Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/KEexFIprM2S-GVgkM82PNrdbeF8.roa
File: KEexFIprM2S-GVgkM82PNrdbeF8.roa (raw, json)
Hash identifier: FQvAcvucu3xP3e2mGIaughCPpoO+buk25X7vb0VhNxo=
Subject key identifier: 28:47:B1:14:8A:6B:33:64:BE:19:58:24:33:CD:8F:36:B7:5B:78:5F
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 41
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/KEexFIprM2S-GVgkM82PNrdbeF8.roa
Signing time: Wed 20 Apr 2022 09:37:38 +0000
ROA not before: Wed 20 Apr 2022 09:37:38 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:37:38 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=2847B1148A6B3364BE19582433CD8F36B75B785F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:66:31:09:9e:8b:83:0f:58:0f:a3:d8:d9:
80:62:e6:c7:fb:15:d5:e5:7b:8d:71:30:3a:c5:57:
0e:f4:ad:7f:92:8e:81:d9:e1:e1:59:10:28:80:07:
83:74:04:2d:89:62:84:bb:b2:fd:91:03:08:bb:70:
ae:87:61:4d:37:9d:0f:f5:14:59:a9:c6:42:d2:cb:
ae:3c:5e:a1:a1:e5:69:b5:4a:0d:78:60:58:b2:08:
7a:80:6b:d0:b2:eb:50:c5:30:7f:d4:3e:cd:83:34:
44:90:fb:1a:77:f9:b4:d9:79:3c:b5:9c:02:e8:b5:
7c:5d:b9:62:cc:1c:26:f9:2b:eb:e8:55:ef:da:ef:
79:88:8a:0e:4f:b2:8d:99:81:43:0c:9b:39:6c:36:
03:23:70:97:b1:ba:5d:01:19:7a:33:df:7f:6d:fe:
08:24:c5:4a:e9:b0:f2:0f:6f:01:64:6f:c1:8a:5c:
d3:71:c2:f7:ed:5c:93:e0:5e:9f:18:9c:81:b7:c9:
d8:1e:48:7d:ec:a9:9c:96:36:6c:3d:5e:8b:61:ac:
da:a4:20:df:2a:5f:5e:b4:ae:bf:17:99:15:83:dd:
24:4e:c5:dc:17:da:b7:73:b3:b5:6d:c8:f2:ac:9a:
ee:bd:a0:4c:cf:36:4e:b0:59:d5:b7:01:30:f9:fd:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:47:B1:14:8A:6B:33:64:BE:19:58:24:33:CD:8F:36:B7:5B:78:5F
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/KEexFIprM2S-GVgkM82PNrdbeF8.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.176.0/23
Signature Algorithm: sha256WithRSAEncryption
34:99:1b:13:fa:a3:f4:13:ee:70:ff:08:ea:1d:67:04:1a:39:
43:8a:59:f9:9b:02:64:d1:32:38:27:46:5c:0d:68:c9:3d:ea:
7d:90:75:32:03:cb:b1:52:14:15:91:80:9b:e6:15:38:1d:c6:
a7:c6:e0:da:dd:56:fa:c4:5d:f9:ff:ce:57:e5:7d:4a:ce:bf:
11:07:1b:15:59:21:ce:9e:76:58:16:dd:17:9f:38:e2:a0:bc:
17:00:c8:c6:22:03:0b:c9:d9:cb:c6:ee:27:bc:da:e2:c3:b8:
24:db:7b:a9:76:6c:92:31:96:b2:43:d4:ac:cc:1c:8d:3c:76:
09:06:90:d4:c4:b6:67:f3:06:01:b4:47:25:e8:02:19:46:2c:
d0:94:87:2e:f4:e3:de:29:11:d8:9d:13:7c:96:5c:89:26:df:
03:c7:7b:f1:2e:2f:fb:a2:85:15:e1:71:68:b3:cf:ee:24:87:
36:c6:ca:4c:63:48:a0:1f:43:08:ed:f1:6b:16:12:59:03:28:
1e:58:98:29:03:f9:a1:d7:7b:89:bc:89:d4:81:23:3e:0f:1b:
05:9e:c6:33:44:e9:a8:67:cd:7a:07:76:25:19:9f:50:44:6c:
4f:79:13:9d:d8:8f:0c:d5:50:c3:2f:eb:00:ef:5b:a5:fd:7d:
ce:24:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org