Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa
File: KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa (raw, json)
Hash identifier: Vl2bFiVq3+OCtysGVefgT9pSBkJHlD4Wzg3OLsVlBAU=
Subject key identifier: 28:10:8C:B2:BF:84:D9:AE:60:1A:A8:F0:E5:B3:B2:ED:AA:F7:35:8D
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 51
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa
Signing time: Wed 20 Apr 2022 09:42:28 +0000
ROA not before: Wed 20 Apr 2022 09:42:28 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.174.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:42:28 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=28108CB2BF84D9AE601AA8F0E5B3B2EDAAF7358D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:df:31:9a:10:24:14:60:0d:1b:a6:74:c5:
cd:20:fb:d4:cb:50:b4:d0:08:1e:70:c8:c7:8b:40:
c7:20:6f:71:fe:f4:bf:d0:8b:47:f1:b6:5a:a3:0a:
8c:af:96:b3:67:b1:cb:0e:12:c0:3a:22:b1:4c:58:
6a:5a:17:c6:cc:c3:49:2f:43:c6:ba:18:0b:4e:02:
fd:42:b4:4f:49:2b:ac:37:23:6b:d9:35:bf:9e:30:
47:61:84:8d:44:98:4c:73:8f:92:27:65:75:53:2d:
25:37:ec:47:97:0f:ee:a8:65:fb:12:93:7d:3c:cf:
f6:f1:6f:bc:69:fc:51:4e:b6:68:d3:3d:46:1d:7f:
dc:3d:6f:9b:4c:a9:01:55:67:4e:45:97:39:94:c0:
40:d5:7b:88:13:0f:1d:e9:3f:55:03:46:35:f5:ed:
9a:63:f3:05:4f:7e:b7:d1:75:16:1c:68:31:5a:1a:
31:91:7d:81:72:da:7a:cf:e6:d7:3f:4b:11:36:be:
b6:28:9f:a1:43:d6:6b:e8:16:63:ed:a9:b8:05:6a:
a6:f0:63:ab:5a:a6:09:0e:58:78:ab:2a:f8:49:2f:
9f:fe:55:c6:a4:66:56:4d:23:ea:3c:be:3d:9b:ca:
17:a7:59:f7:48:fa:a6:3a:f3:40:12:3b:90:d6:84:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:8C:B2:BF:84:D9:AE:60:1A:A8:F0:E5:B3:B2:ED:AA:F7:35:8D
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.174.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:2b:6b:4a:8e:1e:e1:f9:5e:a3:c9:fa:2b:31:5d:99:72:14:
10:db:64:42:8b:2e:2c:8b:7a:72:3b:ef:d2:c8:06:9b:2c:48:
dc:ff:f0:23:c2:31:2d:a6:93:a3:1a:ad:93:85:3c:7d:b4:d6:
7c:3b:45:b2:45:56:23:0f:dc:00:b7:3f:b3:99:a1:a5:db:fd:
ba:ab:00:57:38:83:eb:22:0a:5d:1a:c9:ad:25:6c:6f:1b:83:
e7:a1:67:dd:44:35:33:30:43:65:62:25:da:c1:22:21:af:11:
ee:70:8b:a2:8e:47:44:81:10:e3:85:4c:5f:3f:a2:6d:0f:ff:
2e:6a:1d:f0:6c:50:90:42:a3:52:f9:a6:48:35:fd:52:08:d3:
8d:04:70:3c:2b:6a:52:88:bb:26:01:51:50:38:c8:7c:d9:6a:
43:94:81:61:f1:22:be:cc:3e:64:09:1b:27:f1:01:5e:60:63:
c3:d4:b1:b1:1c:5b:93:4b:87:37:95:97:21:87:fe:62:7b:62:
e2:65:43:8e:71:55:3a:f3:c8:75:53:2f:e8:48:79:54:d3:a5:
01:a4:2a:cb:17:82:6d:10:02:94:45:68:b1:d2:e4:f9:b9:81:
3c:d9:54:0b:04:36:82:61:0e:cd:71:0d:6d:3e:3a:be:f0:85:
8a:1a:07:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org