Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/NPDLI5GELPUkMOxaxDI0wEY9HnA.roa
File: NPDLI5GELPUkMOxaxDI0wEY9HnA.roa (raw, json)
Hash identifier: JsR5sjTcrxnfLWgtmQfZbYXSzUhae34ZB8kTjkqaD9I=
Subject key identifier: 34:F0:CB:23:91:84:2C:F5:24:30:EC:5A:C4:32:34:C0:46:3D:1E:70
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 3B
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/NPDLI5GELPUkMOxaxDI0wEY9HnA.roa
Signing time: Wed 20 Apr 2022 09:32:47 +0000
ROA not before: Wed 20 Apr 2022 09:32:47 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:32:47 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=34F0CB2391842CF52430EC5AC43234C0463D1E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:41:1c:52:9a:18:64:c7:4d:7f:89:e9:e3:
b8:c5:98:3d:cc:d1:b6:86:fc:4e:cb:55:0b:c6:cb:
b8:96:66:3f:17:08:1d:69:a4:85:cb:47:b6:1c:a9:
cc:2b:0e:42:66:cf:f4:0f:7d:4c:18:d5:8a:16:5d:
a4:8c:43:90:f5:71:c5:97:2a:d0:f1:d6:5f:99:8b:
e4:0c:c6:7c:82:85:d6:a5:ec:ad:53:cd:cb:fc:61:
fc:4e:18:64:3e:35:21:d5:9c:89:cc:ed:4b:d4:0e:
36:48:a2:7a:67:11:d3:80:c6:f5:10:36:94:c6:a1:
9b:b5:ec:ba:4b:1f:6b:09:7c:f6:58:4d:17:9d:ba:
57:e8:5d:9a:bd:0b:f3:0e:b4:bc:ee:90:57:bc:f6:
a6:df:4c:4e:0e:ff:56:ed:06:6e:f3:8e:10:1c:27:
1f:3d:13:c5:9d:2a:54:ae:cf:0d:e8:3e:1f:aa:c6:
54:7f:59:90:0c:e9:fe:ad:74:50:73:ab:5d:5f:1d:
da:5c:cf:88:d7:50:8e:24:33:fa:e2:6b:62:1a:84:
c7:d8:8f:6d:7a:a1:70:cb:c1:c8:f4:e8:f1:3a:29:
59:2e:26:81:69:8d:6a:76:f3:03:29:eb:89:50:ca:
75:b4:db:d9:e7:92:6b:7b:03:cd:99:4b:a6:bc:f3:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:CB:23:91:84:2C:F5:24:30:EC:5A:C4:32:34:C0:46:3D:1E:70
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/NPDLI5GELPUkMOxaxDI0wEY9HnA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:b0:0b:d5:76:2d:5b:09:fa:c1:76:8a:a6:30:d0:fa:13:1f:
92:df:6c:e9:04:ab:a9:81:84:a1:9d:a7:f1:77:f3:b0:de:b5:
50:4c:6e:d3:82:e2:fd:21:ff:2d:92:7c:b2:7f:02:f0:50:bf:
25:f8:62:fc:6e:20:61:c2:32:e7:9e:28:bf:59:0d:1b:99:d3:
aa:12:df:bc:87:d6:63:61:07:97:49:d2:90:d4:48:42:f9:44:
de:9a:8f:59:48:d9:58:f4:d5:72:ad:01:fa:ab:87:07:e9:eb:
46:18:4c:38:68:e9:f3:d2:c5:5b:44:97:62:f7:2f:42:22:e0:
d7:19:23:a3:80:26:da:4d:8e:7b:d8:db:5a:62:44:02:ae:30:
46:34:fd:3b:dc:4e:18:f8:13:2f:20:cd:25:3d:cd:fd:68:63:
f8:40:f6:21:d1:e2:4b:c2:1d:29:56:f5:11:51:95:5c:a3:92:
dc:88:70:4e:35:7d:28:05:e4:4b:0b:5d:4c:00:56:35:be:63:
e6:6c:04:8c:72:6f:3c:1c:9d:12:f5:b5:d2:a6:4e:41:55:1e:
2f:3e:29:ab:a9:1a:c7:c6:3f:e4:3e:b0:b8:83:78:61:1a:b3:
db:2f:95:7f:51:cb:59:c0:73:74:48:a7:97:60:34:6c:86:14:
02:19:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org