Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/Tr85qmhTHSg6-mgLfVF9AG7tBiU.roa
File: Tr85qmhTHSg6-mgLfVF9AG7tBiU.roa (raw, json)
Hash identifier: 6QQg2WAmh92R2KcAd28ifg/t0kEELwUANDPnEnR99Uk=
Subject key identifier: 4E:BF:39:AA:68:53:1D:28:3A:FA:68:0B:7D:51:7D:00:6E:ED:06:25
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 49
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/Tr85qmhTHSg6-mgLfVF9AG7tBiU.roa
Signing time: Wed 20 Apr 2022 09:37:41 +0000
ROA not before: Wed 20 Apr 2022 09:37:41 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:37:41 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=4EBF39AA68531D283AFA680B7D517D006EED0625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:ad:2b:84:11:53:9e:3a:ca:f9:63:dd:fa:
2a:c1:90:0f:65:33:d1:db:35:c4:08:a1:97:c2:9a:
44:be:b1:ba:49:3e:b2:cb:ce:46:07:a6:2c:d8:d8:
d0:c1:a0:a0:df:5f:3e:21:e1:96:92:16:3e:9f:7e:
f8:0e:27:99:e1:8e:4a:9d:d2:ed:f0:91:d6:0b:83:
bd:90:42:5f:32:ab:c9:4b:dc:33:1c:20:94:b8:16:
fa:95:fa:e3:6a:2d:7a:8e:12:70:35:2b:28:94:32:
f1:af:f3:ae:14:83:1d:ab:b0:c6:3e:2c:a7:5c:64:
f5:26:34:2d:1d:d2:cd:ea:c4:39:74:32:20:b0:23:
1e:56:30:73:be:17:12:08:6a:bf:20:cc:26:b9:45:
1c:5d:57:9c:65:ef:53:1b:8f:c4:c4:a3:77:da:5b:
3e:0e:ae:a8:31:b0:fd:37:4e:7b:ec:01:8d:d3:e4:
ae:85:39:46:72:cd:3b:56:8f:49:39:49:46:18:99:
77:fd:be:39:bb:56:46:c1:29:b7:ce:ca:88:f0:4f:
31:86:0a:26:a7:9b:17:ca:99:fc:09:e9:41:c6:a9:
1a:a6:04:09:a6:3c:55:9e:c6:5e:8b:d5:5e:b4:f2:
56:e9:f8:de:65:86:8e:d1:18:d7:69:91:c4:b8:8a:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:39:AA:68:53:1D:28:3A:FA:68:0B:7D:51:7D:00:6E:ED:06:25
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/Tr85qmhTHSg6-mgLfVF9AG7tBiU.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.116.0/23
Signature Algorithm: sha256WithRSAEncryption
50:7e:9d:1d:8e:df:3c:29:45:24:26:e4:b8:7b:f6:e4:b9:f1:
fa:e5:bb:3e:c5:b6:40:13:13:30:0a:23:60:86:e4:5a:6e:97:
dd:e8:9c:09:3f:44:df:5b:3a:77:f8:25:f5:39:eb:56:6e:6e:
08:8c:14:18:13:31:56:af:fa:95:65:6c:c5:4a:74:82:5c:b1:
e8:62:ae:0b:7e:1a:97:13:68:9f:35:d6:41:e5:fd:c7:5f:f9:
4b:9a:81:bd:4a:be:62:59:f3:5d:de:6e:d6:e7:c2:a0:b8:6e:
66:8b:ba:ed:b4:ab:48:6e:d0:99:5e:5b:c3:17:ea:63:f2:04:
30:e9:d1:44:af:87:a6:04:81:09:3c:67:56:ae:b0:84:e2:49:
8e:27:98:7c:0f:ab:42:5f:32:a8:55:4b:ff:ed:d1:1c:73:84:
0a:50:f0:90:f1:5e:a5:59:25:04:fa:f1:fa:58:47:d5:1f:00:
06:b6:14:c9:12:d8:25:a5:13:ae:bf:86:4e:4a:27:d8:be:22:
b1:cf:da:e2:02:60:4d:6a:e0:ea:83:1e:75:ae:c7:0a:79:bf:
80:af:9b:2c:fe:72:ab:ce:e2:bc:b9:5b:a6:13:5c:f4:52:4b:
40:ec:f1:69:0e:b3:4e:04:81:ab:ee:e2:80:9f:29:aa:e9:8d:
d8:0b:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org