6:0E:3F:70
Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial: 03
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/rUPy6J_al46laSpwzv1J78YOP3A.roa
Signing time: Tue 29 Mar 2022 03:20:47 +0000
ROA not before: Tue 29 Mar 2022 03:20:47 +0000
ROA not after: Wed 29 Mar 2023 00:14:48 +0000
asID: 17683
IP address blocks: 202.174.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
Validity
Not Before: Mar 29 03:20:47 2022 GMT
Not After : Mar 29 00:14:48 2023 GMT
Subject: CN=AD43F2E89FDA978EA5692A70CEFD49EFC60E3F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:1f:60:cd:92:c4:c4:85:17:21:9d:a4:23:
62:39:4a:b2:86:73:3e:84:e0:d0:bb:23:8e:d4:7a:
7d:8e:2b:42:6a:32:35:a1:2c:e1:64:43:d1:26:ce:
71:bb:70:fb:c9:93:74:f9:83:07:b2:25:81:ac:f5:
1c:72:26:9b:f9:75:0c:e4:b5:75:f4:07:5b:51:b4:
c6:5d:89:b7:37:12:61:68:83:a1:2e:70:d3:2c:75:
89:33:11:ca:5a:2a:77:54:83:5d:aa:c0:e2:0f:f6:
d3:ba:e4:f3:fc:ac:07:f3:7e:15:bf:d9:9b:36:87:
83:29:f6:25:b9:54:f3:df:70:6e:b3:d4:8d:98:f9:
90:57:c7:5b:65:bf:eb:af:a8:a3:dc:1b:e4:a2:c6:
dd:30:d6:0d:dc:5d:e5:10:1d:b2:7f:c6:8b:67:1a:
40:77:36:ce:5d:3a:cc:b3:d7:1b:0d:c0:8e:0f:7f:
dd:cd:e8:ab:e4:59:e0:51:aa:6b:76:4d:c2:43:3e:
57:78:ab:7c:81:13:bc:93:4d:39:c7:03:c5:10:d8:
52:7f:e0:15:27:54:8c:0c:3e:4a:ee:f9:5a:67:c4:
bd:ba:d7:95:d6:49:f5:0b:7d:8b:b0:6e:c4:71:be:
78:e6:b1:7a:4e:f5:93:fe:39:b7:31:e9:8b:4c:60:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:F2:E8:9F:DA:97:8E:A5:69:2A:70:CE:FD:49:EF:C6:0E:3F:70
X509v3 Authority Key Identifier:
keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/rUPy6J_al46laSpwzv1J78YOP3A.roa
sbgp-ipAddrBlock: critical
IPv4:
202.174.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c6:c3:52:b6:1d:ea:3d:07:a6:0d:48:c1:4e:5b:c3:dd:21:8e:
ee:86:62:75:f7:06:e6:2d:34:25:64:ef:3a:9b:fe:38:a8:e2:
af:30:8b:49:d4:42:41:77:5a:30:59:8a:2e:c7:3f:06:2c:a3:
3f:77:c6:1d:94:16:fa:c0:35:69:5d:93:fc:c8:83:65:4a:78:
02:47:d4:19:5b:17:02:8c:27:3c:b2:81:92:cc:73:18:49:8d:
9d:96:b9:12:57:3f:c6:b7:e9:0f:ce:68:d2:88:3a:4a:b5:37:
fc:59:64:dc:9d:ee:39:87:6e:10:8f:62:06:85:c4:63:0c:7f:
2a:a4:0b:ab:a5:53:10:7e:b4:8b:0b:8d:3b:8d:8e:51:b9:db:
d7:40:fc:80:56:68:66:e6:77:e2:02:b2:db:d5:7c:4c:04:97:
1e:75:c3:69:69:bb:ca:83:76:b2:56:cd:92:bd:9e:8b:0b:73:
2c:b1:ee:b1:0d:6b:06:ba:c2:c8:ae:f1:d4:1d:01:89:94:9f:
a5:8c:c2:c7:5a:63:40:c9:be:9a:5c:32:1a:41:f3:6a:c0:12:
e9:4a:ed:5a:eb:f4:62:11:15:69:a1:5b:1f:75:6a:9d:d7:fa:
5d:e1:6f:fa:6f:b1:10:6d:71:40:74:62:59:ec:4b:53:89:56:
19:4b:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org