Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/3R8_vjqRLPVhDczk5fmzN0paUGg.roa
File: 3R8_vjqRLPVhDczk5fmzN0paUGg.roa (raw, json)
Hash identifier: r1wSzjONMcIkq/KP172Ch+0bdn9x9aPF7xrCKl5pLMo=
Subject key identifier: DD:1F:3F:BE:3A:91:2C:F5:61:0D:CC:E4:E5:F9:B3:37:4A:5A:50:68
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 33
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/3R8_vjqRLPVhDczk5fmzN0paUGg.roa
Signing time: Wed 20 Apr 2022 09:27:34 +0000
ROA not before: Wed 20 Apr 2022 09:27:34 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:27:34 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=DD1F3FBE3A912CF5610DCCE4E5F9B3374A5A5068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:24:4a:af:5c:17:73:9a:ef:79:00:53:73:
d7:5f:22:41:5e:7a:7b:18:09:c7:13:24:6a:9b:90:
b6:dd:27:07:0b:d4:af:dc:33:81:2b:c9:17:24:b1:
9e:5d:32:b6:1e:c0:9a:fa:b7:6f:e2:fe:87:f9:cf:
e1:bb:78:03:cc:18:10:88:88:59:2f:95:5e:b8:00:
82:11:91:6b:7a:b5:2b:05:ba:92:4c:79:84:e2:d3:
79:78:c1:61:cb:2f:80:a0:7d:e7:47:e8:c9:87:01:
84:31:bd:37:07:7b:91:08:db:69:2f:b5:23:cc:5e:
01:f4:16:06:d8:86:e7:2e:ee:00:77:a6:aa:8a:24:
04:c6:47:9a:4b:69:2e:6b:89:b6:ef:19:b8:7e:94:
4a:51:c7:62:4d:b0:3d:b0:ec:a3:bb:20:20:6a:a5:
93:cd:4b:3b:5b:ae:42:8e:e8:0e:7d:86:ab:bc:4f:
ba:ba:e5:c0:81:b6:69:c2:e8:20:57:c5:0b:a6:35:
9f:06:03:83:74:2c:e7:eb:91:2f:45:e9:bd:96:07:
f5:42:f5:b2:2c:88:da:f2:bd:cb:51:c0:f7:5e:cb:
91:2b:cf:5d:00:40:43:0c:aa:93:77:b4:d4:e0:7d:
ea:a6:da:e1:94:92:66:5b:b7:ff:2d:eb:cf:83:27:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1F:3F:BE:3A:91:2C:F5:61:0D:CC:E4:E5:F9:B3:37:4A:5A:50:68
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/3R8_vjqRLPVhDczk5fmzN0paUGg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.96.0/24
Signature Algorithm: sha256WithRSAEncryption
23:57:ac:e6:bf:50:cf:29:ff:94:87:02:1e:70:c8:45:96:35:
7a:64:a6:10:75:aa:1b:fd:a2:21:3a:d3:7d:d5:f7:a6:2e:06:
17:54:1a:09:2e:51:4e:67:1c:e0:e5:6b:9b:d6:d4:16:4f:73:
cc:f3:6a:2e:94:ea:57:17:aa:5e:f5:a2:f2:08:e9:de:5f:94:
46:71:d4:cc:25:81:d1:37:3b:3f:29:c2:22:a2:95:a1:9c:e8:
df:3d:71:ff:fb:ee:00:8e:9b:34:ad:53:34:6f:42:15:df:64:
7b:bf:27:fd:55:13:4e:8c:ad:83:2e:93:00:96:eb:66:75:41:
2a:70:7d:05:26:f7:05:db:88:b3:c7:43:29:b2:96:60:89:6e:
c6:bd:2a:fc:d1:a7:7a:ed:19:34:86:70:d3:68:f1:d8:94:f0:
40:c1:23:80:23:1d:1f:50:79:e0:95:6b:8f:e9:bb:d8:58:90:
ba:df:bb:b6:1e:62:f2:9e:db:dc:b2:eb:0c:f4:c3:b8:3a:a3:
64:9e:4b:b4:c3:d6:77:ee:a2:97:07:56:7d:96:3d:38:e9:a5:
fb:bb:88:c5:7e:9d:01:9a:c8:4d:ab:eb:c1:58:57:cc:41:5d:
35:1f:7f:c4:e3:ff:db:27:85:18:c6:e3:d7:c8:9a:4b:23:ae:
d3:1e:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org