Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/TrXjX9hGqSFkW0GOnPE-plsWRDg.roa
File: TrXjX9hGqSFkW0GOnPE-plsWRDg.roa (raw, json)
Hash identifier: +El/oKNIxXal+y4cDtf3cNJBz3MyfjFtzndAlVY6Hf0=
Subject key identifier: 4E:B5:E3:5F:D8:46:A9:21:64:5B:41:8E:9C:F1:3E:A6:5B:16:44:38
Certificate issuer: /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial: 3A
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/TrXjX9hGqSFkW0GOnPE-plsWRDg.roa
Signing time: Wed 20 Apr 2022 09:32:46 +0000
ROA not before: Wed 20 Apr 2022 09:32:46 +0000
ROA not after: Sat 15 Apr 2023 01:30:02 +0000
asID: 4725
IP address blocks: 202.33.32.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Validity
Not Before: Apr 20 09:32:46 2022 GMT
Not After : Apr 15 01:30:02 2023 GMT
Subject: CN=4EB5E35FD846A921645B418E9CF13EA65B164438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:0d:34:17:e8:dd:eb:12:ce:0a:86:35:bd:
1d:05:e8:be:dd:d8:4d:92:05:66:0e:bf:23:6a:98:
23:f4:7b:d9:24:8c:7d:20:1c:0a:c5:da:4d:a3:15:
e3:37:e1:ca:02:b1:48:b7:3f:b5:b8:fe:e9:f6:71:
7f:aa:fc:cb:1c:db:53:06:66:e7:24:20:65:a5:b8:
b9:cc:b1:34:fd:c7:05:9d:fd:bd:88:ed:67:52:8a:
d1:14:60:5f:a2:3b:26:cb:17:a2:61:5e:2f:30:61:
19:2c:67:3a:78:ca:ea:3e:62:a3:98:6e:5c:c2:00:
70:cd:12:49:ca:9b:ba:d9:2e:38:0a:d9:4a:6b:7c:
9f:81:a2:4e:78:50:ab:73:34:d8:b4:71:f0:86:20:
1a:29:73:85:d9:6e:39:f7:fd:04:c9:0d:ee:83:53:
e1:a4:a0:c0:75:51:f1:a7:22:2c:50:51:ef:86:97:
5e:16:3e:85:20:c1:59:63:01:54:32:ab:8a:ee:48:
67:62:46:34:93:af:41:63:92:7b:e3:34:7a:77:4a:
31:53:30:a8:0a:ba:38:09:cc:dc:79:17:00:a4:b3:
2e:ef:62:b5:f5:04:45:14:41:54:2e:d7:6b:66:3c:
5b:8f:30:08:30:86:43:a0:c6:80:96:04:3b:5e:2a:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B5:E3:5F:D8:46:A9:21:64:5B:41:8E:9C:F1:3E:A6:5B:16:44:38
X509v3 Authority Key Identifier:
keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/TrXjX9hGqSFkW0GOnPE-plsWRDg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.33.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:99:9b:50:03:60:ba:e4:35:91:74:be:d6:54:63:b6:6b:cd:
60:ec:e6:76:14:6e:ac:b4:b9:92:9e:6d:60:3e:b1:31:a5:89:
88:a6:e5:7d:5b:87:19:38:91:78:0d:61:8d:f5:9f:ba:34:3c:
20:28:08:bc:f6:f4:c1:53:90:63:ad:8f:a8:0f:4a:49:eb:cf:
d0:18:29:59:2c:13:24:37:2b:0c:f4:71:fd:fb:ef:9a:88:ae:
a8:ff:4b:9a:43:81:50:38:c0:f4:42:cb:7b:1a:ae:fd:b4:46:
a4:b1:4e:c4:ee:fa:97:c3:37:01:d4:73:d9:6e:2d:c6:a2:04:
29:80:ac:17:6c:43:35:66:38:8d:21:9a:10:28:10:6e:d7:84:
28:23:a3:bb:80:f7:0b:63:78:5b:39:fe:68:20:26:95:72:8b:
46:a5:4b:c5:c8:68:1a:76:37:ab:a5:d3:57:03:26:39:b1:16:
30:a3:36:97:dc:1d:96:ac:fb:86:aa:22:d9:39:f6:ee:4d:96:
90:54:50:d4:ad:f2:13:c3:4b:6b:10:cc:e3:57:04:56:4d:2b:
c4:ca:af:f8:c4:4c:f2:1d:6d:1b:6a:11:ed:bb:9a:bb:1b:be:
9e:a3:27:c1:53:6f:7a:28:55:52:01:20:98:9d:2e:a2:a6:a0:
a4:a6:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:18 2023 by rpki-client on console-fra.rpki-client.org